Privacy Policy
Plain language, no legalese. This describes how RaidSync actually works.
What we collect
- Your nickname (whatever you type — it doesn't have to be your real name).
- For squad creators only: an account, i.e. an email address and a password (stored hashed, never in clear text), or the email tied to your Google account if you sign in with Google. Accounts are handled by Supabase Auth. Teammates who join with a squad code have no account and give no email.
- The squad code you create or join, and the item needs you add.
- For Premium squads only: a billing email, collected and handled by Stripe. RaidSync never sees or stores card details.
- A Discord webhook URL, only if you choose to configure one in your squad settings.
Why we collect it
Your nickname and squad code make the app work — they're how your squad identifies you and your needs. The billing email exists only to manage a Premium subscription: invoicing. Your creator account email identifies the owner of a squad, so creator access can be restored simply by signing in again — including after clearing your browser or switching device. Password resets are sent to that address.
Who can see it
Members of the same squad see each other's nicknames and needs. Nobody else does. The database has row-level security enabled with no public read access — all reads and writes go through server-side code scoped to a single squad.
Processors we use
- Stripe — handles payments for Premium and acts as the merchant of record, meaning Stripe is legally responsible for billing and applicable taxes on these transactions.
- Discord — only if you set up a webhook yourself; your squad's notifications are then sent to that channel.
- Supabase — database hosting and Supabase Auth for creator accounts (email, hashed password, Google sign-in identifiers), region eu-west-1 (Ireland, EU).
Some of these processors (Stripe, Discord) are based outside the EU/Switzerland. Where that's the case, they rely on standard contractual safeguards recognized under GDPR and Swiss law to protect your data.
How long we keep it
As long as the squad exists. "Delete squad" removes the squad, its members, and all their needs immediately and completely, and cancels any active subscription. Automatic database backups may persist briefly afterward, outside the app's control, until their own standard expiry. Stripe keeps its own billing records as required by accounting law.
Your rights (GDPR / Swiss nFADP)
You can access, correct, and delete your data directly in the app. Your nickname is editable at any time. The squad creator can delete the whole squad in one action, and can ask us to delete their account and its email via the contact form. Want us to do it instead, or need a copy of your data? Use the contact form below.
Contact
For any privacy question, contact us.