Privacy Policy
Last updated: January 31, 2026
1. Introduction
Raid Split ("we", "us", "our") operates raidsplit.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Data We Collect
Account Data (via Discord OAuth)
When you sign in with Discord, we receive and store:
- Discord user ID
- Username and display name
- Email address
- Profile avatar URL
We do not have access to your Discord password, messages, or server memberships.
User-Provided Data
Data you voluntarily enter into the Service:
- Guild names and configuration
- Player names and character information (character names, classes, roles)
- Optimization run results and settings
Payment Data
Payment processing is handled entirely by Stripe. We store your Stripe customer ID and subscription status but do not store credit card numbers, bank details, or other payment credentials on our servers. See Stripe's Privacy Policy for details on how Stripe handles your payment information.
Automatically Collected Data
We collect minimal technical data necessary to operate the Service, including IP addresses in server logs. We do not use third-party analytics or tracking scripts.
3. How We Use Your Data
We use your data solely to:
- Provide and maintain the Service (authentication, roster management, optimization)
- Process subscription payments
- Communicate important Service updates (billing issues, terms changes)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
We use the following third-party services:
- Discord — Authentication provider. Subject to Discord's Privacy Policy.
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Fly.io — Hosting infrastructure. Subject to Fly.io's Privacy Policy.
5. Cookies
We use essential cookies only, required for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising, analytics, or tracking cookies.
6. Data Retention
Your account data and user-provided data are retained as long as your account is active. If you delete your account, all associated data (guild memberships, characters, optimization history) will be permanently deleted within 30 days.
7. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate personal data
- Erasure — Request deletion of your personal data ("right to be forgotten")
- Data Portability — Request your data in a machine-readable format
- Restriction — Request that we limit processing of your data
- Objection — Object to processing of your personal data
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Legal Basis for Processing (GDPR)
We process your data based on:
- Contract — Processing necessary to provide the Service you signed up for
- Consent — You consent to data processing when you sign in via Discord
- Legitimate Interest — Maintaining Service security and preventing abuse
9. Data Security
We implement reasonable security measures to protect your data, including encrypted connections (HTTPS), secure authentication via OAuth, and regular security updates. However, no method of transmission over the internet is 100% secure.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will delete it promptly.
11. International Data Transfers
Our servers are located in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. By using the Service, you consent to this transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via the Service interface. Continued use after changes constitutes acceptance.
13. Contact
For privacy-related inquiries or to exercise your data rights, contact us at [email protected].