Privacy Policy

1. About Us

Isles.gg is operated by Quartz ("we", "us", "our"). We are the data controller responsible for your personal data collected through the Isles.gg website (isles.gg) and the Isles.gg Discord bot.

2. Information We Collect

We collect the following types of information when you use our services.

Discord Account Data. When you log in via Discord OAuth or interact with our bot, we receive and store your Discord user ID, username, display name, and avatar URL. This is necessary to identify your account and deliver our services.

Purchase Data. When you make a purchase, your billing email address and payment details are collected and processed by Stripe. We do not store your card details. We store your Discord user ID alongside purchases to deliver purchased items. If you send a gift, we also store the recipient's Discord user ID.

Game Data. We store data related to your in-game activity, including in-game currency and resource balances, island state, inventory, experience points, companion and character avatar collection, clan membership, completed quests and adventures, transaction history, voting history, and profile settings.

Analytics and Usage Data. We use Google Analytics 4 on our website, which collects usage data such as pages visited, referral source, device type, and IP address (which Google may truncate depending on your region). Within the bot, we track gameplay analytics such as adventures completed, resources gathered, and voting activity to improve the game experience.

Cookies and Local Storage. Our website uses the cookies and storage mechanisms listed below. We do not use advertising cookies, and we do not sell cookie data to third parties.

• Authentication cookies — Essential session cookies used to maintain your login state when you sign in. These are strictly necessary for the website to function.
• Analytics cookies — Google Analytics sets cookies (such as _ga and _ga_*) to distinguish unique visitors and track site usage. You can opt out using your browser privacy settings or a Google Analytics opt-out extension.
• Local storage — We store your display preferences, such as theme (light/dark mode), in your browser's local storage. This data never leaves your device.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance — Processing necessary to provide our game services, process purchases, deliver virtual items, and maintain your account.
• Legitimate interest — Processing necessary for security, abuse prevention, service improvement, gameplay analytics, and maintaining the integrity of the game economy.
• Consent — Where required, we obtain your consent for non-essential processing such as analytics cookies and promotional communications. You may withdraw consent at any time.
• Legal obligation — Processing necessary to comply with applicable laws, such as retaining purchase records for tax and accounting purposes.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our game and services
• To process purchases and deliver virtual items to your account
• To send order confirmation emails
• To identify your account across the website and Discord bot
• To track in-game progress, leaderboards, and achievements
• To detect and prevent abuse, exploits, or unauthorized use
• To communicate important updates about the service
• To comply with legal obligations

5. Communications

We may send you messages via Discord direct messages (DMs) for purchase confirmations, gift notifications, vote reward summaries, and important service announcements. You can control DM notifications through the bot's notification settings or by adjusting your Discord privacy settings. We also send order confirmation emails to the billing email address provided at checkout.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We share your data only in the following circumstances:

• Service providers — We share data with the third-party services listed in Section 7, strictly for the purpose of operating our services.
• Legal requirements — We may disclose your data if required to do so by law, court order, or governmental authority.
• Protection of rights — We may disclose data to protect the rights, property, or safety of Quartz, our users, or the public.

7. Third-Party Services

We use the following third-party services that may process your data:

• Discord — Authentication and bot platform. Subject to Discord's Privacy Policy (https://discord.com/privacy).
• Stripe — Payment processing. We do not store your card details. Subject to Stripe's Privacy Policy (https://stripe.com/privacy).
• Google Analytics — Website analytics. Subject to Google's Privacy Policy (https://policies.google.com/privacy).
• Resend — Transactional email delivery for order confirmations. Subject to Resend's Privacy Policy (https://resend.com/legal/privacy-policy).
• Top.gg / Discord Bot List — Bot listing platforms that process vote data when you vote for our bot.

8. Data Storage and Security

Your data is stored in secure databases with encrypted connections. We implement reasonable technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction, including access controls, encrypted data transmission, and regular security reviews. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence, including in the United States. If you are located in the European Economic Area (EEA), the United Kingdom, or other regions with data transfer restrictions, please be aware that by using our services, your data may be transferred to and processed in countries that may not provide the same level of data protection as your home country. We rely on standard contractual clauses and other appropriate safeguards where required by applicable law.

10. Data Retention

We retain your game data and account information for as long as your account is active. Application logs are retained for 14 days, and error logs for 30 days. Purchase records are retained indefinitely for accounting, tax, and support purposes as required by law. If you request deletion of your data, we will remove your account and associated game data within a reasonable timeframe, though anonymized or aggregated data and legally required records (such as purchase transactions) may be retained.

11. Your Rights

Depending on your location, you may have certain rights regarding your personal data. To exercise any of these rights, contact us at [email protected] or through our official Isles.gg Discord server, and we will respond to your request within 30 days. If you are located in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully. Your rights may include:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your account and associated personal data.
• Restriction — Request that we restrict the processing of your data in certain circumstances.
• Data portability — Request a copy of your data in a structured, commonly used, machine-readable format.
• Objection — Object to processing based on legitimate interest, including profiling.
• Withdraw consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Children's Privacy

Isles.gg is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through our Discord server or website. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out to us by email at [email protected] or through our official Isles.gg Discord server.