🔒 SECURITY & DATA PRIVACY

Privacy Policy

Effective Date: September 12, 2026 • Version 2.5

This Privacy Policy describes how Last War Companion ("we", "us", "our") collects, uses, stores, and protects your information when you interact with our Discord Bot, Web Application, and companion tools.

1. Information We Collect
2. How We Use Data
3. Payment Security & Paddle
4. Third-Party Infrastructure
5. Data Retention & Rights
6. Cookies & Storage
7. Contact & Inquiries

1. Information We Collect

We operate under strict data minimization principles. We never ask for, collect, or store in-game passwords, account credentials, or private communication messages:

Discord Technical Identifiers: Discord User ID, Discord Username, Server (Guild) ID, and Channel IDs designated by server administrators for automated bot feeds and alert deliveries.
Public In-Game Commander Names & UIDs: Submitted voluntarily by commanders during member role verification (/verify).
Public Game Data: Publicly accessible alliance rosters, player power metrics, troop composition stats, and base map coordinates indexed via public game server telemetry.
Command Telemetry & Error Logs: Timestamps and command names recorded to detect bugs, enforce anti-abuse rate limits, and maintain high system reliability.

2. How We Use Your Information

We process collected identifiers solely to provide core game companion functionality:

Synchronizing and granting Discord server roles (Alliance Leader R5, War Officer R4, Member) when players verify.
Delivering automated peace shield expiration DM notifications (/shieldnotify) to alert players before their bases are attacked.
Generating alliance roster audit reports (/audit) and team balancing for Desert Storm events (/dsplan).
Validating active Alliance Pro subscription entitlements for connected Discord servers.

3. Payment Security & Paddle Merchant of Record

Zero Credit Card Storage: We do not collect, process, or store credit card numbers, debit cards, or bank credentials on our servers. All transactions are securely conducted by Paddle.com.

Paddle acts as our Merchant of Record for all orders. Paddle securely handles payment processing, currency conversions, sales tax and VAT compliance, fraud detection, and customer billing in strict compliance with PCI-DSS Level 1 standards.

4. Third-Party Infrastructure & Data Sharing

We do not sell, rent, monetize, or trade your personal data with advertising brokers. We exchange technical requests only with trusted infrastructure providers required to operate the bot:

Discord Inc.: To receive slash command interactions and update server member roles.
Paddle.com Market Limited: To manage subscription checkouts, invoice receipts, and automated recurring billing.
Oracle Cloud Infrastructure (OCI): For high-availability cloud server compute and encrypted database storage.
Cloudflare: For CDN caching, SSL encryption, and DDoS edge protection.

5. Data Retention & Erasure Rights

Commanders maintain full sovereignty over their linked data:

Self-Service Unlink: You can decouple your in-game identity from your Discord account at any time using /unlink.
Server Reset: Server administrators can remove or reset all stored guild associations using /setup or by kicking the bot.
Right to Erasure (GDPR / CCPA): To request permanent deletion of all stored verification records associated with your Discord ID, email n0nyf0xy@duck.com. All records are purged within 24 hours.

6. Cookies & Browser Storage

Our web application uses standard browser localStorage solely to remember local UI preferences (such as selected language or table filters). We do not load third-party advertising tracking cookies, Facebook pixels, or tracking beacons.

7. Contact Information

For privacy questions or data deletion requests, contact our team at n0nyf0xy@duck.com or join our Discord Support Server.