PRIVACY
POLICY

01

Scope

This Privacy Policy applies to the official Static State website, including staticstate.dev, its temporary Cloudflare Pages address, and the website features described here. It does not control the privacy practices of Discord, YouTube, Steam, Cloudflare, or other third-party services.

02

Information we process

Information received through Discord login

When you choose “Login with Discord,” the site requests Discord’s basic identity permission. The site may receive and use:

• Your Discord user ID.
• Your Discord username and display name.
• Your Discord avatar identifier and profile image.

The site does not request your Discord password, email address, private messages, message content, friends list, or payment information. The temporary Discord access token used during login is not stored after the login request is completed.

Static State Discord community information

While you are logged in, the site may use a server-side Discord bot connection to check whether your account is a member of the Static State Discord server, whether server onboarding is pending, and which recognized community role should be shown in your website profile. The website displays only the highest relevant role selected by its role-priority rules.

Session and technical information

The website stores a signed session cookie on your device. That cookie contains your Discord user ID, username, display name, avatar identifier, and session timestamps. Static State does not currently maintain a separate user-account database.

The hosting provider and normal internet infrastructure may automatically process technical information such as your IP address, browser type, device information, request time, and requested page for security, delivery, diagnostics, and abuse prevention.

03

How information is used

Information is used only as reasonably necessary to:

• Authenticate you through Discord.
• Display your Discord name, avatar, community status, and recognized role.
• Show the appropriate Static State Discord action, such as joining or opening the server.
• Protect the login process against forgery, tampering, abuse, and unauthorized access.
• Operate, secure, troubleshoot, and improve the website.
• Comply with applicable legal obligations or valid legal requests.

Static State does not use Discord information for targeted advertising and does not sell or rent it.

04

Cookies

The website currently uses only cookies necessary for login and security:

These cookies are marked HttpOnly and SameSite=Lax, and they are marked Secure when transmitted over HTTPS. Blocking them may prevent Discord login from working.

05

Third-party services and disclosures

Static State may transmit or make information available to service providers only as needed to operate the website:

• Discord, for OAuth login, profile identity, server membership, and role checks.
• Cloudflare, for website hosting, delivery, security, and related technical processing.
• YouTube, when an embedded trailer is loaded or played. The site uses YouTube’s privacy-enhanced embed domain where configured.

Links to Steam, Discord, YouTube, and other external sites take you to services governed by their own terms and privacy policies.

Information may also be disclosed when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or respond to a valid legal process.

06

Retention

• The login session cookie expires after no more than 7 days and is deleted when you log out.
• The OAuth security cookie expires after no more than 10 minutes.
• Community membership and role information is requested when needed and is not stored in a separate Static State user database.
• Technical logs controlled by hosting or third-party providers are retained according to those providers’ practices and applicable law.

07

Your choices and requests

You may:

• Use the public website without logging in.
• Log out to remove the Static State session cookie.
• Revoke the application through Discord’s Authorized Apps settings.
• Ask what data Static State has, request correction, or request deletion by emailing the address below.

Because Static State does not currently maintain a separate account database, a deletion request will usually involve confirming that no server-side profile record is retained and helping you end any active session or authorization.

08

Security

Static State uses reasonable technical measures designed to protect the login flow, including signed session data, HttpOnly cookies, secure HTTPS transmission, short-lived OAuth state validation, and restricted server-side credentials. No online system can be guaranteed completely secure.

09

Children

The website is not directed to children under 13. Do not use Discord login unless you meet Discord’s minimum age requirement and any higher minimum age required in your country. If Static State learns that personal information was collected from a child in violation of applicable law, reasonable steps will be taken to delete it.

10

Changes to this policy

This policy may be updated when the website, Discord integration, business operations, or legal requirements change. The revised page will display a new “Last updated” date. Material changes may also be announced through appropriate Static State channels.