Privacy notice

Guildly is run by Noware, the data controller for the personal data described here. For any privacy question or request, email [email protected].

• Account details: your email address, username, optional display name, and your password, which we store only as a one-way hash and never in readable form.
• Sign-in sessions: for each device you sign in on, the IP address, the browser's user agent (for example “Chrome on Windows”) and when you signed in.
• What you do on Guildly: guilds you join and your role in them, events you register for (including any army list or deck you add), tournament pairings and results, table bookings and their notes, guildhalls you own or work at, votes on whether a guildhall is genuine, and who and what you follow.
• What you write: posts, comments and chat messages.
• Bug reports: what you write in the report, the page you were on and your browser's user agent.
• Your location, only if you allow it: when you ask for guildhalls near you, your browser shares your approximate position. We use it to answer that search and do not save it to your account.
• Server logs: our servers record each request's IP address, the address requested and the time. We use them to keep the service running and secure.

Guildhall owners may also add business details for their venue, such as an address, phone number and email. These are shown to other users.

If you host an event at home or online, the rough area you give (such as a town) is shown to other users. The full address or join link is shown only to the event's organisers and the players who register for it.

• To provide the service you signed up for (contract): running your account, guilds, events, tournaments, bookings, posts and chat.
• Our legitimate interests: keeping accounts secure (sign-in sessions, limits on repeated failed logins, server logs), preventing abuse, and fixing bugs you report. We have balanced these against your interests, and they rely on the minimum data needed.

We do not sell your data, use it for advertising or make automated decisions about you.

Other signed-in users see your username and display name next to what you post, the guilds you are in, the events you register for and your tournament results. They never see your email address. Guild and guildhall organisers see the details needed to run what they organise, such as their booking requests and event registrations.

Guildly is hosted by [TODO: hosting provider and location], who stores the data on our behalf under a data processing agreement. We share data with nobody else unless the law requires it.

We use one cookie, guildly_session, which keeps you signed in. It is strictly necessary and lasts 30 days. We also remember your light or dark theme in your browser's local storage. There are no analytics, tracking or advertising cookies, so we do not ask for cookie consent.

Directions links on guildhall pages open Google Maps. Google receives data only if you click one, and then its own privacy policy applies.

• Your account: until you delete it.
• Sign-in sessions: 30 days from sign-in, or until you sign out, change your password or sign out everywhere.
• When you delete your account: we immediately erase your email, username, display name and password, sign out all your devices and remove your guild memberships, staff roles, follows, guildhall votes, registrations for events that have not started and upcoming table bookings. Posts, comments, chat messages and results from tournaments that had already started stay so that conversations and standings still make sense, but they show as written by “Deleted user” and are no longer linked to anything that identifies you. Bug reports are kept for fixing problems but unlinked from your account. If you are hosting a personal event at home or online that is still running, cancel or complete it first.
• Server logs: [TODO: log retention period, e.g. 30 days].
• Backups: [TODO: backup retention period]. Deleted data disappears from backups as they roll over.

Under UK data protection law you have the right to:

• get a copy of your personal data (access, and portability in a reusable format)
• have inaccurate data corrected
• have your data erased. You can do this yourself from Settings → Delete account
• object to, or ask us to restrict, how we use your data

To use any of these rights, email [email protected]. We will reply within one month. If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

Guildly is not intended for children under 16, and we do not knowingly hold their data. If you believe a child under 15 has an account, contact [email protected] and we will delete it.

If we change how we use your data, we will update this page and its date. For significant changes we will also tell you in the app.