Privacy Policy

Effective date: June 30, 2026

This Privacy Policy explains how Command Observer ("Service", "we", "us", or "our") collects, uses, and protects your personal information. By using the Service you agree to the practices described here.

1. Information We Collect

Information you provide directly

Username — the display name you set within the Service.
Community content — unit structures, member rosters, documents, and other content you create within the Service.

Accounts are created and accessed via Discord or Steam OAuth. When you sign in we receive:

Discord — your Discord user ID, username, and email address (if permitted by your Discord privacy settings).
Steam — your Steam ID and public display name.

We do not receive or store your Discord or Steam passwords.

Information collected automatically

Log data — IP address, browser type, pages visited, and timestamps, retained for up to 30 days for security and debugging purposes.
Cookies — we use a single HttpOnly session cookie to maintain your authenticated session. No tracking or advertising cookies are used.

Information visible without an account

When a community administrator enables public structure, the community's ranks, awards, and qualifications pages become publicly accessible. No personal or member-identifying information is exposed on these pages; only the community-defined structure (names and descriptions of ranks, awards, and qualifications) is shown to unauthenticated visitors.

2. How We Use Your Information

We use the information we collect to:

Operate and maintain the Service.
Authenticate you and keep your session secure.
Sync community roles and membership via the Discord bot integration.
Investigate security incidents and enforce our Terms of Service.

We do not sell your personal information. We do not use your data for advertising.

We share your information only in the following limited circumstances:

Service providers — infrastructure providers (hosting, database) who process data on our behalf under confidentiality obligations.
Discord — when you use the Discord bot integration, your community's role data is synced with the Discord server you authorise. You control which server is connected.
Legal requirements — when required by law, subpoena, or to protect the rights, property, or safety of us or others.

4. Data Retention

Account data is retained for as long as your account is active.
When you delete your account, your personal information is removed within 30 days. Community content you created may remain if other members have built upon it.
Log data is retained for up to 30 days and then deleted.

5. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS/WSS) and HttpOnly session cookies. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] so we can delete it.

7. Your Rights

Depending on your jurisdiction you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate data.
Request deletion of your personal information.
Object to or restrict certain processing.

To exercise these rights, contact us at [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

9. Contact

For questions or concerns about this Privacy Policy, contact us at [email protected].