Privacy Policy

This policy explains what Ultimate Squad (the website, the desktop app and the Discord bot) collects about you, why, and what you can do about it. We keep it small: we collect what the game needs and nothing we sell.

What we collect

• Account: your username, and either a password (stored only as a one-way hash, never in readable form) or your Discord link. An email address only if you add one.
• Sign in with Discord: we ask Discord for the identify scope only: your Discord user id, username and avatar. We never see your Discord password, e-mail or servers.
• Game data: your coins, cards, lineups, results, trades, market listings, achievements, forum posts, friends and chat messages, and the team name you choose.
• Usage and errors: product analytics and error reports (which pages and features are used, and technical details when something breaks), collected with PostHog and tied to a random account id.
• Technical data: your IP address and browser details appear in server logs and are used to keep the service running and to limit abuse (for example how many guest accounts one network can create).
• Discord bot: when you use the bot, the Discord ids and command data needed to answer you.

Cookies and local storage

We store your sign-in token and a few preferences in your browser's local storage (and, during Discord sign-in, one short-lived cookie that protects the login against forgery). We do not use advertising cookies.

How we use it

• to run the game: your account, progress, matchmaking, leaderboards and rewards;
• to keep it safe: preventing cheating, abuse and spam, and enforcing the Terms;
• to improve it: understanding what players use and fixing errors.

We do not sell your data and we do not show ads.

Who else sees it

• Other players see your username, team name, rating and anything you post or list.
• Service providers that run the game for us: Railway (hosting and database), Cloudflare (DNS and image storage), PostHog (analytics and error tracking) and GitHub (desktop app downloads). They process data only to provide those services.
• Discord, when you sign in with it or use the bot (their own privacy policy applies).
• Authorities, if the law requires it.

How long we keep it

Account and game data is kept while your account exists. Guest accounts unused for 14 days are deleted automatically. Analytics and logs are kept for a limited time.

Your choices

• You can ask to see, correct or delete your account and its data at any time.
• You can unlink Discord from your profile if you also have a password.
• You can block analytics in your browser; the game still works.

To make a request, join the Ultimate Squad Discord server and open a ticket or message a moderator from the account you want deleted. Deleting an account removes your progress permanently.

Children

The game is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.

Changes

We may update this policy; the date at the top shows the latest version.