When you sign in on the website we ask Discord only for the identify
scope. We never receive your email address, your password, your friend list, or the servers you
are in beyond the ones the bot is already in.
The bot supports text commands as well as slash commands, so it receives messages in the channels it can see. Those messages are checked in memory for a command prefix and then discarded. We do not log, store or read your ordinary conversations. The exception is obvious: if the message is a command, the result it produces (a deck you built, a trade you made) is saved as game data.
Everything you do in the game is stored against your Discord ID: champions and cards owned, skins, relics, gold and other in-game currencies, chests, levels and XP, achievements, quest progress, decks and their names, match and duel history, trades, raids, guild membership and leaderboard standings.
bnSession, set when you sign in with Discord. It is a random ID that points to your session on our server and lasts up to 7 days. It is strictly necessary for staying signed in — it is not used for tracking or advertising.We process this data to provide a game you asked to play (contract), and to keep it working and fair — anti-cheat, anti-alt limits, abuse prevention and server capacity (legitimate interests). Where consent is the right basis, you give it by choosing to sign in with Discord, and you can withdraw it by asking us to delete your data.
Nobody buys it and nobody rents it. Your data is handled by us and by the infrastructure that runs the game: our hosting provider (a rented VPS in the EU) and Discord itself, which is where the game is played. Public parts of your game profile — your name, avatar, rank, and match results — are visible to other players by design, on leaderboards, match history and the website. We will disclose data if the law genuinely requires it.
Game data is kept for as long as your account exists, because it is your account — deleting it deletes your progress. Website sessions expire after 7 days and expired ones are removed. Server visit logs are kept in aggregate for capacity planning and abuse investigation.
You can ask us to:
Ask in the official Blood & Nectar Discord server from the Discord account concerned, so we can be sure it is yours. We aim to answer within 30 days. If you are in the EU or UK you also have the right to complain to your local data protection authority.
The game is not intended for anyone below Discord's minimum age for their country. We do not knowingly hold data on children under that age; if you believe we do, tell us and we will delete it.
Data lives on a private server, sessions are random tokens over HTTPS, and access is limited to the developer. That said, this is a hobby project run by one person, not a bank. Do not put anything sensitive into deck names, guild names or profile text.
If this policy changes, the date at the top changes with it and anything material is announced in the Discord server.
Privacy questions and deletion requests go to the official Blood & Nectar Discord server. See also the Terms of Service.