Account and login (site):

• Login through Discord, Google or Twitch. We receive your provider user ID, display name, avatar and e-mail address. We only accept verified e-mails. We never receive or store your Discord, Google or Twitch password.
• If a verified e-mail already belongs to an account, the new login is merged into that same account (one person, one account).
• Pre-registration answers you choose to give: country, favorite class and whether you are a WYD veteran. Your chosen name, class, country and join date may appear on the public Hall of Founders.

Game accounts and characters:

• The game login name you create, your game password (used only to log you into the game), and the characters, items, progress and in-game currency tied to that account.
• When you log into the game we may record the time, IP address, device platform (for example Windows, macOS, Android or web) and a hardware/device identifier (HWID). This is used for security, anti-cheat, ban enforcement and to prevent abuse of multiple accounts.
• If you use the "sign in to the game with the site" feature, we log the authorization events (time, platform, IP address, browser/device information) and, if you choose "remember this device", a hashed device token.

Site usage and security:

• Active site sessions: IP address, browser/device (user agent) and last activity, so you can review and revoke your sessions in your panel.
• Vote records for toplists: your game account name, the time and the IP address of the voter.
• Referral/affiliate data if you take part: your referral code and credits earned.
• Streamers who link Twitch: your Twitch channel ID, name, avatar and live status.

Payments:

• Donations are processed by third-party payment providers (currently Stripe and Mercado Pago). Card and payment details are entered on the provider's page and are never stored by us.
• We keep a donation record: what was credited, amount, currency, status, the provider's transaction reference and the game account that received the credit. We may keep this for accounting, fraud prevention and dispute handling.

We use a session cookie to keep you logged in and a small preference record in your browser (language and cookie choice).

We use Google Analytics (GA4) to understand how the site is used (pages visited, device type, approximate location). A cookie banner lets you accept or decline. Advertising-related storage stays off unless you accept. Analytics measurement may still run before you choose; you can block it with your browser settings or an extension.

• To create and run your account, log you in and credit donations and rewards.
• To keep the game fair and safe: detect cheating, multi-account abuse, fraud and attacks.
• To contact you about your account or important service changes (for example by e-mail or Discord).
• To measure and improve the site.
• To meet legal and accounting obligations where they apply.

We do not sell your personal data.

Only with providers needed to run the service:

• Login providers (Discord, Google, Twitch).
• Payment processors (Stripe, Mercado Pago).
• Infrastructure providers: hosting/servers, Cloudflare (traffic proxy and security) and cloud storage used for backups.
• Google Analytics, subject to your cookie choice.
• Authorities, when we are legally required to.

Some of these providers may process data outside your country.

• Account and character data: while your account exists, and until you ask us to delete it.
• Login, session, IP and device (HWID) records: kept for a limited period needed for security, anti-cheat and ban enforcement, then deleted or anonymized. Records tied to a ban may be kept longer so banned players cannot simply return.
• Payment and donation records: kept for as long as tax, accounting and dispute rules require.
• Backups are overwritten on a rolling basis, so removed data can persist in backups for a limited time.

• Access, correct or delete your data: see our Data Deletion page for how to ask.
• Review and revoke active sessions and remembered devices in your panel.
• Decline non-essential cookies using the cookie banner.
• Unlink a login provider (as long as you keep at least one way to log in).

Depending on where you live (for example under Brazil's LGPD or the EU GDPR) you may have additional rights. Contact us and we will do our best to respond.

We use reasonable technical measures (encrypted connections, access controls, hashed device tokens, rate limiting). No system is perfectly secure, so we cannot guarantee absolute security.

Supreme Destiny is not directed to children under 13 (or the higher minimum age of digital consent in your country), and players under 18 need a parent or guardian's permission (see Terms of Service). If you believe a child gave us personal data, contact us and we will remove it.

We may update this policy; the date above shows the latest version. For privacy questions, contact us through the support channels below.