Privacy Policy

1. Scope and controller

This Privacy Policy explains how GuildMesh, operated from the United Kingdom, processes personal data when you use the GuildMesh Discord application, website, portal and connected community features.

GuildMesh acts as controller for data used to operate the platform. A Discord community may also be responsible for how its administrators use information made available through GuildMesh.

2. Information we collect

Discord account information

• Discord user ID, username, display name and avatar;
• the Discord servers returned through the OAuth2 permissions you approve;
• server, role and permission information required to determine access and administrative rights;
• interaction data needed to process commands, buttons, forms and Discord events.

GuildMesh profile and community information

• community settings, selected channels, roles, enabled modules and connection settings;
• player profiles, character names, realms, regions, classes, specialisations and imported game information;
• event, raid, Mythic+, group, invite-request and recruitment information;
• messages, notes, applications, availability, signup status and other content you choose to submit;
• support messages and bug reports you send to us.

Technical information

• session identifiers, timestamps, request information, security logs and error records;
• IP address and basic browser or device information where generated by normal web-server operation.

3. How we use information

We process information to:

• authenticate users through Discord and maintain secure sessions;
• show the communities, permissions and features available to you;
• operate signups, profiles, applications, community connections and Discord synchronisation;
• provide support, investigate faults and improve reliability;
• prevent abuse, protect users and maintain security;
• comply with legal obligations and Discord's developer requirements.

4. Lawful bases

Under UK data-protection law, GuildMesh generally relies on:

• contract, where processing is necessary to provide features you request;
• legitimate interests, including platform security, service improvement, abuse prevention and community administration;
• consent, where you actively authorise an optional connection or feature that requires it;
• legal obligation, where information must be processed or retained to comply with law.

5. How information is shared

Information may be shared:

• with Discord, where required to authenticate users or operate Discord-based features;
• with members or administrators of a community according to the feature and visibility settings selected;
• across connected communities where a user or organiser chooses community or public visibility;
• with service providers used for hosting, databases, security or technical operation, under appropriate safeguards;
• with third-party game-data services, such as Raider.IO, when you request an import or connection;
• where required by law, court order, platform enforcement or to protect rights and safety.

GuildMesh does not sell personal data.

6. Community and public visibility

GuildMesh includes private, community and public visibility options. Information you deliberately publish as community or public content may be visible outside your own Discord server. Review the selected visibility before submitting an event, profile, recruitment listing or group activity.

7. Retention

Information is retained only for as long as reasonably necessary to provide GuildMesh, maintain security, resolve disputes and meet legal obligations. Retention varies by record:

• account and community configuration is normally retained while the account or community remains active;
• event, signup and activity records may be retained to support history, attendance and administration;
• security and error logs are retained for a limited period appropriate to investigation and service protection;
• deleted information may remain temporarily in restricted backups until those backups rotate or expire.

8. Security

GuildMesh uses reasonable technical and organisational measures to protect information, including encrypted HTTPS connections, controlled access, Discord OAuth2 authentication, permission checks and protected infrastructure. No online service can guarantee absolute security.

9. International transfers

Discord and other service providers may process information outside the United Kingdom. Where required, transfers are handled using recognised safeguards or another lawful transfer mechanism provided by the relevant service.

10. Your rights

Depending on the circumstances, UK data-protection law may give you rights to:

• access your personal data;
• correct inaccurate or incomplete information;
• request deletion or restriction;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent;
• complain to the UK Information Commissioner's Office.

We may need to verify your Discord identity before completing a request.

11. Data deletion requests

To request deletion, join the GuildMesh Support Discord and raise a private support request. Include your Discord user ID and identify any GuildMesh communities involved. Community owners may also request removal of their community configuration and associated operational data.

12. Children

GuildMesh is not intended for anyone below Discord's minimum age requirement in their country. We do not knowingly seek to collect personal data from children who are not permitted to use Discord.

13. Changes to this policy

We may update this policy when GuildMesh features, legal requirements or platform rules change. The current version will remain publicly available here with its effective date.

14. Contact

Privacy questions and rights requests can be raised through the official GuildMesh Support Discord.