This Privacy Policy explains what technical and operational data Sovereign | Albion Management collects, why it is processed, how it is secured, data retention timelines, and the controls available to users and server administrators to exercise their privacy rights.
Website usage
We use necessary storage to keep Sovereign working. Our own statistics start only if you accept. You choose.
Aggregated data without names, Discord IDs, IP addresses, searches or form contents. Time counts only while visible and active within the last minute. A session identifies a tab, not a person. Admin pages and Do Not Track browsers are excluded. 30-day history. Engaged views have at least 10 active seconds or a click. Approximate country provided by Cloudflare. IP addresses are not stored. Older views and views without a country count as unknown. The map simplifies territories. The list includes all detected countries.
1. Scope and Data Controller
This Policy applies to the Discord bot, web dashboard, Sovereign API, automated logs, support tickets, and management modules. Sovereign | Albion Management acts as the data controller for core platform operations and as a technical processor for custom settings and community configurations managed by server administrators.
2. Information Collected and Processed
We only collect data strictly necessary for system operations: (a) Discord Data: User IDs, Guild IDs, Channel IDs, Role IDs, usernames, avatars, server permissions, and interaction metadata; (b) Albion Online Data: linked character names, player IDs, public killboard/battle history, guild/alliance memberships, and armory logs; (c) Billing Data: Stripe transaction IDs, credited amounts, timestamps, and customer emails; (d) Operational Metrics: command and subcommand, technical server and user IDs, outcome, duration, and generated content type. These metrics do not include messages, submitted parameters, or conversation content.
3. Sources and Legal Bases for Processing
Data is gathered directly through user interactions, administrator dashboard setup, Discord OAuth and REST APIs, official public Albion Online endpoints, and Stripe webhooks. Processing is legally grounded in contractual necessity to provide the service, our legitimate interest in safeguarding infrastructure against fraud and abuse, explicit user consent, and legal compliance obligations.
4. Purposes of Data Processing
Collected information is used exclusively to: (a) authenticate identities and verify administrative permissions; (b) execute automated role synchronization, re-gear calculations, and guild leaderboard tracking; (c) process and credit plan subscriptions; (d) defend infrastructure against DDoS, injection attacks, and abuse; (e) provide customer assistance through the support ticketing system.
5. Third-Party Providers and Data Transfers
We do not sell, rent, or trade personal data to third parties for marketing purposes. Data is transmitted securely and exclusively to essential service infrastructure providers: Discord Inc. (client platform), Stripe Inc. (PCI-compliant payment processing where raw card details are never stored on our servers), dedicated Linux VPS hosting providers, and secured relational database clusters.
6. Technical Security Measures
We employ enterprise-grade security practices: structured MySQL databases utilizing strictly parameterized queries to prevent SQL injections, environment credential isolation, cryptographic signature validation on Discord and Stripe webhooks, API rate-limiting algorithms, and encrypted HTTP-only session cookies on the dashboard.
7. Data Retention and Archiving
Guild configuration data and player linkages are retained while the bot remains in the Discord server or the user account remains active. Detailed usage events are kept for 90 days and then deleted; aggregate totals without messages or submitted parameters may be retained for historical analysis. Billing and transactional records are retained for the mandatory statutory periods required under applicable tax and commercial accounting laws.
8. User Rights and Data Deletion Procedures
Users and administrators may exercise rights of access, rectification, restriction, and erasure at any time. To request the complete deletion and purging of stored data associated with your Discord account or guild, open a formal support ticket using the /soporte command in Discord specifying a data erasure request.
9. Cookies, storage and statistics
Keep Discord login, security, language and your privacy choice working. The sovereign.sid cookie lasts up to 24 hours. Your choice is stored locally for 180 days. Always active.
With your permission we measure visits, clicks, active time, scrolling, device, language and approximate country. The sovereign-visit identifier is stored in sessionStorage per tab and renewed on returning after 30 minutes. Records are retained for 30 days, without names, Discord IDs, IP addresses, searches or form contents.
You can reject statistics and keep using the website. Change or withdraw permission through Privacy preferences in the footer. Withdrawal stops measurement and removes the temporary identifier. Earlier records remain subject to their retention period.
10. Minors, Policy Updates, and Contact
The Service is not directed toward individuals below the minimum legal age permitted by Discord or applicable regional laws. We reserve the right to update this Privacy Policy as our platform evolves. Material changes will be published on the dashboard and support server. For privacy questions, contact us via the /soporte command specifying “Privacy”.