Privacy Policy
This policy explains what information Cardboard Party (“we”, “us”) collects, how we use it, and the choices you have. It applies to the website at cardboardparty.gg and the Cardboard Party Discord bot.
Information we collect
- From Google sign-in. When you sign in with Google, we receive your name, email address, Google account ID, and profile picture.
- From Discord sign-in. When you sign in with Discord, we receive your Discord user ID, username and display name, your avatar, and your email address if it is verified on Discord. If the Discord account matches one you already have, we link the two rather than creating a duplicate.
- Profile details you add. An editable display name, Discord handle, pronouns, name pronunciation, a short “about” bio, and a custom avatar if you upload one.
- Discord bot. If you use the bot, we link your Discord account to your Cardboard Party account so we can pair you, record your results, and message you. We also keep a record of event invitations sent and received (to prevent spam) and your invite opt-out choice. An organizer may also assign you a Discord role for their event (so they can announce to all participants) when your account is linked to Discord.
- Event data. Your event registrations, match results, standings, and information organizers enter about their events. Organizers can also add players by name (“ghost” players) who haven’t signed in; that information comes from the organizer.
- Technical data. A single essential session cookie keeps you signed in, and our hosting provider records standard server logs (such as IP address and request details).
- Location features. Event pages may load Google Maps to show a venue, and organizers can attach a venue location to an event. If you use the “events near me” search, your browser asks your permission to share your device location, which is used in your browser only to sort/filter events by distance — we don’t store it.
What we don’t do
We do not use third-party analytics, advertising, or tracking technologies, and we do not sell or rent your personal information. We use only the essential cookies needed to sign you in and protect against cross-site request forgery — no tracking or advertising cookies.
How we use information
- to run events — registration, pairings, results, and standings;
- to show your player profile and event history;
- to send Discord notifications (such as your pairings and result confirmations);
- to operate, maintain, and secure the Service and prevent abuse.
What’s public
Cardboard Party is built around public events. Event pages, standings, player display names, profiles, and any avatar you upload are visible to anyone. Avatars are stored in public cloud storage. Your email address is not shown publicly. Please don’t put anything in your profile, name, or event text that you don’t want to be public.
Service providers
We host the Service on Google Cloud Platform (App Engine, Firestore, Cloud Storage, and Secret Manager), with data stored in the United States. If you sign in with Discord or use the bot, information is also shared with Discord. These providers process data under their own terms:
Data retention
We keep your information for as long as your account exists and as needed to maintain event history and standings. You can edit or remove most profile details at any time, or ask us to delete your account and associated data (see “Your choices”). Note that removing your account does not erase an event’s historical results that other participants rely on, though we will dissociate your personal profile from them on request where practical.
Your choices
- Edit your display name, Discord handle, pronouns, bio, and avatar from your profile.
- Remove a custom avatar to revert to your Google picture.
- Opt out of Discord event invitations using the “Don’t invite me” button.
- Request access to, correction of, or deletion of your data by emailing us.
Children
The Service is not directed to children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has provided us information, please contact us and we’ll remove it.
Security
Sign-in is handled by Google or Discord, so we never see or store your password. Session cookies are HttpOnly and, in production, sent only over HTTPS. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.
Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above.
Contact
For privacy questions or data requests, email privacy@cardboardparty.gg.