Privacy Policy

• Your account: username, password (stored only as a bcrypt hash; we can't read it), display name, alliance, in-game power, Fire Crystal level, avatar, country, preferred language, and anything you add to your profile, such as a birthday (month and day only), notes, or links.
• Transfer requests: player ID, current state, player name, power, Frost Sphere and Meteor tiers, the contact method and handle you give us, and your answers. Only admins see these.
• Transfer invite tickets: player ID, state, and alliance. The public board shows only counts.
• Things you post: community posts and likes, creator links, and photos you upload for review.
• Games: scores, and for Live Trivia, the name, alliance, and answers you play with.
• Event reminders: if you turn on notifications, your browser's push address and keys, the alliance you picked, and your mute setting.
• Password reset requests: your username and the message you send.
• IP address: used to slow down repeated requests (for example, login attempts). These counters are deleted about an hour after they expire. Our host also keeps standard request logs.
• Admin actions: admin changes are logged so the team can see who changed what.

Your display name, alliance, and some profile details appear on community pages. The member directory and birthdays are visible only to verified State 3144 members. Transfer requests, contact details, and password reset requests are visible only to site admins.

We don't sell your data or share it with advertisers.

We set one cookie, s3144_session, when you log in. It keeps you signed in for up to 180 days or until you log out. It is HTTP-only, so page scripts can't read it.

Your browser also saves a few settings on your device (local storage), such as your clock time zone, a draft of your transfer request, notification preferences, and your game player name. They stay on your device and you can clear them in your browser settings.

We use no advertising or tracking cookies, so there is no cookie banner.

We use Vercel Web Analytics to count page views, for example how many visitors reach the transfer page. It sets no cookies and doesn't follow you to other sites.

• Vercel hosts the site.
• Supabase stores the database and uploaded images (hosted in the United States).
• Google Fonts serves the site's fonts, so your browser requests them from Google.
• Push notifications are delivered through your browser maker's push service (for example, Google, Mozilla, or Apple).
• TikTok videos load only after you tap to play them. Links to Discord and other sites follow those sites' own privacy policies.

We keep account and community data while your account exists. You can edit most profile details yourself on your profile page. To see what we hold about you, correct it, or delete your account and transfer requests, message an admin on the State 3144 Discord or in game. We'll handle it as soon as we reasonably can.

The site isn't meant for children under 13. If you think a child under 13 has given us information, tell an admin and we'll delete it.

The site is served only over HTTPS. Passwords are hashed. Database access goes through our server, and admin tools require an admin account. No website is perfectly secure, so please don't reuse your game or email password here.

If this policy changes, we'll update this page and the date at the top. Questions? Ask an admin on the State 3144 Discord.