Privacy Policy

This Privacy Policy explains what personal information OrgDeck collects, why, and how you can control it. OrgDeck is operated by 2844497 Alberta Ltd. (see our Terms of Service). If you have questions, contact us at orgdeckinfo@gmail.com.

Account information: your email address and password (if you sign up directly), or your linked Discord account identity (if you sign in with Discord). We never see or store your Discord password.

Profile information: the handle, avatar image, timezone, and optional links (like a game profile URL) you choose to add to your profile — all of it optional and editable by you.

Organization data: information you or your organization's leadership enter about your organization — roster, roles, skill ratings, registered ships, operations, attendance records, and achievement badges.

Voice check-in: if your organization's leadership turns it on and you've connected Discord, then while one of its operations is live we look up which voice channel you're in on that organization's Discord server, and record when you joined and left the operation's chosen comms channel(s) to check you in. Nothing else about your Discord activity is read or stored. These join and leave records are deleted after 30 days; only your total time in comms stays with your attendance.

Signing up from Discord without an account: if an organization turns on instant sign-up and you press a sign-up button on its Discord post, we create a guest place for you on its roster under your Discord name, with your Discord user ID so we know the next press is you. Nobody can sign in to a guest place. If you later sign in to OrgDeck with that Discord account, your sign-ups move to your account and the guest place is deleted. Otherwise it's deleted 30 days after your last operation, unless the organization removed or banned you, in which case we keep only your Discord ID and name so the block holds. If someone presses while instant sign-up is off, we count it for the organization's leaders as a one-way code that can't be turned back into your Discord ID, and delete it after 30 days.

Billing information: where paid features are enabled, we store a Stripe customer reference, a record of your purchases, and your current plan tier. Your payment card details are handled entirely by Stripe and never touch our servers.

Bug reports: if you submit a bug report, we collect the subject, description, the name and email you enter (which may differ from your account), the page you were on, your browser's user-agent string, and any screenshots you choose to attach.

Waitlist and founding-org applications: if you sign up on our founding orgs page (no account needed), we collect your email address and, if you apply as a founding org, your org's name and size, your role, what tools your org uses, how often it runs operations, your Discord handle, and any note you add. We also record which link brought you there (for example, a specific video). We use this only to pick founding orgs and to contact you about OrgDeck's launch, never for advertising. Founding-org applications, without your email, are shared with our own private Discord channel so we can review them. You can ask us to delete your signup at any time using the contact details below.

Community Discord feedback: if you post in the suggestions or bug-report forums of OrgDeck's own community Discord server, we copy the post's title and text, your Discord name and ID, and its reaction and reply counts into our internal tools so we can track and answer it. If you've signed in to OrgDeck with that Discord account, we link the post to your account. Only the OrgDeck team can see this. You can ask us to delete it using the contact details below.

Technical data: we briefly process your IP address to apply rate limiting on sign-in, sign-up, and other public-facing actions, to protect the Service from abuse. This isn't retained as a persistent log tied to your identity.

Usage data: which pages you visit and key actions you take in the Service (for example, creating an organization or publishing an operation), along with your browser type, device type, and approximate location derived from your IP address. When you're signed in, this is linked to your account ID — never your email address. We use it only to understand how OrgDeck is used and where to improve it. We don't record your screen or what you type. If your browser sends a "Do Not Track" or Global Privacy Control signal, we don't collect usage data from it. If you're in the EU, EEA, UK or Switzerland, usage data is only linked to your device or account after you accept analytics cookies; see our Cookie Policy, where anyone can accept or decline at any time.

We use your information to operate the Service: authenticate you, run your organization's roster and operations, apply your Premium and other purchases, respond to bug reports, and keep the Service secure (for example, an internal audit log records sensitive actions like disbanding an organization or changing a member's role, viewable only by us for security review — not exposed to other users). We don't sell your personal information, and we don't use it for advertising.

We rely on a small number of service providers to run OrgDeck:

• Supabase — our database, authentication, and file storage provider;
• Stripe — payment processing, where paid features are enabled;
• Discord — only if you choose to sign in with Discord, or if your organization's leadership configures a Discord integration for that organization;
• PostHog — product analytics (the usage data described above), hosted in the United States;
• A cloud hosting provider for the application itself.

Each of these providers only receives what it needs to do its job, under its own privacy terms. We don't sell or rent your data to third parties, and we don't share it for advertising purposes.

Some information within your organization — your handle, avatar, roles, skills, ships, and achievements — is visible to other members of your organization (and, for joint operations, allied organizations) by design, since that's the point of the Service. Your email address, timezone, billing information, and bug reports are never shown to other members.

We use essential cookies and browser storage to keep you signed in, remember your light/dark theme preference, and apply any personal cosmetics you've equipped, plus a first-party analytics cookie that measures how the Service is used. We don't use advertising cookies or track you across other sites. See our Cookie Policy for the full list.

We keep your account and organization data for as long as your account is active. If you leave or disband an organization, most organization-scoped data is removed with it; some records (like our internal audit log) are retained afterward for security and accountability purposes and are never shown to other users. You can delete your account yourself at any time from the bottom of your profile page, which immediately removes your profile, skills, ships, purchases, uploaded images and organization memberships. Payment records held by our payment processor (Stripe) are kept for accounting and tax purposes. You can also request deletion by contacting us — see below. Where we're able to, we aim to complete erasure within 30 days of a verified request, except where we're required to retain certain data for longer to comply with a legal obligation.

Depending on where you live, you may have rights under applicable privacy law (such as Canada's PIPEDA, Alberta's PIPA, the EU/UK GDPR, or applicable U.S. state privacy laws) to access, correct, export, or delete your personal information, or to object to certain uses of it. Most of your profile and organization data is already directly editable in the app, and you can delete your whole account from your profile page. For anything else, contact us at orgdeckinfo@gmail.com and we'll respond as promptly as we reasonably can.

The Service isn't directed at children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

We may update this policy as the Service evolves. We'll update the "Last updated" date above when we do, and for material changes we'll try to give you reasonable notice in-app.

Questions or requests about your data? Email us at orgdeckinfo@gmail.com, or use the in-app bug report form if you're already signed in.