📜 Privacy Policy

This privacy policy explains how Nyarlabotep (the "Bot") collects, uses, and protects your data when you use our Discord bot and web interface for managing Call of Cthulhu and Delta Green campaigns.

Last Updated: December 27, 2025

Discord Data

• User ID: Your Discord user ID (a unique number assigned by Discord)
• Username: Your Discord username and avatar
• Guild Membership: The Discord servers (guilds) you share with the bot
• Roles: Your roles in Discord servers to determine GM permissions

Character Data

• Character sheets you create or import (names, characteristics, skills, spells, etc.)
• Game session data (marked skills, spell learning progress, challenges)
• Character portraits (if uploaded)

Session Data (Web Interface Only)

• Session Cookies: Essential cookies to maintain your login state
• Selected Guild: Your currently selected Discord server for the session

What We DON'T Collect

• Message content from Discord channels
• Personal information beyond what Discord provides (email, phone, etc.)
• Browsing history or analytics tracking
• Payment or financial information

• Authentication: To verify your identity via Discord OAuth2
• Character Management: To store and retrieve your Call of Cthulhu character sheets
• Game Features: To track spell learning, skill improvements, and challenge progress
• Guild Isolation: To keep your character data separate between different Discord servers
• GM Features: To allow Game Masters to manage NPCs and view campaign data

We do NOT:

• Share your data with third parties
• Use your data for advertising or marketing
• Sell or monetize your information
• Track your behavior across other websites

This website uses strictly necessary cookies for authentication and core functionality:

Session Cookies

• Purpose: To maintain your login state via Discord OAuth2
• Type: Session cookies (deleted when you close your browser)
• Legal Basis: These cookies are essential for the service to function and do not require consent under GDPR
• Data Stored: Session ID, Discord user information, selected guild ID

We do NOT use:

• Analytics cookies (Google Analytics, etc.)
• Advertising or tracking cookies
• Social media cookies (except Discord authentication)

Storage Location

• Character data is stored locally on the server running the bot
• Data is organized by Discord guild (server) ID to ensure isolation
• No cloud storage or external databases are used

Security Measures

• Guild-scoped data isolation (your data is separated by Discord server)
• Role-based access control (GM-only commands require appropriate Discord permissions)
• Session-based authentication with secure tokens
• Input validation and sanitization to prevent injection attacks

Data Retention

• Character data is retained as long as the character exists in the system
• Session data expires when you log out or close your browser
• You can delete your character data at any time using /delete-character in Discord

If you are located in the European Union, you have the following rights:

• Right to Access: You can view your character data at any time using /character or /export-character
• Right to Rectification: You can modify your character data using the adjustment commands or web interface
• Right to Erasure: You can delete your character using /delete-character in Discord
• Right to Data Portability: You can export your character data as JSON using /export-character
• Right to Object: You can stop using the bot at any time by deleting your character

This bot relies on the following third-party service:

Discord (OAuth2 Authentication)

• Purpose: User authentication and identification
• Data Shared: Discord user ID, username, avatar, guild memberships
• Discord's Privacy Policy: https://discord.com/privacy

By using this bot, you are also subject to Discord's Terms of Service and Privacy Policy.

This bot is intended for users who are 13 years of age or older (in compliance with Discord's Terms of Service). We do not knowingly collect data from children under 13.

If you believe a child under 13 has provided data through this bot, please contact the server administrator.

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date.

For significant changes, we will notify users through the Discord bot or web interface.