Last updated: August 6, 2026
1. Introduction
This Privacy Policy describes how we collect, use, and protect your information when you use our web application, our APIs, or our Discord bot (collectively, the "Service"). By using the Service, you consent to the practices described in this Privacy Policy. This policy covers both the website and the Discord bot, which share the same underlying data storage.
2. Definitions
- Personal Data: Information that identifies or can be used to identify an individual, such as an email address or Discord user ID.
- User Content: Data you submit to the Service, such as character information, gear lists, scheduling availability, and screenshot text corrections.
- Usage Data: Data collected automatically, such as IP addresses, browser details, pages visited, and timestamps of site usage.
- Third-Party Services: External services, such as Discord, Google, Supabase, and Vercel, that help operate or enhance our Service.
3. Information We Collect — Website
- Account Data: When you sign in through Discord or Google, we receive information associated with that account, such as your name or username, email address, and profile picture.
- User Content: Character data, gear and item information, income and progression settings, and scheduling availability you enter into the Service. If you use the gear tracker's screenshot recognition, screenshots are processed to extract item text; when a recognition result is corrected, the corrected text-to-item mapping (not the screenshot) may be stored to improve recognition for all users.
- Usage Data: We use privacy-focused analytics (Vercel Analytics) to collect aggregate information about page visits and site performance. We do not use this data to build individual profiles.
4. Information We Collect — Discord Bot
When you interact with our Discord bot (the "Bot"), we collect and store the information needed to provide its features:
- Discord Identifiers: Your Discord user ID and username, and the server and channel IDs where Bot commands are used, so the Bot can post updates, reminders, and notifications in the right place.
- Command Inputs: The options you provide to Bot commands, such as schedule details, character selections, and availability votes.
- Linked Account Data: If your Discord account is linked to a website account, the Bot can read the characters and related data stored under that account in order to fulfill your commands (for example, character sharing and income commands).
The Bot does not read or store general channel messages. It only processes the slash commands and interactions directed at it.
5. How We Use Your Data
- To provide, operate, and improve the Service, including the Bot's features.
- To authenticate you and manage your account.
- To deliver the notifications you request, such as schedule announcements, reminders, and start-time pings in Discord.
- To analyze aggregate site performance and to secure the Service against abuse.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your personal data, and we do not use it for advertising.
6. Sharing and Public Visibility
Some features are designed to make your content visible to others. Please be aware that:
- Share Links: If you (or the Bot, at your request) generate a share link for a character, anyone with that link can view the shared character without signing in.
- Discord Channels: Content the Bot posts — character embeds, schedule announcements, participant rosters, and pings — is visible to everyone who can view the Discord channel it is posted in.
- Scheduling: Your availability, username, and selected character for a schedule are visible to the schedule's host and other participants.
- Service Providers: We use third-party providers — Supabase (database and authentication), Vercel (hosting and analytics), and Discord (Bot platform and sign-in) — that process data on our behalf. Character images may be loaded from Nexon's official image services, which means your browser or the Bot may request those images directly from Nexon.
- Legal: We may disclose data to comply with legal obligations or in connection with a merger, acquisition, or sale of assets.
7. Cookies and Tracking Technologies
We use cookies that are essential for signing in and keeping your session active. Our analytics are aggregate and do not rely on cross-site tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may prevent you from signing in.
8. Data Retention
We retain your data only as long as necessary for the purposes outlined in this Privacy Policy. In particular:
- Account data and User Content are retained until you delete them or request deletion of your account.
- Scheduling data (including availability votes and participant lists) is automatically deleted shortly after a schedule ends, expires, or is cancelled.
- We may retain limited data longer where required to comply with legal obligations or resolve disputes.
9. Security of Your Data
We implement industry-standard measures to protect your data, including encrypted share tokens (so shared content cannot be enumerated by guessing IDs) and database access rules that restrict your stored content to your own account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Content you deliberately share — via share links or Discord channels — is outside these protections once shared.
10. Your Rights
Depending on your jurisdiction (including under the California Consumer Privacy Act), you may have the right to:
- Request access to the personal data we have collected about you.
- Request correction or deletion of your personal data, subject to certain exceptions.
- Opt out of the sale of your personal data (we do not sell personal data).
This includes data collected through the Bot: you may request deletion of your Discord-linked data at any time. Note that removing the Bot from a server or leaving a server does not by itself delete previously submitted data — contact us to request deletion. To exercise any of these rights, contact us at support@devnayr.com.
11. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective upon posting, and the "Last updated" date above will reflect the latest revision. Your continued use of the Service constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or how your data is handled — on the website or through the Bot — contact us at support@devnayr.com.