Introduction

At JujuBot, we are committed to protecting your privacy. This privacy policy explains how we collect, use, and protect your personal data when you use our Discord bot and website.

Data We Collect

We collect the following categories of data:

Discord Data: Your Discord user ID, username, and avatar (provided via Discord OAuth2 authentication).
Game Data: Your in-game progress, inventory, cards, statistics, and preferences.
Payment Data: Payment processing is handled by Stripe. We do not store your credit card information. We only receive confirmation of successful transactions.

How We Use Your Data

Provide and maintain the bot and website services
Authenticate you via Discord
Save and synchronize your game progress
Process purchases and manage subscriptions

Cookies

We use cookies for the following purposes:

Essential Cookies: Required for authentication with Discord (discord_user_id, discord_access_token). Valid for 7 days.
Preference Cookies: Store your theme preference (dark/light mode) via localStorage.

Data Sharing

We do not sell or share your personal data with third parties, except to comply with legal obligations or to protect our rights. Payment data is processed securely by Stripe.

Data Retention

Your game data is retained as long as your account is active. You can request deletion of your data at any time by contacting us.

Your Rights (GDPR)

Under the GDPR, you have the following rights:

Right to access your personal data
Right to rectify inaccurate data
Right to erasure ('right to be forgotten')
Right to data portability
Right to object to data processing

To exercise these rights, please contact us at the email address below.

Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, modification, disclosure, or destruction.

Legal Basis for Processing

We process your data based on the following legal grounds:

Contract: Processing necessary for the performance of the service (game progress, authentication).
Consent: For preference cookies and optional features.
Legitimate Interest: For service improvement and security.

Minors

JujuBot is intended for users aged 13 and over, in accordance with Discord's Terms of Service. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately so we can delete this information.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Union, particularly the United States (via our service providers Vercel and Stripe). These transfers are secured by Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU-US Data Privacy Framework, ensuring an adequate level of protection for your data.

Data Protection Officer

Given the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer (DPO). However, for any data protection inquiries, you can contact us directly at the email address below.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence. In France, the competent authority is the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

Policy Updates

We may update this privacy policy from time to time. In case of significant changes, we will notify you via a notice on our website or through our Discord bot. The 'Last updated' date at the top of this page indicates when the policy was last revised.

Contact

For any questions regarding this privacy policy or your personal data, please contact us:

contact@juju-bot.com

Privacy Policy