Privacy Policy

Last Updated:

This Privacy Policy explains how Gachan ("we", "us", or "the Service") handles your information. We are committed to transparency and data minimization—collecting only what is required to make the game work.

1. Data Collection

We collect and store the following data from your Discord profile:

• Account Identifiers: Your unique Discord User ID.
• Public Profile: Username, Display Name, and Avatar URL (cached for display in-game).
• Guild Information: Server IDs where you play, required for guild features and regional rankings.
• Security Data: IP addresses are hashed and encrypted for the sole purpose of preventing bot farms and multi-account abuse.

2. Gameplay Data

We generate and store data specific to your progress:

• Inventory records (Cards owned).
• Currency balances (Gold/Gems).
• Combat statistics (Wins, Losses, Power level, Rank).
• Match history and active session states.

3. How We Use Data

We process your information to:

• Operate the matchmaking system.
• Display your profile on global leaderboards.
• Provide access to the web-based dashboard and marketplace.
• Secure our infrastructure against malicious attacks.

4. Data Sharing & Third Parties

Gachan does not sell your data. We share information only with our core infrastructure providers (Discord, Railway, Supabase, etc.) to keep the service online. We do not provide user data to advertisers or external marketers.

5. Cookies & Tracking

Our website uses essential session cookies to keep you logged into the dashboard. We do not use tracking pixels or cross-site advertising cookies.

6. Your Rights & Deletion

You have the right to access and delete your data at any time.

• Self-Service Deletion: You can trigger permanent account deletion via the "Danger Zone" on your Dashboard.
• Removal: Removing the bot from your server or leaving a guild does not automatically delete your global profile unless you request it.

7. Data Retention

Active player data is kept indefinitely to allow you to play across different servers. Inactive accounts (no activity for 12+ months) may be periodically archived or deleted to save resources.

8. Contact

For any privacy concerns or data access requests, please contact the developer via our Support Server.