Privacy Policy - ServoCrypt

1. Introduction

ServoCrypt ("we," "us," "our") values your privacy. Your data is yours, and we will never sell it. We will only share it when it is absolutely necessary for you to use ServoCrypt — for example, with Firebase (for login), Supabase (for storage), Stripe or Patreon (for payments), or infrastructure providers that keep the site running.

2. What Data We Collect

We may collect:

Account Information: Email, username, password (hashed), authentication tokens.
Usage Data: IP address, device/browser details, interaction logs for debugging and security.
Content Data: User-generated armies, crusades, planets, and campaign logs.
Payment Data: Payment details processed through trusted providers (e.g., Stripe, Patreon). We do not store raw card data.
Cookies/Tracking: Session cookies and analytics for performance and security.

3. How We Use Your Data

We use your data only to:

Authenticate and secure your account.
Provide and maintain ServoCrypt's features.
Store and sync your armies, crusades, and planets.
Process subscriptions and payments.
Detect and prevent abuse, fraud, or attacks.
Comply with legal obligations.

We do not use your data for advertising, profiling, or resale.

4. Sharing and Disclosure of Data

We do not sell, rent, or trade your personal data.

We share your data only when necessary:

Authentication/Storage: With Firebase and Supabase.
Payments: With Stripe, Patreon, or equivalent providers.
Infrastructure: With hosting services that keep the site online.
Legal Obligations: If lawfully required.
Your Consent: If you choose to link or share with another service.

That's it. No advertisers. No data brokers. No back doors.

5. Data Security and Retention

Data is encrypted in transit (TLS) and at rest where appropriate.
Access is restricted to authorized staff and systems.
We retain your data only while you have an account. When you delete your account, we delete your personal data within a reasonable timeframe, except where required by law (e.g., billing history).

6. International Transfers

If your data is processed outside your country, it will be handled with equivalent safeguards.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

Access, correct, or delete your data.
Download/export your data.
Restrict or object to processing.
Opt out of marketing communications.

Contact us at Discord to exercise these rights.

8. Children

ServoCrypt is not intended for children under 13 (or the age required in your jurisdiction). We do not knowingly collect personal data from minors without verified parental consent.

If we discover a child has created an account without consent, we will:

Provide parents/guardians access to all of their child's data upon request.
Permanently delete the child's account and associated information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Major changes will be announced via email or in-app notices.