Privacy Policy

Transparent data practices for the UnionCrax community. We value your privacy and only collect what's necessary.

What we collect

Account and identity data (Discord/Google IDs, username, display name, avatar, and email when provided)

Authentication/session data (session token and session expiry)

Community data (comments, likes, reports, favorites, wishlist, and related timestamps)

Request submissions (type, note, link, status, and optional Discord ID)

Request network/location metadata (IP address, country, city)

History and preferences stored in your browser (searches, viewed/downloaded items, NSFW and UI preferences)

Account-level preferences and search history when logged in

Security and abuse-prevention metadata (rate-limit and auth attempt data)

Why we collect it

We use this data to run core features, secure accounts, and reduce abuse:

To authenticate users with Discord, Google, or email/password sessions.
To provide account features like wishlist, favorites, profile preferences, and search history.
To process and track requests, including public and personal request status views.
To enforce anti-abuse protections such as request limits and auth rate limiting.
To send account emails (verification and password reset) when email is configured.

Storage and Retention

uc_session: HTTP-only auth cookie, up to 30 days.
discord_id: browser-readable helper cookie, up to 365 days.
unioncrax_history: browser cookie for recent searches and viewed/downloaded game history, up to 365 days.
localStorage: preferences such as NSFW display, profile visibility, navbar mode, and cookie consent.
Request records are stored in the request database. The current system does not enforce a fixed automatic deletion window for all request rows.
Some views hide older states: completed/declined personal requests are shown for 7 days, and recent public completed/declined feed items are shown for 24 hours.

Third Parties

Discord OAuth and Google OAuth for account sign-in/linking.
Resend for account emails (verification and password reset) when enabled.
ip-api.com for request location lookup (country/city from request IP).
Cloudflare services may be used for anti-bot/security and traffic insights on this site.
We do not sell personal data.

Your Controls

Session Control

Log out to clear session cookies (`uc_session` and `discord_id`).

History Control

Clear local history and preferences from Settings, and clear account search history when logged in.

Data Requests

For account-level data questions or deletion requests, contact us directly.