Privacy Policy
Information We Collect
When you sign in with Google or Discord, we receive your display name, email address, and avatar URL from the provider. We store this information to identify your account.
If you choose to link a Patreon account, we receive your Patreon user ID, email address, and active-campaign membership status from Patreon. We store your Patreon user ID and the date your supporter status began; we do not store your Patreon email.
We log your IP address and user-agent string for rate limiting, debugging, and abuse prevention. These entries are held in our server logs and, when an error occurs on your request, forwarded to our error-tracking provider (Sentry) to help us diagnose issues. IP addresses are not used for advertising, fingerprinting, or cross-site tracking.
How We Use Your Information
Your information is used solely to operate Cantrip: authenticating your sessions, displaying your identity within leagues, computing player ratings, and investigating abuse. We do not sell your personal data, and we do not share it with third parties except the sub-processors listed below.
Cookies
Cantrip uses a single session cookie to keep you logged in. This cookie is essential for the service to function and cannot be disabled. We do not use advertising, tracking, or analytics cookies.
Analytics
We use PostHog to understand how Cantrip is used. Our integration does not set cookies — your device stores nothing after you close the tab.
If you are signed out, we collect aggregate pageview events with no persistent identity. PostHog does not build a profile tied to you.
If you are signed in, we associate your events with an opaque internal account ID so we can understand usage across sessions. Events include the pages you visit and the UI elements you interact with; they may contain display names visible on those pages. They do not include your email, session credentials, or any data from private account pages.
Data Retention
- Account data is retained as long as your account is active. Match results and ratings may be retained after account deletion to preserve league history.
- Error reports (Sentry) are retained for up to 30 days and then automatically deleted.
- Analytics events (PostHog) are retained for up to 90 days and then automatically deleted. When you delete your account, we propagate the deletion request to PostHog.
- Server request logs are retained for up to 30 days for security and debugging.
- Audit logs of administrative actions are retained indefinitely as part of league history.
Third-Party Services
Cantrip relies on the following sub-processors to operate. Each has its own privacy policy governing the data it processes.
- Google / Discord — authentication (you choose which to use)
- Patreon — supporter linking (optional)
- PostHog — product analytics (hosted in the United States under Standard Contractual Clauses)
- Sentry — error and performance monitoring (may receive your IP address when an error occurs on your request)
- Fly.io — application hosting
Your Rights
You have the right to access, correct, export, or delete the personal data we hold about you. You can delete your account at any time from your settings page. For other requests, please contact gdpr@cantrip.gg.
Children's Privacy
Cantrip is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can remove it.
Contact
For general questions, please contact hello@cantrip.gg.