Privacy Policy

This Privacy Policy explains how Passion Networks (“we”, “us”) collects and uses your personal information. We operate from Australia and aim to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988.

1. What we collect

When you use the Service, we may collect:

• From Discord OAuth: your Discord user ID, username, avatar, email (if you grant the scope), and which of our guilds you're in.
• You submit directly: applications, compensation claims (including any evidence files you upload), tickets, ban appeals, anonymous tips.
• Generated by your activity: messages in our Discord servers, in-game actions, punishment history, ticket transcripts.
• From Stripe (if you purchase): Stripe customer ID, subscription IDs, and transaction metadata. We do not see or store your card details.
• From your browser: standard request data — IP address, user agent, timestamps. Used for security and rate limiting; not used for advertising.

2. How we use it

• Run the community: process applications, deliver in-game items, handle support tickets, enforce rules.
• Process payments via Stripe.
• Communicate with you via Discord DM about your tickets, claims, purchases, and rule violations.
• Maintain safety: investigate reports, review evidence, detect cheating.
• Improve the Service (aggregate usage patterns, no individual profiling).

3. Who we share it with

We do not sell your data. We share with limited third parties only as needed:

• Discord — to authenticate you and deliver bot functionality. (Discord Privacy Policy)
• Stripe — to process payments. We only see metadata; Stripe holds the card data. (Stripe Privacy Policy)
• Hosting provider — our servers run on Vultr in their data centres. They have access to encrypted data at rest but no access to application content.
• Backup storage — encrypted backups are uploaded to an external storage provider. Backups are encrypted before leaving our server.
• Law enforcement — if legally required (subpoena, court order).

4. How long we keep it

• Account-linked data (Discord ID, profile cache): for as long as you use the Service. Deleted within 60 days of you leaving all our guilds and requesting deletion.
• Punishment records, ticket transcripts, audit logs: retained indefinitely for safety and policy enforcement, even after you leave.
• Payment records: retained for 7 years (Australian tax law).
• Backups: rotated on a 90-day cycle.

5. Your rights

You can ask us to:

• Access a copy of personal data we hold about you.
• Correct inaccurate data.
• Delete data where we're not required to keep it (we can't delete records needed for safety enforcement or legal compliance, e.g. punishment history).
• Withdraw consent by ceasing to use the Service. You can revoke our Discord OAuth permissions at any time at Discord settings → Authorized Apps.

To exercise these rights, open a ticket on Discord. We aim to respond within 30 days.

6. Anonymous tips

You can submit tips through our tip line. If you choose “anonymous”, we do not record your Discord ID with the submission. We still log your IP address briefly for abuse prevention but it is not linked to the tip content in our database.

7. Cookies & tracking

We use a single essential session cookie to keep you logged in. We do not use third-party analytics, advertising trackers, or social-media pixels.

8. Security

We protect data with:

• HTTPS for all traffic to the site.
• Session cookies signed and encrypted.
• Limited internal access — only administrators see staff-only data; ordinary moderators see less.
• Encrypted backups stored separately from production.
• Audit logs of administrative actions.

No system is perfectly secure. If you notice a security issue, please report it via ticket so we can address it quickly.

9. Children

The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a minor under 13 has provided data, contact us and we'll delete it.

10. Cross-border transfers

Our servers are located in Australia. Stripe may process payment data in the United States. Discord operates globally. By using the Service you consent to these transfers.

11. Changes

We may update this Privacy Policy. Material changes will be announced in Discord and on this page. Continued use after changes means acceptance.

12. Contact & complaints

For privacy questions, open a ticket on Discord. If you believe we've mishandled your data, you can also complain to the Office of the Australian Information Commissioner: oaic.gov.au.