LEGAL · Privacy
Privacy Policy
Last updated: April 2025
1. Information We Collect
When you sign in with Discord we receive your Discord user ID, username, discriminator, and avatar. We store this alongside your session and any in-game profile data you choose to add (faction IDs, player names). We log server-side events (errors, usage metrics) to improve reliability. We do not collect payment card details — those are handled directly by Stripe.
2. How We Use Your Information
We use collected data to operate the service (authenticate you, display your profile and alliance data), to send you notifications you have opted into (Discord DM alerts, web push), to process your subscription via Stripe, and to improve the product through aggregated analytics. We do not sell your personal data to third parties.
3. Data Sharing
We share data only with the sub-processors necessary to run the service: Hetzner (hosting), self-hosted PostgreSQL (database), Stripe (payments), Discord (OAuth and notifications), PostHog (analytics). Each sub-processor is bound by their own privacy policy and, where applicable, a Data Processing Agreement.
4. Cookies and Tracking
We use a session cookie to keep you signed in and a referral cookie to attribute sign-ups. Analytics events are sent to PostHog using a self-hosted ingress proxy so your data does not leave our infrastructure uncontrolled. You can disable cookies in your browser; the service will not function without the session cookie.
5. Data Retention
Account data is retained while your account is active. You may delete your account at any time from the settings page, which will remove your personal data from our systems within 30 days, except where retention is required by law (e.g., payment records retained for 7 years for tax purposes).
6. Your Rights
Depending on your location you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond within 30 days.
7. Security
We use HTTPS for all data in transit, database encryption at rest, and access controls to limit who can read production data. No system is perfectly secure; if you discover a vulnerability please disclose it responsibly to our contact address.
8. Changes to This Policy
We may update this policy. Material changes will be announced via the Discord server or the in-app announcement banner. Continued use of the service after changes take effect constitutes acceptance of the revised policy.
9. Contact
Questions about this policy? Email us at [email protected] or open a support ticket via the Discord bot (/support).