PRIVACY POLICY
Last Updated: October 28, 2026 • Effective Immediately
1. Information We Collect
We adhere to the principle of data minimization. We only collect the minimal information necessary to deliver the gacha game, authenticate your sessions, and display your card collection:
Discord Identity Data
When you log into our web portal via Discord OAuth2, we receive your Discord User ID, Username, Global Name, and Avatar CDN URL under the strict identify scope. We do NOT request your email address, guild memberships, or private messages.
Gameplay & Inventory Data
Your cards, Ace tiers, combat kills, power calculations, crate drops, currency balances (energy, tokens, crystals, Sukuna fingers), arena presets, and daily streaks are linked solely to your unique Discord ID.
Technical & Session Information
HttpOnly encrypted session cookies, ephemeral rate-limiting tokens, and standard server connection logs (IP address and browser User-Agent) to mitigate DDoS attacks and protect the API.
2. How We Use Your Information
- To associate your in-game cards and inventory with your account across Discord and the web.
- To render your personal collection on the Sorcerer Dashboard.
- To calculate PvP leaderboard rankings and battle results.
- To prevent fraud, automated bot exploitation, and database abuse.
3. Data Sharing & Third Parties
We do NOT sell, lease, or monetize your personal data. Data is never shared with third-party advertising networks. We only interface with:
- Discord API: To authenticate your identity via official OAuth2 protocols.
- Hosting & Database Infrastructure: Secure MongoDB clusters with strict network firewalls and encrypted transit.
4. Security Measures
All communications with sukunabot.xyz are encrypted via TLS 1.3. User data queries are strictly server-side and scoped by the authenticated user's ID, ensuring users cannot query or access another player's data. Authentication utilizes PKCE verification and httpOnly secure cookies.
5. Data Retention & Account Deletion
We retain game records as long as your Discord account remains active in our bot systems. You have the right to request full erasure of your game data and account records at any time. To request data deletion, open a support ticket in our Discord or email carpurrchino@gmail.com with your Discord User ID.