Privacy policy
Version of 30 September 2026.
1. Who is responsible
The controller of your personal data is the operator of Voidwatch. Write to contact@voidwatch.xyz about anything on this page.
2. What we keep
| Data | Where it comes from |
|---|---|
| The id and display name of your Discord or Google account, your language, currency and time zone | Your login and your settings. We never get your email address or your password |
| Character names, server, vocation, level, position, supplies, loot, experience and tasks | The module in your game client |
| The latest screenshot of each character's game window | The module. Each new screenshot replaces the one before |
| Minimap files that you upload | You |
| Chat messages that you choose to sync. They can hold other players' character names and messages | The module |
| Your rules, commands, routes, alerts, guild roles and character shares | You |
| The IP address of each paired game client, and a log of account actions such as logins and changes | Our server |
| Messages that you send us through the contact form, when it is open | You |
| When payments open: the plan, the amount, the type of payment method and the provider's reference. Never card numbers | The payment provider |
We never ask for your game password, and the module never sends it.
3. Why, and on what legal basis
- To run Voidwatch for you: your account, the dashboard, history, alerts, commands and sharing. Basis: the contract with you (GDPR article 6(1)(b)).
- To keep the service safe: the action log, client IP addresses and abuse checks. Basis: our legitimate interest in a secure service (article 6(1)(f)).
- To answer you: contact messages and complaints. Basis: the contract, or our legitimate interest in answering.
- Invoices and tax records, when payments open. Basis: our legal duty (article 6(1)(c)).
We do not sell data and do not make automated decisions about you.
4. Cookies and browser storage
Today we use only the cookies and browser storage that the service needs: to keep you signed in, to protect the Discord and Google login, and to remember your choices, such as the language and the theme.
If we add analytics, advertising or other cookies that the service does not need, we ask for your consent first and list them on this page.
5. Who else gets data
- Oracle Cloud Infrastructure hosts the website, the database and its backups in Frankfurt, Germany.
- Discord and Google run the login that you choose. They are responsible for their own services under their own privacy policies.
- Google Fonts delivers the font of the website, so Google receives your IP address when a page loads.
- Discord receives the alert texts that you send to a Discord webhook that you set up. It also receives the contact messages, new sign-ups and deletion requests that we forward to our own staff channel.
- The payment provider, when payments open, receives what it needs to take the payment.
Discord and Google can process data outside the European Economic Area, under the safeguards that they publish.
6. How long we keep it
- Account data: as long as the account exists.
- Game history: as long as the account exists. Your plan only limits how far back the dashboard shows it.
- A free account without activity for 12 months is deleted, with everything in it.
- Guest sessions: 48 hours, unless you sign in and keep the data.
- Backups of the database follow a rotation: recent copies for a few days, older copies for longer. Data that you delete stays in a backup until that backup expires. We restore a backup only to recover from a failure.
- Invoices and payment records: as long as tax law requires, when payments open.
7. Your rights
You can ask us for access to your data, a copy of it, its correction or its deletion. You can also ask us to limit its use, and object to a use that is based on our legitimate interest. Settings → Data and account gives you an export and a deletion request. We act on a request within 30 days.
You can complain to the President of the Personal Data Protection Office (PUODO) in Poland, or to the data protection authority of your country.
8. Age
Voidwatch is meant for people aged 16 or more.
9. Security
The site uses HTTPS. We never receive your email address or passwords. The security page explains what the module sends and what it runs.
10. Changes
We publish every new version of this policy on this page with its date. We announce important changes in the dashboard.