Privacy Policy

LMI (lmi.gg) is operated by Nine18, LLC, Utah, USA ("we", "us", "our"), which is the controller of the personal data described here. This policy covers lmi.gg and the RDR2 Companion at lmi.gg/rdr2. BreachReport (lmi.gg/breachreport and its Discord bot) is covered by its own privacy policy.

1. What we collect

• Sign-in data. When you sign in with (or link) Google or Discord we receive your name, email address, profile picture, account ID and whether the email is verified, plus sign-in tokens from that provider, which we store with your account. We never receive your Google or Discord password.
• Session data. Sign-in cookies keep you logged in; they are strictly necessary for the site to work. With each sign-in session we store the IP address and browser/device (user agent) it came from, to keep your account secure. Sessions expire and are deleted automatically.
• Tracker progress. The items you tick off (and when each item was completed), your saved preferences, and materials counts in the RDR2 tracker, tied to your account.
• Storage on your device. Some tracker conveniences (for example the currency converter's last value) are saved in your browser's local storage and never sent to us. Cloudflare may set strictly necessary security cookies to protect the site from abuse. Advertising cookies and similar identifiers are described in section 4.
• Feedback and support. If you email us at [email protected], we keep the message and your email address so we can reply.
• Basic technical data. Our servers and providers (see section 3) log IP addresses, browser type and the pages requested, to deliver and secure the site. These logs are kept for a limited period.

2. Analytics

We use Cloudflare Web Analytics to count visits and see which pages are used. It is cookieless: it sets no cookies and does not use local storage or fingerprint you, so it does not need a consent prompt.

3. How we use it and who processes it

We use your data to sign you in, save your progress, keep the site secure and working, and answer your emails. We do not sell your personal information for money. Showing ads works differently: our advertising partner (section 4) may collect data from your browser to choose and measure ads, which some US state laws call "sharing" for cross-context behavioral advertising.

• Google and Discord — sign-in.
• Railway — hosting and databases.
• Cloudflare — DNS, network security, and the cookieless site analytics above.
• Cloudflare (Email Routing) and Google (Gmail) — handle email you send to [email protected].
• Google AdSense — shows and measures ads on the public pages of the site (section 4).
• Google Fonts — the site's typeface (Inter) is loaded from Google's servers, so your browser sends your IP address and browser details to Google when a page loads. See Google's privacy policy.

4. Advertising and cookies

We show ads on some pages using Google AdSense. Google and its advertising partners use cookies and similar technologies (including device identifiers and your IP address) to serve ads, limit how often you see them, measure how they perform, and, unless you opt out, personalise them based on your visits to this and other sites. We do not give Google your account details, sign-in data or tracker progress for this.

Where the law requires it (for example in the EEA, UK and Switzerland) we ask for your consent through a message before ads that use cookies or personalised data are shown, and you can decline or change that choice later. You can also manage ad personalisation through Google's ad settings, learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and opt out of interest-based ads from many companies at optout.aboutads.info. Your browser settings can also block or delete cookies, though some parts of the site may then work less well.

5. Legal bases and international transfers

We process your account and progress data because it is necessary to provide the service you asked for (contract), and we process security data and logs for our legitimate interest in keeping the site secure and working. We are based in the United States and our providers process data in the United States. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.

6. Retention and deletion

We keep your account and progress while your account exists. To delete your account and its data, email [email protected] from the address on the account; we will delete it within 30 days. Backups may keep copies for a short additional time. A self-serve delete option is planned for later. You can wipe your RDR2 tracker progress yourself from the tracker's Profile page.

7. Your rights

Depending on where you live (for example the EEA, UK, or certain US states) you may have the right to access, correct, delete, or port your data, and to object to certain processing. Email [email protected]. If you are in the EEA or UK you can also complain to your local data protection authority.

8. Security

We use encrypted connections and restricted access to our infrastructure. No system is 100% secure.

9. Children

LMI is not directed at children under 13, and we do not knowingly collect data from them. You must be at least 13 (or the minimum age in your country) to use it. If we learn we have collected data from a child under 13 (or under the age of digital consent where you live), we will delete it.

10. Not affiliated

LMI is an independent fan-made tool. It is not produced by, endorsed by, or affiliated with Rockstar Games or Take-Two Interactive. Red Dead Redemption is a trademark of its respective owner.

11. Changes

We may update this policy; changes are posted here with a new date.

12. Contact

[email protected]