Privacy Policy

This Privacy Policy explains what personal information OrgDeck collects, why, and how you can control it. OrgDeck is operated by 2844497 Alberta Ltd. (see our Terms of Service). If you have questions, contact us at orgdeckinfo@gmail.com.

Account information: your email address and password (if you sign up directly), or your linked Discord account identity (if you sign in with Discord). We never see or store your Discord password.

Profile information: the handle, avatar image, timezone, and optional links (like an RSI profile URL) you choose to add to your profile — all of it optional and editable by you.

Organization data: information you or your organization's leadership enter about your organization — roster, roles, skill ratings, registered ships, operations, attendance records, and achievement badges.

Billing information: where paid features are enabled, we store a Stripe customer/subscription reference and your current plan tier. Your payment card details are handled entirely by Stripe and never touch our servers.

Bug reports: if you submit a bug report, we collect the subject, description, the name and email you enter (which may differ from your account), the page you were on, your browser's user-agent string, and any screenshots you choose to attach.

Technical data: we briefly process your IP address to apply rate limiting on sign-in, sign-up, and other public-facing actions, to protect the Service from abuse. This isn't retained as a persistent log tied to your identity.

We use your information to operate the Service: authenticate you, run your organization's roster and operations, apply your subscription/entitlements, respond to bug reports, and keep the Service secure (for example, an internal audit log records sensitive actions like disbanding an organization or changing a member's role, viewable only by us for security review — not exposed to other users). We don't sell your personal information, and we don't use it for advertising.

We rely on a small number of service providers to run OrgDeck:

• Supabase — our database, authentication, and file storage provider;
• Stripe — payment processing, where paid features are enabled;
• Discord — only if you choose to sign in with Discord, or if your organization's leadership configures a Discord integration for that organization;
• A cloud hosting provider for the application itself.

Each of these providers only receives what it needs to do its job, under its own privacy terms. We don't sell or rent your data to third parties, and we don't share it for advertising purposes.

Some information within your organization — your handle, avatar, roles, skills, ships, and achievements — is visible to other members of your organization (and, for joint operations, allied organizations) by design, since that's the point of the Service. Your email address, timezone, billing information, and bug reports are never shown to other members.

We use essential cookies and browser storage to keep you signed in, remember your light/dark theme preference, and apply any personal cosmetics you've equipped. We don't use third-party advertising or tracking cookies. See our Cookie Policy for the full list.

We keep your account and organization data for as long as your account is active. If you leave or disband an organization, most organization-scoped data is removed with it; some records (like our internal audit log) are retained afterward for security and accountability purposes and are never shown to other users. You can request deletion of your account and associated personal information at any time by contacting us — see below. Where we're able to, we aim to complete erasure within 30 days of a verified request, except where we're required to retain certain data for longer to comply with a legal obligation.

Depending on where you live, you may have rights under applicable privacy law (such as Canada's PIPEDA, Alberta's PIPA, the EU/UK GDPR, or applicable U.S. state privacy laws) to access, correct, export, or delete your personal information, or to object to certain uses of it. Most of your profile and organization data is already directly editable in the app. For anything else — including a full account deletion request — contact us at orgdeckinfo@gmail.com and we'll respond as promptly as we reasonably can.

The Service isn't directed at children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

We may update this policy as the Service evolves. We'll update the "Last updated" date above when we do, and for material changes we'll try to give you reasonable notice in-app.

Questions or requests about your data? Email us at orgdeckinfo@gmail.com, or use the in-app bug report form if you're already signed in.