Privacy Policy

1What we collect

• Discord sign-in: your Discord user ID, username, avatar and which of your servers belong to your state. We never see your Discord password.
• Google sign-in: only Google's ID number for your account, so we know it's you next time. We don't ask Google for your name or email address.
• Apple sign-in: only Apple's ID number for your account. We don't ask Apple for your name or email address.
• Email code sign-in: we use your email address to send the code, then keep only a scrambled (one-way hashed) version to recognize you next time, plus a hidden form like j•••@gmail.com that only you see. Codes are stored scrambled and work for 10 minutes.
• The phone app: the same things as the website, plus the screenshots you choose to send (picked in the app or shared from your photos), and your phone's alert address if you turn alerts on. The app doesn't read your other photos, contacts or location.
• The iPhone screenshot shortcut: the screenshots you choose to send with it. Each one is checked by AI the moment it arrives; anything that isn't a Whiteout Survival screen is deleted within seconds, without being read for details or kept. You can remove game screenshots on My card before they're read. Your shortcut key is kept only as a scrambled fingerprint.
• Game details: your in-game name and Chief ID, and what you or your leaders add: screenshots of heroes, gear and troops, event sign-ups, plans and notes.
• Game data from third parties: public numbers about players and alliances in your state, like power, ranks, rosters and public world chat, from game data services.
• Use of the service: pages and features used, errors, and AI usage counts, so we can run, fix and bill the service.
• Contact form: what you send us on woshq.gg.

We don't receive your card number or bank details: Paddle handles payments. We don't sell your data and we don't show ads.

2How we use it

• To run your state's hub: rosters, cards, plans, reminders and Discord posts.
• To read screenshots and write text with AI, when your hub uses those features.
• To keep the service safe, fix problems and handle billing.
• To answer you when you contact us.

3Who we share it with

• People in your hub: leaders and members of your state see what the hub shows them, depending on their access.
• Paddle: our reseller and Merchant of Record processes payments and keeps its own records as an independent controller, under its privacy policy. We get your Paddle customer and subscription IDs and payment status, not your card details.
• Providers that run the service for us: Cloudflare (hosting), Supabase (database and file storage), Anthropic (AI reading of screenshots and text; not used to train its models under our agreement), Discord (sign-in and the bot), Apple (sign-in if you choose it), Google (sign-in if you choose it, Google Sheets if your hub links them, and Firebase to deliver Android alerts), Resend (sends email sign-in codes), and Expo (builds the phone app and delivers its alerts).
• When the law requires it.

4When the WOS HQ team looks at your hub

• The WOS HQ team opens a state's hub only to help, and only the way the state allows in Tools > Support access: ask the owner every time (the default), let them in and tell the owner, or never.
• Every request says why. Visits end on their own after 1, 4 or 24 hours, are view only unless the owner allows changes, and the owner can end one at any time. Plans the owner hides (SvS, FDT, TAL, Foundry, Canyon) stay hidden during a visit.
• Emergency access is only for a broken hub. It lasts 1 hour, needs a reason, and the owner is told at once.
• During an SvS season, nobody on the team can open a state matched against their own state, or in their state's bracket before the draw.
• Every request and visit is kept in the state's own log, with the pages opened and changes made. The team can't edit or delete it.
• Features that compare states use only public game data. One state's hub data is never shown to another state.
• People who run the database (the platform owners) can technically see stored data. They look only to keep the service running or fix a problem.

5Where it's kept and for how long

Data is stored with the providers above, mainly in the United States. We keep a hub's data while the hub exists, plus backups for a short time after. When a hub is removed, its data is deleted within 90 days, except records we must keep for tax or legal reasons.

6Your choices and rights

• Unlink your game account, turn off Discord DMs, or turn off phone alerts in your hub profile or the app.
• Delete your account any time: in the hub, Profile > Sign-in methods > Delete my account, or in the app, More > Delete my account. This removes your sign-in methods, linked game accounts, alerts and settings, and signs you out everywhere. Your player card and game data stay with your state's records, because leaders use them for plans; ask through the contact form to remove them too. See woshq.gg/delete-account.
• Ask us to see, fix or delete your data, or to stop using it, through the contact form. Depending on where you live (for example the EU, UK or California) these are your rights by law, and you can complain to your data protection authority.
• For payment data, contact Paddle as its privacy policy describes.

7Children

The service isn't for children under 13, or under the age Discord or the game requires where you live. If you think a child gave us data, contact us and we'll delete it.

8Changes to this policy

We post changes here and update the date at the top. Big changes are announced in the hub.