Privacy

If you never log in

The application stores nothing about you. There are no analytics, tracking pixels, advertisements, or third-party scripts. Pages are served only from this domain.

The Discord and Spotify widgets on the front page are iframes served by Discord and Spotify. What they collect is theirs, and they load whether or not you are logged in.

If you log in with Discord

Logging in asks Discord for three things: identify, guilds, and guilds.members.read. Discord shows you this list before you agree.

Discord returns your server list so this website can find Neo Nation. Every other server is discarded before your session is saved. Your session may retain the following for up to 30 days or until logout:

• your Discord user ID, username, discriminator, and avatar hash
• your Neo Nation membership and permissions
• your roles in the Neo Nation server

Your roles determine your website permissions level. That is the only reason they are read.

Your password and email address are neither requested nor received. Discord provides a temporary access token during login; it is used to fetch the information above and is never stored.

Your session lives in a cookie named nn.sid. It is HttpOnly, SameSite=Lax, and marked Secure over HTTPS. It holds a random identifier and nothing else. It is a login cookie, not a tracking cookie, and there are no others.

What is stored

• Guestbook. If you sign it, your Discord user ID, username at the time, message, and signing time are stored. This information is public, as that is the point of a guestbook.
• Uploads. If you upload a file, the file itself, its name, size, and type, plus your user ID and username are stored. Only you can see your upload list, but anyone with a file link can view that file.
• Moderation records. If a moderator takes action against you in the Discord server, the case, reason, moderator name, and time are stored. This moderation log exists whether or not you ever visit the site.

Logs

The application logs login attempts, guestbook signatures, and errors. All of them are generic, and do not log your information.

IP addresses are not written to the application log. Your address necessarily reaches the server to deliver a page, and the web server in front of the application keeps standard access logs, but this spaghetti amalgamation does not record it itself.

Who else sees it

Nothing is sold or handed to advertisers or analytics providers. Public guestbook entries and files shared by link are visible as described above. Everything else remains on this server.

The observatory asks Steam and SteamCharts for public player counts. Discord is contacted only when you choose to log in.

Getting rid of it

Logging out destroys the session and clears the cookie. You can delete your own uploads from the uploads page.

For anything else, including your guestbook entry or the whole lot, feel free to ask for removal. Moderation records will be kept as long as they are needed for moderation.

Revoking Steinkauz under Authorised Apps in your Discord settings stops any further access. It does not delete what is already stored, so ask if you want that too.

Changes

If the collected data changes, this page will reflect it. There is no mailing list because I do not have, nor do I want, your email address.