Legal
Privacy policy
TODO: this page is a structure, not a policy. Every section below needs review by counsel before launch. Nothing here is legal advice and nothing here should be relied on.
Who we are
Identity of the operator, contact address, and the jurisdiction the service is operated from.
What the site collects
The marketing site sets no cookies and loads no third-party script. Four aggregate events are recorded when an analytics endpoint is configured: a demo was started, a demo was locked, a call to action was clicked, and an install returned. Each carries the event name, the section of the page, the path and a timestamp. No identifier is minted and nothing is written to your browser’s storage. The full list is in docs/site-analytics.md.
What the Discord app collects
Discord user id, the server id, and the interactions you make with the app. Needs completing against the live implementation.
What is on chain
What a public chain necessarily records, what it does not, and why that cannot be deleted on request.
Retention and deletion
How long each category is kept and what happens when the app is removed from a server.
Processors
Hosting, chain RPC and indexing providers.
Your rights
Access, correction, deletion, and the limits a public ledger places on the last of those.
Children
Age policy, the points tier, and the rules that apply to school instances.
Changes and contact
How changes are announced and who to write to.