1. Scope and controller

This Policy covers the Heavenly Dao Discord bot, game systems, player Wiki, website, supporter program, and official community administration. Heavenly Dao is the controller for data it decides to collect and use. Paddle is a separate controller for payment and buyer information it handles as Merchant of Record.

2. Information we collect

Discord and account information

When you interact with the bot or sign in through Discord, we may receive your Discord user ID, username, display name, avatar, server membership information, and authentication details needed to maintain a session. We do not receive your Discord password.

Gameplay and community information

We store game progress, inventory, currency, combat and cultivation records, command activity, cooldowns, sanctions, supporter entitlements, custom content records, and messages or reports you deliberately send to staff.

Website and technical information

Our hosting providers may process IP address, browser and device details, requested pages, timestamps, security signals, and diagnostic logs. The Wiki may store local preferences, such as visual theme, on your device.

Purchase and subscription information

Paddle may provide us with information needed to fulfill and support a purchase, such as transaction and subscription identifiers, tier, status, amount, currency, dates, country or region, and buyer contact information when law and Paddle's terms permit. Complete card details remain with Paddle and its payment providers.

3. How we use information

• Operate accounts, gameplay, progression, cooldowns, inventories, rankings, and community features.
• Authenticate users and connect website sessions to the correct Discord account.
• Deliver, verify, maintain, and support paid supporter benefits.
• Prevent cheating, fraud, payment abuse, harassment, unauthorized access, and technical attacks.
• Investigate errors, enforce rules, restore data, and improve reliability and balance.
• Respond to questions, disputes, privacy requests, and legal obligations.
• Maintain financial, security, and operational records where required.

We do not sell personal information and do not use it for third-party behavioral advertising.

4. Legal bases

Where data-protection law requires a legal basis, we rely on performance of a contract to operate requested features and deliver purchases; legitimate interests to secure, maintain, moderate, and improve the service; legal obligations for tax, accounting, disputes, and lawful requests; and consent where specifically requested. You may withdraw consent without affecting earlier lawful processing.

5. When information is shared

We share information only as reasonably necessary with:

• Discord, for authentication, bot commands, roles, and community functions.
• Paddle and its payment providers, for checkout, billing, tax, fraud prevention, receipts, refunds, chargebacks, and subscription support.
• Website, database, and security infrastructure providers, including the services used to host and protect Heavenly Dao.
• Professional advisers or authorities, when needed to establish or defend legal claims, comply with law, protect users, or respond to a valid legal request.
• A successor operator, if the project is reorganized or transferred, subject to appropriate confidentiality and legal safeguards.

Providers may process data in other countries. Where required, transfers use recognized safeguards or another lawful transfer mechanism.

6. Cookies and local storage

The website uses essential session cookies when you sign in with Discord. These cookies help authenticate you, protect the login flow, and keep the service secure. Device-local storage may remember interface choices such as theme or dismissed notices.

We currently do not use advertising cookies. Paddle Checkout operates in its own secure interface and may use cookies or similar technologies under Paddle's Privacy Notice.

7. Retention

Account and gameplay information is kept while your account is active and as reasonably needed to operate the persistent game. Security, moderation, transaction, and dispute records may be retained longer where needed to prevent abuse, comply with law, or establish legal claims. Short-lived login state and session data expire or are deleted when no longer required.

When deletion is requested, we delete or anonymize eligible information within a reasonable period, unless retention is required by law or necessary for security, fraud prevention, financial records, or legal claims. Paddle controls retention of the payment information it independently processes.

8. Security

We use reasonable administrative and technical safeguards such as access controls, signed sessions, limited credentials, transport encryption, and protected infrastructure. No online system is completely secure, so we cannot guarantee absolute security. Never send passwords or complete payment-card details to staff.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information; obtain a portable copy; withdraw consent; and complain to a supervisory authority.

Send a request through the official Discord and identify the Discord account involved. We may need reasonable verification before acting. For information controlled by Paddle, use Paddle Order Support or the contact routes in Paddle's Privacy Notice.

10. Children's privacy

Heavenly Dao is not directed to children under 13 and does not knowingly collect their personal information. Users must also meet Discord's age requirement for their country. If you believe a child provided information contrary to these rules, contact staff so it can be investigated and removed where required.

11. Changes to this Policy

We may update this Policy when our service, providers, or legal obligations change. The effective date will be updated, and material changes will be announced through the website or official Discord when reasonably practical.

12. Contact

Heavenly Dao is operated from Georgia. Privacy questions and requests may be sent to staff through the official Heavenly Dao Discord server. Please do not include passwords, complete card details, or other unnecessary sensitive information.