DISCO Privacy Policy

Last updated: September 2, 2026 · Operator: Cap / Capscrew Unlimited

Contact: capscrewunlimited@gmail.com · Terms of Service

1. Overview

This Privacy Policy explains what information we collect when you use DISCO, how we use it, and your choices. It is written to align with Discord’s Developer Policy expectations for Activities and paid features, and with transparency goals under laws such as the California Consumer Privacy Act / CPRA (CCPA) where they apply.

Our public legal pages and marketing stub are intentionally tracker-light: we do not currently load Google Analytics, Meta Pixel, session-replay, or similar advertising/analytics pixels on those pages. If that changes, we will update this Policy and the “Last updated” date.

2. Information We Collect

From Discord

• Discord user ID, username, global name, avatar (via OAuth identify when you sign in or launch the Activity; additional scopes only if we request them and you approve).
• Activity instance context needed to join the correct room/session.

Gameplay & progression

• Career/profile data: display name, plaque customization, unlocked cosmetics, DiscotheCardGame ORBS balance (shown in-app as “ORBS”), inventory, match stats.
• Room/session metadata: lobby codes, seat assignments, in-game actions needed to run multiplayer.
• Feedback you voluntarily submit (category, message, optional contact).

Note: DiscotheCardGame ORBS balances are our game data, not Discord’s platform “Orbs” currency.

Payments

• If you buy DiscotheCardGame ORB packs or VIP: transaction IDs, product purchased, amount, currency, subscription status — via Stripe webhooks and/or Discord IAP records.
• We do not receive or store full payment card numbers. Stripe (and/or Discord) processes payments under their own privacy policies.

Technical (first-party / operational)

• Essential session cookies (e.g., disco_session) to keep you signed in inside the Activity iframe — required for the Service to function.
• Basic server logs: IP address, user agent, timestamps, errors — for security, abuse prevention, and debugging.
• Hosting infrastructure (e.g., Cloudflare Pages for static legal pages; Cap’s game host / future VPS) may process connection metadata as part of delivering the site.

User uploads (VIP Plaque Creator)

• Images you upload for custom plaque backgrounds, stored to provide the feature.

3. How We Use Information

• Operate multiplayer sessions and save your progression.
• Deliver purchased DiscotheCardGame ORBS, VIP benefits, and subscription entitlements.
• Prevent abuse, enforce Terms, and protect the Service.
• Respond to support and feedback.
• Improve stability and features (aggregated diagnostics where possible).

We do not sell your personal information. We do not share personal information with advertising networks or data brokers for cross-context behavioral advertising.

4. Sharing

We share data only with service providers and platforms needed to run DISCO:

• Discord — platform integration, Activity auth, and (if enabled) Discord-managed purchases.
• Stripe — payment processing for DiscotheCardGame ORB packs and VIP subscriptions.
• Hosting providers (e.g., Cloudflare for static pages; Cap’s game host / future Hetzner or similar VPS) — under our direction.
• Email — if you contact us or use feedback mail delivery.
• Law enforcement — when required by valid legal process.

These providers process data to deliver their services to us; they are not a “sale” of personal information under CCPA/CPRA as we use that term.

5. Cookies & similar technologies

• Essential / first-party: session and security cookies required to authenticate and play.
• Not currently used by us on legal/marketing pages: third-party advertising cookies, marketing pixels, or session-replay scripts that send keystrokes or form input to ad networks before you interact.
• If we later add non-essential analytics or marketing tools, we will update this Policy and, where required, seek appropriate consent or provide opt-out controls before those tools run.

6. Retention

We keep account/progression data while you use DISCO and for a reasonable period afterward for backups, fraud prevention, and legal compliance. You may request deletion of personal data by emailing us; some records (e.g., payment audit logs) may be retained as required by law.

7. Security

We use industry-standard measures (HTTPS, signed session cookies, access controls). No online service is 100% secure; use a strong Discord password and report suspected abuse to capscrewunlimited@gmail.com.

8. Children

DISCO is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided data, contact us to request deletion.

9. Your choices & California / similar rights

• Revoke DISCO’s Discord authorization in Discord User Settings → Authorized Apps.
• Cancel VIP subscriptions via Stripe/Discord billing tools.
• Request access, correction, or deletion of personal information we hold: capscrewunlimited@gmail.com (subject: “Privacy request”).
• California residents may also have rights to know, delete, correct, and to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising. Because we do not sell or share for advertising as described above, there is currently no separate “Do Not Sell or Share” toggle; email us if you believe a request still applies.

We will not discriminate against you for exercising privacy rights available under applicable law.

10. International users

Servers may be located in the United States or EU depending on hosting. By using DISCO you understand data may be processed in those regions. Where GDPR or UK GDPR applies, we process data to perform the contract (providing the game), based on legitimate interests (security, abuse prevention), and/or consent where required.

11. Changes

We will update the “Last updated” date when this policy changes. Material changes may also be announced in Discord or in-app.

12. Contact

Privacy questions: capscrewunlimited@gmail.com