Privacy policy
Draft, pending legal review. Not yet in effect. Items in [brackets] are open questions for counsel.
Last updated: 2026-10-02
Hidden Token Gaming ("HTG", "we") is a gaming community for adults. This policy explains what information about you HTG handles, why, who else sees it, how long we keep it and what you can ask us to do with it.
HTG is run by [legal entity, address: to be decided (plan D5)], which decides how your information is used (the "controller"). Contact: [privacy contact address].
The short version
- We collect as little as we can. Today that is almost nothing beyond what Discord already shows to everyone in the server.
- We never sell your information, and we don't show ads or use trackers.
- Public profiles are opt-in. Until you choose a display name, any stats about you appear under a pseudonym.
- You can ask to see, correct or delete what we hold, at any time.
What this policy covers
| Service | Status |
|---|---|
| The website, hiddentoken.com | Live |
| The HTG Discord server and the HTG Bot | Live |
| Game servers HTG runs or rents (today one War Dogs server) | Live |
| Support tickets and appeals | Live |
| app.hiddentoken.com: accounts, linked game identities, stats, leaderboards and Muster (crew-up sessions) | Planned. Covered here so you know in advance; we will update this policy before it launches |
| Supporters (Patreon) | Planned |
Discord, Steam, Xbox, Roberts Space Industries, KRAFTON, Patreon and the game publishers have their own privacy policies for what they collect. This policy covers only what HTG does.
What we collect today
The website
The site sets no cookies and runs no analytics, ads or trackers, and no other company collects information about your activity across websites through it. It is hosted on Cloudflare, which processes your IP address and request details to deliver the site and protect it from attacks, as HTG's processor under Cloudflare's privacy policy. If Cloudflare ever has to challenge a suspicious request, it may set a short-lived security cookie that is strictly necessary for that check (Cloudflare cookies).
Discord
When you join the HTG Discord server, HTG staff and the bots in the server can see what Discord shows to server staff: your username and ID, avatar, roles, when you joined, your onboarding answers (games, platform, region and pings), and what you post in the server. Discord stores all of it under Discord's privacy policy.
HTG keeps its own copies of only:
- moderation records: for every warning, timeout, kick or ban, your Discord user ID and username, the rule, what happened, the staff member, and the date. They sit in a private staff channel and are used to apply the moderation ladder and handle appeals;
- server audits: counts of members per role, used to manage the server's structure. They name no members.
Anything the HTG Bot or HTG's apps get from Discord is used only for the HTG features described here. It is never sold, never shared beyond the providers below, never used to profile you, and deleted when it's no longer needed or when you ask.
Support tickets and appeals
- Tickets opened in
#supportare handled by a third-party bot, Ticket Tool. When a ticket closes, its transcript is posted to a private staff channel in HTG's Discord server. Ticket Tool doesn't keep a copy (Ticket Tool FAQ). - Ban appeals are sent by email to [email protected], hosted by Proton in Switzerland. We use what you send only to decide your appeal.
Game servers
While you play on HTG's War Dogs server, HTG staff can see your in-game name, SteamID, team, kills, deaths, in-game cash and ping, to run matches and enforce the rules. The server is run by our host (QONZER) under Bulkhead's licence, and both handle connection data under their own policies. HTG saves none of it except in a moderation record, which includes your SteamID if you are kicked or banned on the server.
What we will collect when app.hiddentoken.com launches (planned)
This section describes the design. It takes effect only when these features launch, and we will update it and announce the change first.
- Your HTG account. You sign in with Discord. We store your Discord user ID, username and avatar.
- Linked game identities, only the ones you choose to link:
- Steam: your SteamID, via Steam sign-in. With your permission we read your public Steam profile and achievements for the games HTG plays;
- Xbox: your Xbox user ID and gamertag, read from your Discord connections with your permission;
- Star Citizen: your RSI handle, proved by a one-time code you place in your RSI bio;
- PUBG: your PUBG account ID and name, proved by a custom-match challenge;
- Patreon: your supporter tier and status. Payments happen at Patreon; we never see card details. Patreon controls your membership data, and HTG uses what Patreon shares only to give you your supporter perks, under Patreon's Creator Privacy Promise.
- Game activity. Events from HTG-run servers and official game APIs, such as matches played, kills, deaths, scores and time played, tied to your linked identity. Counter-Strike 2 server logs also record the IP address you connect from. [Whether to keep IPs at all, and for how long, is a question for counsel; the default is to drop them at ingestion except where needed for ban enforcement.]
- Muster sessions. Sessions you create or sign up for, and your role in them. Your gamertag or game name is shown to the members of a session you join, so you can add each other in game.
- "Who's playing now". If you share your activity on Discord, the bot sees which game you are playing, to suggest who to crew up with. It doesn't store a history of it.
Before you link anything, HTG shows no name. Servers HTG runs record stats for everyone who plays. Until you link and choose a display name, those stats appear only under a generated pseudonym that can't be traced back to your game account.
Where it comes from
- From you: what you post, your onboarding answers, tickets, appeals, and the accounts you choose to link.
- From Discord: your Discord profile and roles in the HTG server.
- From game servers HTG runs or rents: your in-game name, SteamID and match activity, and (on HTG-run servers) your connection IP.
- From services you link (planned): Steam (your public profile and achievements, read only when you ask), Xbox via your Discord connections, your public RSI citizen page, the PUBG API, and Patreon.
Do you have to give it? A Discord account is needed to join the community. Linking game accounts, sharing activity and supporting are optional; without them, the features that depend on them won't work for you.
Why we use it
| Purpose | Information | Legal basis, where the law asks for one [for counsel] |
|---|---|---|
| Run the community: Discord roles, events, crew-ups, game servers | Discord profile, onboarding answers, session signups, linked identities | Providing the service you joined (contract) |
| Keep everyone safe: moderation, bans, cheating and ban-evasion checks | Moderation records, SteamIDs, connection IPs from HTG servers | Our and members' legitimate interest in a safe, fair community |
| Stats, leaderboards and recognition | Game activity tied to linked identities | Your consent when you link; you can withdraw it |
| Supporter perks | Patreon tier and status | Providing the perks (contract) |
| Answer support requests and appeals | What you send us | Legitimate interest; contract |
We don't use your information for advertising, we don't sell or rent it, and we don't use it to build profiles beyond what is described here. We don't make automated decisions with legal or similarly significant effects on you. Bans are decided by people.
Who else sees it
Other members see what you post in Discord, the sessions you join, and anything you make public on the app (display name, stats, recognition).
Service providers process it for us, under their own terms:
Provider What for Where Discord The community server, the HTG Bot, sign-in United States Cloudflare Website hosting, DNS, security Global network Proton Email for appeals Switzerland QONZER The War Dogs server United States Ticket Tool Support tickets in Discord Transcripts stay in HTG's Discord Wick Anti-raid protection in Discord [not published] [server host, to be chosen (plan D1)] app.hiddentoken.com and HTG's game servers (planned) United States Patreon Supporter membership (planned) United States Game publishers, when we report cheating or abuse on their games, receive the evidence and the game account involved.
Authorities, when the law requires it, or to protect someone from serious harm.
Where it is stored
HTG's own records are stored in the United States. Appeal emails are stored in Switzerland (Proton). The website is served from Cloudflare's global network. If you live outside the United States, your information is transferred there. [Transfer safeguards to confirm with counsel.]
How long we keep it
| Information | How long |
|---|---|
| Moderation records | While they count toward the ladder, and for as long as a ban lasts. [Period after a ban ends: for counsel] |
| Ticket transcripts (in HTG's staff channel) and appeal emails | [Proposed: 12 months after the ticket or appeal closes, then deleted] |
| Your HTG account and linked identities (planned) | Until you delete them or unlink |
| Identity-linked game events (planned) | 13 months, then anonymised; totals and leaderboard history are kept with no link to you [period pending legal review] |
| Connection IPs from HTG game servers (planned) | [Proposed: not kept, except with a ban record] |
| Patreon tier and status (planned) | While you are a supporter, then 30 days |
Your choices and rights
You can:
- see what HTG holds about you and get a copy of it;
- correct it;
- delete it. We remove your account and linked identities, and anonymise your game events, so match totals and leaderboards stay correct but no longer point to you. We may keep a ban record where we need it to enforce a ban [for counsel];
- unlink a game account, or make your profile private, at any time in the app (planned);
- withdraw consent to stats tied to you by unlinking;
- object to how we use your information, or ask us to restrict it;
- complain to your local data protection authority, if you have one.
Ask in a #support ticket or by email to [privacy contact address]. We'll confirm it's really you
through your Discord account, and answer within 30 days.
Do Not Track: the site doesn't track you, so there is nothing for a Do Not Track signal to switch off.
Age
HTG is for adults only. You must be 18 or older to join (rule 1 of the server rules). If we learn that a member is under 18, we remove them and delete what we hold about them, except what we need to stop them rejoining before they turn 18.
Security
Access to HTG's systems and records is limited to the staff who need it. HTG's own data stores are encrypted at rest, secrets are encrypted, and HTG's bot runs with the fewest permissions it needs. No system is perfectly secure. If a breach affects your information, we will tell you and any authority we must notify, as the law requires.
Changes
We will post changes here and update the date at the top. If a change matters, such as a new kind of information or a new use for it, we will announce it in Discord before it takes effect.