Who runs this
Token Curse is a small fan-made site. Contact: [contact email].
What stays on your device
Four small values live in your browser and never leave it on their own:
- Your checklist progress, in local storage under the key
oot-s2-gs-v1(a list of token numbers). - Your cookie choice, in local storage under the key
tc-consent-v1(“granted” or “denied”). - Your language, in a cookie named
locale, only once you pick a language in the menu (hamburger button, top right). Until then the site follows your browser's language setting. - Your theme, in local storage under the key
tc-theme-v1(“light” or “dark”), only once you press the theme button in the menu (hamburger button, top right). Until then the site follows your system setting.
All four are strictly necessary for the site to work as you asked, so no consent is needed for them. “Clear all” deletes your progress; clearing site data in your browser deletes everything.
Sending progress to another device
When you press “Send to another device”, the site sends only a 28-character string (GS- followed by 25 letters and digits) to our server. It is stored in a database (Upstash Redis) under a random 5-digit code and deleted after the first use or after 10 minutes, whichever comes first. The string encodes which of the 100 tokens you have checked and nothing else. Nothing is sent until you press that button.
Your IP address is used only to limit how many codes can be created or tried per hour. Those counters expire within an hour. There are no accounts and no profiles.
Ads and consent
No ad or other optional third-party content loads before you press “Accept” on the banner. If you reject, nothing optional loads. You can change your choice at any time with “Cookies” in the menu (hamburger button, top right); after withdrawing consent, reload the page to make sure anything already loaded is gone. If an ad provider is enabled, it will be named here.
No analytics
This site uses no analytics and no tracking scripts.
Fonts
Fonts are bundled with the site, so your browser makes no request to Google at runtime.
Your rights
Under the GDPR you can ask what data we hold about you, ask for it to be erased, and complain to your data protection authority. Since we store nothing that identifies you beyond a short-lived rate-limit counter, the quickest way to erase everything is to clear this site's data in your browser.
Disclaimer
Token Curse is an unofficial fan-made site. It is not affiliated with or endorsed by Nintendo. Game, place and item names are trademarks of their owners.