Data we collect

If you sign in with Discord

Signing in is optional and is only used by contributors (editors, value editors, developers). We ask Discord for the identify permission only. We store:

• Your Discord user ID: to recognise you when you come back.
• Your display name (your Discord global name, or your username if you have none).
• Your avatar link: a link to the picture Discord hosts. We do not copy the image.
• Your role on the site (user, editor, developer...) and whether your account was banned.
• Dates: when your account was created and when you last signed in.
• Your session: a random token kept in a cookie in your browser. On our side we only keep a hash of it, with its creation and expiry dates (30 days).
• Your contributions (staff only): when you create or edit content, the action is recorded in an audit log with your account, the time and what changed.

What we never collect

• Your email address, password, phone number or real name.
• Your Discord servers, friends, messages or any other Discord data (we do not request those permissions).
• Your IP address: we do not store it. Only Cloudflare, which serves the site, may log it (see below).
• Payment information: the site has nothing to buy.
• Advertising or analytics identifiers: we use no ads and no third-party analytics.
• Your Discord access token: it is used once, during sign-in, to read your public profile, and is then discarded.

Cookies and browser storage

• wiki_session (essential, 30 days): keeps you signed in. Only set after you sign in.
• oauth_state / oauth_next (essential, 10 minutes): protect the Discord sign-in against forgery and bring you back to your page.
• sidebar_state (preference, 7 days): remembers if the dashboard sidebar is open. Only in the dashboard.
• cookie-consent (local storage): remembers your cookie choice on this device.
• region-country (session storage, only if you accepted all): caches your country for the current tab so we do not look it up again.

You can change your choice at any time with “Cookie settings” at the bottom of every page.

Country check (optional)

Some pages can tell you whether their content may be unavailable in your country. If you choose Accept all, your browser sends a request to a free IP geolocation service (country.is, with ipwho.is and ipapi.co as backups). Those services see your IP address and answer with a country code. We do not receive or store your IP, and the result stays in your browser. If you choose Essential only, no request is sent: we only estimate your country from your browser’s time zone and language, locally.

Who sees it

• Discord: handles the sign-in. See Discord’s Privacy Policy.
• Staff: your name and avatar can appear in the dashboard and in a private staff Discord channel (activity notifications) when you edit content.
• Our database provider: it stores the account data listed above on our behalf.
• Cloudflare: the site is served through Cloudflare. We do not store IP addresses, but Cloudflare, as our network provider, may process and log them (to deliver the site and protect it from attacks). See Cloudflare’s Privacy Policy.
• We never sell your data and never share it for advertising.

How long we keep it

• Sessions expire automatically after 30 days and are then deleted.
• Your account is kept while you use the site. Ask us and we delete it.
• Audit log entries about content changes are kept so the wiki history stays accurate. When your account is deleted, they are no longer tied to your name.

Your control

You can sign out at any time, which deletes your session. To see, correct or delete your data, contact us (see below). You can also revoke the site’s access in Discord under Settings → Authorized Apps. More details in the Privacy Policy.

Contact: [email protected]. Please state clearly that you are writing about the Tap Simulator: Reborn website (for example in the subject), so we can find your request.