← Home
Privacy Policy
Last updated: June 4, 2026
1. Who We Are
One Piece Realms ("the Bot", "we", "us") is a Discord application and companion website operated by 09Clicks, Alexandru Tontsch, Germany. Contact: hello@09clicks.de.
2. Data We Collect
We collect the minimum data needed to run the game:
We do not collect: email, phone number, payment data, real names, message content, voice data, or anything outside the slash-command interaction.
| What | Why |
|---|---|
| Discord User ID | Required identifier — every record is keyed on this. |
| Username & Global Name | Shown on profile pages, leaderboards, battle results. |
| Avatar Hash | Used to render your Discord avatar on the Website. |
| Guild (Server) IDs | When you use a slash command in a server, the guild ID is logged so leaderboards & server wars can attribute activity. |
| Guild Names & Icon Hashes | Cached so guild-level leaderboards can display names without re-querying Discord. |
| Game State | Your card inventory, berries, XP, bounty, faction, sea, crew membership, battle history, achievements, quests, raid/war participation. |
| OAuth Tokens (Web only) | If you log in via Discord OAuth on the Website, an HMAC-signed session cookie + short-lived access token are stored to render your dashboard. We request only the `identify` and `guilds` scopes. |
| IP Address | Logged transiently by our hosting provider (Vercel / VPS) for abuse-prevention. Not stored alongside game state. |
3. Why We Process This Data
- Game functionality — your inventory, progress, battles only work because we store them.
- Leaderboards & social features — usernames, avatars, guild names are shown publicly so other players can compete.
- Anti-abuse — guild and user IDs let us suspend bad actors.
- Performance — caching reduces calls to Discord's API.
4. Where Data Is Stored
Game state is stored in a SQLite database on a dedicated VPS in Germany (Frankfurt). The Website runs on Vercel (typically routed via EU/US edge regions). No data is sold, rented, or shared with advertisers. Top.gg vote-webhooks store only your Discord User ID + vote timestamp.
5. Retention
Game data is retained indefinitelywhile your account is active so your fleet, bounty and achievements persist. If you don't interact with the Bot for 24 consecutive months, your record may be deleted. You can request deletion any time (see § 7).
6. Sharing With Third Parties
We share data only with the technical providers needed to run the service:
- Discord Inc. — the platform the Bot runs on. Subject to Discord's own privacy policy.
- Vercel Inc. — hosts the Website.
- Renzom (VPS provider) — hosts the Bot's database.
- Top.gg — only if you choose to vote there; vote-webhooks transmit your Discord ID back to us.
- Fandom / One Piece Wiki — we fetch character images at build-time; no user data is sent to them.
7. Your Rights (GDPR)
You have the right to:
- Access the data we hold about you (Art. 15 GDPR).
- Correction of inaccurate data (Art. 16).
- Erasure — "right to be forgotten" (Art. 17).
- Restriction of processing (Art. 18).
- Portability — a machine-readable export of your data (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
- Complain to a supervisory authority (Art. 77). In Germany: the data-protection authority of your federal state.
8. Cookies
The Website uses a single first-party HMAC-signed session cookie (
op_session) when you log in via Discord OAuth. It contains your Discord User ID, username and avatar — nothing else. No tracking, advertising or analytics cookies are set. The cookie expires after 7 days.9. Children
The Bot is not directed at children under 13 (or 16 where applicable). We do not knowingly collect data from such children. If you believe we have, contact us and we will delete it.
10. Security
We use HTTPS for all web traffic, HMAC-signed cookies, an X-Web-Secret header to authenticate Vercel → VPS API calls, and standard hardening on the VPS (UFW firewall, non-root systemd service, regular OS patches). No system is fully secure; we cannot guarantee absolute protection.
11. Changes to This Policy
We may update this Privacy Policy. Material changes will be reflected in the "Last updated" date. We'll post a notice via the Bot or Website for significant changes.