Privacy

Who is responsible

[OPERATOR NAME], [OPERATOR ADDRESS] runs fateleague.com. Questions and requests: [SUPPORT EMAIL], or Ask staff in the Fate League Discord.

Visiting without signing in

You can read every public page without signing in. We set no cookies for visitors, except one if you hide the Vanguard strip: it remembers that choice for 30 days and holds nothing about you. The site runs no analytics.

Our hosting companies record each request, including your IP address and browser, to run and protect the site; those logs last 1 to 7 days.

Signing in with Discord

When you sign in, Discord tells us your Discord id, your username, your avatar and your email address, and that the email is verified.

We keep your Discord id, to link you to your results and collection; your email, only inside our sign-in system, to keep your account: it is never shown, never used for marketing and never shared; and your display name in the Fate League Discord, which becomes your handle (refreshed each night).

Cookies are for signing in only: a short-lived one while Discord confirms who you are, then your session cookie, which can be split into numbered parts. Scripts on the page cannot read them. The session cookie lasts until you sign out, and at most 90 days.

We do not keep Discord’s access tokens. If you tick Also join the Fate League server, we use Discord’s permission once, to add you, and keep nothing from it.

When you register for an event on the site, the site asks for your in-game name for that game, as the bot does, and keeps it in the same place: one name per game, until you change it or delete your account. Your steps on the site (register, check in, decks, drop, report, undo, flag) are recorded as the bot records them, marked as made on the site.

Registering also follows that game’s news, as it does in Discord, and the page offers Turn off; we keep that choice so a later registration never switches it back on.

What is public

Your handle, avatar, titles, results, placements, points and ratings, and your decklists after an event’s deck lock. Never your real name, email or Discord id, and never in a link.

Your profile is shown to search engines after your first played event, unless you switch that off in your settings. Profiles of people who never played, unclaimed history and deleted accounts are never shown to search engines. Your collection and binder on the site are off until you switch them on.

Why

To show the league’s record, to let you see and manage your own events, collection and settings, to let organisers run events, and to keep the site secure.

Who sees what

Everyone: the public pages above.

You: your own pages, your settings and your collection.

Organisers and staff of a community: what they need to run its events, in the console. They never see your email.

Partner game developers: totals for their game only, never names.

Companies that host the site for us: Vercel (the site), Supabase (database and sign-in, in the United States), Discord (sign-in), Sentry (reports of faults, with personal details removed) and Cloudflare (encrypted backups).

We never sell your data, never show ads and never use your data for advertising.

How long

Hosting request logs (IP address and browser): 1 day at Vercel, 7 days at Supabase.

Sign-in records with your IP address: 90 days, and never copied into our nightly backups.

Fault reports: 30 days. Backups: 30 days.

Your account and settings: until you delete your account.

Results, rankings and the collection ledger: kept as the league’s record; after deletion, without your name.

Your choices and rights

Settings: search engines, collection visibility, and, from January, alerts and DMs.

Get a copy of your data: ask in a ticket; a download button follows.

Delete your account with Delete my account in your settings. A page lists what goes (your sign-in, your Discord link, your names, tickets and transcripts) and what stays without your name (results as Former player, the collection ledger). You confirm by typing, we sign you out, and your profile page is removed. If your sign-in was never linked to the bot, the bot’s record of the same Discord account goes too. A restore from backup re-applies the deletion first.

Correct, object or complain: tell us first at [SUPPORT EMAIL]. You can also complain to your data protection authority (the ICO in the UK, your EU authority, Brazil’s ANPD, the UAE Data Office).

Children

Signing in needs a Discord account, so you must meet Discord’s minimum age (at least 13). We never ask your age.

The site’s defaults suit the youngest member: no tracking cookies, no ads, collection pages off until switched on, and a switch in your settings that keeps your profile out of search engines.

Changes and contact

When this page changes, the date at the top changes and the change is announced in the Fate League Discord.

Contact: [OPERATOR NAME], [OPERATOR ADDRESS], [SUPPORT EMAIL], or Ask staff in the Fate League Discord.