Privacy Policy

Last updated: March 27, 2026

1. Data Controller

Last War Server Manager ("we", "us") is the data controller for your personal data processed through this service.

2. Data We Collect

2.1 Via Discord OAuth2 Login

• Discord User ID — unique identifier
• Username / Display Name
• Avatar URL
• Email address (if you grant the email scope)
• Server list — only servers where you have management permissions, used to let you select which server to manage

2.2 Via Bot Usage (in Discord)

• Player verification data — player name, alliance tag, rank, extracted from screenshots via OCR
• Message metadata — message IDs and channel IDs for cross-post translation linking (not message content)
• Server configuration — alliance names, language preferences, feature toggles

2.3 What We Do NOT Collect

• We do not store your Discord password
• We do not store uploaded screenshot images (only the OCR-extracted text)
• We do not read or store private messages
• We do not sell or share your data with third parties

3. How We Use Your Data

• To authenticate you and manage your dashboard session
• To verify players and assign roles in your Discord server
• To provide cross-posting and translation between language channels
• To display statistics and logs in the web dashboard

4. Data Storage & Security

• Data is stored in an SQLite database on our server
• Sessions use HttpOnly, Secure cookies with cryptographic signing
• All web traffic is encrypted via HTTPS (when using a reverse proxy with TLS)
• Access to the admin panel requires Discord authentication

5. Data Retention

• Account data is retained while your account is active
• Verification logs are retained for 90 days
• You can request deletion of your data at any time

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Object — object to processing of your data

To exercise these rights, contact us via our Discord support server.

7. Third-Party Services

• Discord API — for authentication and bot operations (Discord Privacy Policy)
• LibreTranslate — self-hosted translation engine (no data sent to external services)

8. Children's Privacy

The Service is not intended for users under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy. We will notify users of significant changes via our Discord support server.

10. Contact

For privacy-related questions, contact us via our Discord support server.