Privacy Policy

1. Data we collect

We collect:

• Account data from your sign-in provider — your Discord (or Google) ID, username, display name, avatar, and email address.
• Server-membership data — if you sign in with Discord, the roles you hold in a connected server, used to map panel permissions.
• Payment claim data — the name you enter for a bank transfer and order details. We do NOT collect or store card numbers; payment is by manual bank transfer.
• Game Database content — read-only access to the data your server chooses to expose (such as players and characters), shown in your Panel.
• Technical data — IP address, browser information, and activity logs used for security and to operate the Service. We use essential cookies to keep you signed in.

2. How we use data

• To provide and operate the Service and your Panel.
• To confirm payments and activate or renew subscriptions.
• To send service messages (for example a Discord message when your subscription is activated) and to provide support.
• To secure the Service, prevent abuse, and comply with legal obligations.

3. Legal bases

Where applicable law (such as the GDPR or Saudi PDPL) requires a legal basis, we rely on: performance of our contract with you; your consent (for example when you connect your Discord account); our legitimate interests in securing and improving the Service; and compliance with legal obligations.

4. Sharing and third parties

We do not sell your personal data. We share data only with service providers that help us run the Service — such as Discord (sign-in and messaging) and our hosting and infrastructure providers — and only as needed. We may disclose data if required by law or to protect our rights, users, or the Service.

5. Your players’ data (our role as processor)

When you connect a Game Database, any personal data of your players shown in the Panel belongs to you and your community. You are the controller of that data and are responsible for having a lawful basis and any required notices or consents. We process that data only to display it in your Panel, on your instruction, on a read-only basis, and we do not use it for our own purposes.

6. Retention

We keep personal data for as long as your account or subscription is active and for a reasonable period afterward to support reactivation, resolve disputes, and meet legal obligations. When no longer needed, data is deleted or anonymized.

7. Security

We use reasonable technical and organizational measures to protect data, including encrypted connections and restricted access. Sensitive credentials (such as database passwords) are stored encrypted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us at support@hcrp.site. We may need to verify your identity first.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Our providers may process data in countries other than yours. Where required, we take steps to ensure an appropriate level of protection for such transfers.

11. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date and may be announced through the Service.

12. Contact

For privacy questions or requests, contact support@hcrp.site.