Privacy Policy

We collect and process the following types of data:

• Discord account information (for authentication and communication)
• User behavior data (for moderation and security)
• Technical data (for service optimization)
• Basic analytics data (for product improvement and bug fixes)
• Minecraft username and UUID (for service functionality)

Note: All sensitive data is either hashed or encrypted when stored.

3.1 Local Storage

The following data is stored locally on your machine:

• API keys
• User preferences
• Configuration settings

3.2 Server Storage

Our secure servers store:

• User profiles (encrypted)
• Verification applications
• Moderation records
• Usage logs (90-day retention)

3.3 Never Stored

• Plain text IP addresses (always hashed)
• Minecraft account credentials
• Minecraft account tokens
• Plain text API keys (always encrypted)

• User logs: Automatically deleted after 90 days
• Session data: Expires after 30 days of inactivity
• Authentication tokens: Temporary and auto-expire
• Refresh tokens: Stored until user logout
• Analytics data: Anonymized after 30 days
• Punishment records: Kept indefinitely for moderation
• Verification applications: Stored for accountability

• MongoDB for secure data storage
• Redis for temporary caching
• API key authentication
• Rate limiting protection
• Session management
• Secure WebSocket connections
• Discord role-based access control
• Regular security audits
• Encrypted connections (HTTPS/WSS)

Our service includes automated processing for:

• Auto-dodge feature (using player statistics)
• Queue statistics collection
• Automated moderation systems
• Performance tracking

We integrate with:

• Microsoft Authentication Services
• Xbox Live Services
• Minecraft Services
• Hypixel API
• Discord (authentication and communication)

Important Note:

We do not sell or share your data with any third parties beyond what's necessary for service functionality.

You have the right to:

• Access your stored data
• Request data deletion
• Update your information
• Opt-out of certain features
• Revoke access through your Microsoft account
• Opt-out of analytics collection

Below is an example of how we structure and store user data (with sensitive information encrypted):

{
  "user": {
    "id": "user_12345",
    "username": "ExamplePlayer",
    "discordId": "123456789012345678",
    "minecraftUuid": "1234abcd-1234-abcd-1234-abcd12345678",
    "email": "player@discord.com",
    "hypixelApiKey": "AES256:IV:YWJjZGVmZ2hpamtsbW5vcA==:DATA:dGhpcyBpcyBhbiBlbmNyeXB0ZWQgaHlwaXhlbCBrZXk=",
    "solaraApiKey": "AES256:IV:eHl6MTIzNDU2Nzg5YWJjZA==:DATA:dGhpcyBpcyBhbiBlbmNyeXB0ZWQgc29sYXJhIGtleQ==",
    "createdAt": 1672531200000,
    "lastLogin": 1703980800000,
    "isActive": true,
    "permissions": [
      "read_own_logs",
      "read_stats",
      "use_proxy"
    ]
  }
}

Note: This is a simplified example. Actual data structures include additional security measures.

The Service is intended for a general audience and not directed to children under thirteen (13) years of age. LunarLabs LLC does not knowingly collect personal information as defined by the U.S. Children's Privacy Protection Act ("COPPA") in a manner that is not permitted by COPPA. If you are a parent or guardian and believe we have collected such information in a manner not permitted by COPPA, please contact us at privacy@scala.gg, and we will remove such data to the extent required by COPPA.

We work with analytics providers to understand how our service is used:

• Usage patterns and trends
• Feature popularity and effectiveness
• User engagement metrics

While we do not currently serve interest-based advertising, we respect industry self-regulatory programs for online behavioral advertising:

• Digital Advertising Alliance (DAA) - Visit www.aboutads.info/choices
• Network Advertising Initiative (NAI) - Visit www.networkadvertising.org/choices

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt-out of the sale of your personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at privacy@scala.gg. We will respond to your request within 45 days.

If you are in the European Economic Area (EEA), you have these additional rights under GDPR:

• Right to be informed about our processing of your personal data
• Right to access your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

Legal Basis for Processing:

• Contract performance - Processing necessary for our services
• Legitimate interests - Improving our services and security
• Legal obligations - Compliance with EU/member state law
• Consent - Where specifically requested

For GDPR-related requests or concerns, contact our Data Protection Officer at privacy@scala.gg.

We share information in the following limited circumstances:

• Service Providers - To help operate our services (e.g., hosting, analytics)
• Legal Requirements - To comply with laws or respond to legal requests
• Protection - To protect our rights, privacy, safety, or property
• Business Transfers - In connection with a merger, acquisition, or sale of assets

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable laws.

For privacy-related inquiries, contact us at:

• Privacy Officer: privacy@scala.gg
• Support: support@scala.gg