Privacy Policy

1. Information We Collect

We collect the following information when you use Ends Town Hall:

• Account Information: Email address, password (encrypted), display name
• Discord Information: Discord ID, username, avatar (when you connect Discord)
• Device Information: Browser type, operating system, device type, IP address, screen resolution, timezone, and language settings
• Browser Fingerprint Data (during verification only): When you verify for a Discord server, our scanner collects 650+ technical signals from your browser across 28 categories. This includes: GPU model and WebGL rendering data, canvas rendering hash, audio processing fingerprint, installed fonts, supported codecs, screen and display properties, hardware specifications (CPU cores, device memory), WebRTC network data, browser feature support, sensor capabilities, and cryptographic performance metrics. These signals are combined into a unique fingerprint hash used solely for alt account and ban evasion detection.
• IP Threat Analysis: Your IP address is analyzed by IPQualityScore to detect VPNs, proxies, Tor nodes, and calculate a fraud risk score. This data includes ISP, geolocation (city/country level), and connection type.
• Usage Data: Login times, session information, verification timestamps

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your identity and secure your account
• Send important notifications (password changes, new logins, security alerts)
• Detect and prevent fraud or abuse
• Improve our Service

3. Information Sharing

We do NOT sell your personal information. We may share information only in these cases:

• With your consent: When you explicitly agree
• Service providers: Third parties that help us operate (e.g., email delivery)
• Legal requirements: When required by law or to protect rights

4. Data Security

We implement security measures to protect your data:

• Passwords are encrypted using industry-standard hashing
• Sessions are secured with unique tokens
• Rate limiting protects against brute-force attacks
• Security notifications alert you of suspicious activity

However, no method of transmission over the Internet is 100% secure.

5. Your Rights

You have the right to:

• Access: View your personal data in Account Settings
• Update: Change your email, password, or display name
• Delete: Delete your account and all associated data
• Export: Request a copy of your data (contact us)

6. Cookies

We use essential cookies and local storage to:

• Keep you logged in (session token)
• Remember your preferences

We do not use tracking cookies or third-party advertising cookies.

7. Third-Party Services

We integrate with:

• Discord: For authentication and community features. Discord's privacy policy applies to data they collect.
• IPQualityScore (IPQS): For IP reputation analysis, VPN/proxy detection, and fraud scoring. Your IP address is sent to IPQS during verification. See IPQS Privacy Policy.
• hCaptcha: For bot protection during verification. See hCaptcha Privacy Policy.
• Google Safe Browsing: For malicious link detection in Discord messages.
• Stripe: For payment processing on paid plans. We never store your full credit card number.

8. Data Retention

We retain your data as long as your account is active. When you delete your account:

• Your personal data is permanently deleted
• Sessions are immediately terminated
• Some anonymized data may be retained for analytics

Fingerprint Data Retention: Browser fingerprint hashes and associated verification records are retained for as long as the Discord server owner maintains their account. This is necessary to detect returning banned users on new accounts. If a server owner deletes their account, all fingerprint data associated with their server is deleted. Individual users may request deletion of their fingerprint data by contacting us or the server owner.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us through our Discord server or at the email provided on our website.