Legal

Privacy Policy

Last updated: —

Website: thebadfisharmada.com
Community: The BadFish Armada Discord server

This policy explains what the BadFish Guild Portal ("the Portal", "we") collects, why, who can see it, and how to have it removed. In short, we collect only what the guild tools need, we never sell it, and there are no ads or tracking.

1. What We Collect

From Discord when you log in (the identify and guilds scopes):

  • Your Discord user ID, username and avatar.
  • The list of servers you are in. We use it once, at login, to confirm you belong to The BadFish Armada. We don't store it.

We never see your Discord password or email address, and we don't keep your Discord login token after sign-in.

What you create on the Portal:

  • Game profiles: which games you've joined, your class, combat role, rank, DKP and any armory link.
  • Path of Exile 2 (optional): your PoE account name, character name and Path of Building link, plus a saved copy of your character's public gear.
  • Events: your sign-ups and their status (going, tentative or bench), group assignments, attendance and no-shows.
  • Loot: items you received, auction bids, wishlist items and notes, and your DKP history.
  • Applications and requests: recruitment applications and game requests, including any message you write.

Collected automatically:

  • Activity log: a record of actions on the Portal, such as logins, sign-ups, rank changes, DKP and loot changes, and edits by leadership. Each entry includes the username of the person who acted and of anyone affected. Admins use it to resolve disputes and spot abuse.
  • Rate limiting: to prevent spam, we briefly count requests per account. If you aren't logged in, we count by IP address instead. These counters are deleted automatically within minutes.

2. How We Use It

  • To log you in and check that you are a member of the server.
  • To run rosters, events, DKP, loot, auctions, recruitment and game requests.
  • To give you or remove a game's Discord role, post announcements in the server, and send you a direct message reminder before events you signed up for.
  • To show guild-wide totals on the home page, such as member and event counts.

We don't use your data for advertising or profiling, and we don't sell, rent or trade it.

3. Who Can See Your Data

  • Other members of a game can see that game's roster, including names, avatars, class, role, rank and DKP, along with event sign-ups, loot history and auction bids.
  • Officers and Leaders of a game can also see recruitment applications and attendance records. Leaders can also see the game's full DKP log.
  • Site Admins can see everything, including the activity log.
  • The Discord server: announcements, application posts and game requests posted by the bot can be read by anyone with access to that channel.

4. Cookies

We set one cookie, badfish_session. It is a signed, HTTP-only cookie that keeps you logged in. It lasts 7 days or until you log out. We don't use tracking, analytics or advertising cookies.

5. Services We Rely On

Your data is shared only with the services needed to run the Portal:

  • Cloudflare hosts the Portal and its database (Cloudflare Pages, Workers and D1). Like any web host, it processes your IP address and request details to serve the site.
  • Discord handles login, roles, channel posts and direct messages.
  • Grinding Gear Games and pob.in, only if you link a Path of Exile 2 character. We send your account and character name to their public APIs to fetch your gear.
  • Public CDNs (Tailwind, cdnjs and Google Fonts) deliver the page's styling, icons and fonts. Your browser connects to them directly, so they receive your IP address.

The "Support development on Ko-fi" link in the footer is just a link. Nothing from Ko-fi loads on the Portal. If you visit Ko-fi, its own privacy policy applies, and we never receive your payment details.

6. How Long We Keep It and How to Delete It

  • While you're a member: we keep your data while you use the Portal.
  • Leaving a game: a game's Leader can remove you from its roster. This deletes your profile for that game and takes away its Discord role.
  • Deleting your account: message @thefolz or an Admin on Discord. Deleting your account removes your user record, game profiles, sign-ups, applications, bids and wishlist, and takes away the game roles the Portal gave you.
  • Historical records: to keep guild history consistent, past DKP history, loot records and activity log entries keep your username as plain text after your account is deleted.
  • Leaving the server: if you leave the Discord server, you can no longer log in, but your data stays until you or leadership asks for it to be deleted.

7. Security

Sessions are cryptographically signed. Only authenticated Portal features and Admins can access the database. All traffic is encrypted over HTTPS. No system is perfectly secure, but if a breach affects your data, we'll tell the community on Discord.

8. Children

The Portal is not intended for anyone under 13, or under the minimum age Discord requires in your country. If you believe a child's data is stored here, contact us and we'll delete it.

9. Changes to This Policy

If what we collect or how we use it changes, we'll update this page and the date at the top, and announce significant changes in the Discord server.

10. Contact

For questions or deletion requests, reach out on Discord:

  • Discord: @thefolz
  • Server: The BadFish Armada

Discord's own handling of your data is covered by Discord's Privacy Policy. See also our Terms of Service.