Privacy policy

in force since 2026-09-28

1. Data controller

The data controller is Kacper Bialik. Contact for data matters: kontakt@mctcg.pl.

2. What we collect

The scope is deliberately narrow - we collect only what the game cannot work without.

Data	Source	Purpose
Discord account id	bot and sign-in	linking the collection to a player
Username	bot and sign-in	showing you in rankings and profiles
Avatar	sign-in	showing you in the header
Server ids	bot	scoping the ranking to a server
Game progress	gameplay	cards, emeralds, points, match history
Order history	store	settling payments and handling complaints
IP address	server logs	security and detecting abuse
E-mail address	only if you write to us	replying to your request or complaint

We do not collect Discord message content, payment card details or anything beyond the above. We never ask for your e-mail address - we only learn it if you write to us yourself. Sign-in uses only the identify scope - we have no access to your servers, friends or conversations.

3. Legal basis and purposes

Performance of a contract (Art. 6(1)(b) GDPR) - running the account, saving progress, handling purchases.
Legal obligation (point c) - keeping proof of sale as required by tax law.
Legitimate interest (point f) - service security, abuse detection, defence against claims.

4. Who we share data with

Discord Inc. - provides sign-in data and carries bot traffic.
HotPay and PayPal - handle payments as separate controllers; during payment they process data on their side under their own policies. We pass them the order number and the amount.
Hosting provider - as a processor acting on our instructions.

We do not sell data and do not share it with advertisers.

Transfers outside the EEA. Discord Inc. is based in the USA, so sign-in data and bot traffic leave the European Economic Area. This happens under the safeguards provided by the GDPR (an adequacy decision or standard contractual clauses), described in Discord's privacy policy. PayPal may transfer data under its own policy. We do not transfer data outside the EEA ourselves.

5. How long we keep it

Account data and progress - until you ask for deletion.
Order history - 5 years from the end of the tax year, as required by law.
Sign-in session - 30 days or until you sign out.
Server logs with IP addresses - 14 days.
E-mail correspondence - up to a year after the matter is closed.
Backups - 30 days; deleted data disappears from them after that time.

6. Cookies

We use two cookies: the sign-in session and the chosen interface language. Both are necessary for the site to work and neither is used for tracking. We run no analytics and no ads, so there is no consent banner - there would be nothing to consent to.

7. Your rights

You have the right to access, rectify, erase, restrict processing of, port and object to the processing of your data, and to receive a copy of it. Write to kontakt@mctcg.pl from the Discord account concerned, or include your id. We reply without undue delay, and no later than within one month.

Erasure means permanently losing your collection, emeralds and points. It cannot be undone. If you made a purchase in the last 5 years, we keep the proof of sale alone - tax law requires it.

You may lodge a complaint with the President of the Polish Personal Data Protection Office.

8. Children

The service is intended for people who meet Discord's age requirement. Purchases may be made by adults or by minors with a guardian's consent. If a guardian finds that a child made a purchase without consent, please contact us - we will consider such an order individually.

9. Security

The connection to the site is encrypted. We store no passwords - sign-in goes through Discord. Payment confirmations are verified by cryptographic signature and sender address.

The Polish version of this document is binding. This translation is provided for convenience only.