Plain-language summary first — details below. Questions? Contact us on the Discord server.

What we collect

• Discord identity: your Discord user ID and username, received when you connect Discord (OAuth "identify" scope only). Used to link you to at most one community account and to deliver your login details by DM.
• Your chosen username and the resulting account email.
• Login credentials: your temporary password is stored only in encrypted form (AES-256-GCM) so the website can re-show it to you if you need it again. Staff cannot read it; we never see your Discord or Microsoft passwords.
• Abuse-prevention data: a one-way salted hash of your IP address and your browser user-agent, used only for rate limiting and abuse prevention. We do not store raw IP addresses.
• Cookies: a login session cookie, a security (CSRF) cookie, and a short-lived cookie that lets you retrieve your details right after creation. These are strictly necessary; the site sets no advertising or tracking cookies itself.

What we do not do

• We do not sell or share your personal data.
• We do not post on your behalf or read your messages.
• We do not send marketing emails (accounts are provisioned, not mailed).

Third parties involved

• Discord: sign-in and DM delivery are handled by Discord. Their handling of your data is described in Discord's own privacy policy.
• Microsoft: community accounts live in a Microsoft tenant. Your use of Microsoft services after sign-in is covered by Microsoft's privacy statement.
• Google AdSense: the website shows ads from Google. Google may use cookies to serve and measure ads; see Google's Advertising Policies and the Google ads settings page, where you can control personalized advertising. We never gate features behind ad clicks.

Retention and deletion

• Temporary passwords expire on a timer; expired credentials cannot be retrieved.
• Rate-limit records and audit entries are kept short-term for abuse prevention.
• You can request deletion of your account and stored data at any time by asking staff in the Discord server. Deleting removes your Discord link, username reservation, and stored credentials.

Children

The community is intended for members of the Discord server. If a member is below the age of digital consent in their country, a parent or guardian should manage the account and contact us about any data questions.

Changes

If this policy changes materially, we will announce it in the Discord server's announcements channel.