Privacy Policy

This Privacy Policy describes how Horror Quest ("we," "us," or "our"), operated by Nick Loubser, handles information in connection with the Horror Quest Discord Activity (the "Service"). We are committed to being transparent about the minimal data we use to operate the game.

1. Overview

Horror Quest is designed with privacy in mind. We collect only the minimum information necessary to run a real-time multiplayer game session. We do not maintain user accounts, we do not sell your data, and we do not track you outside of an active game session.

2. Information We Receive from Discord

When you launch Horror Quest, the Discord Activity SDK performs an OAuth 2.0 authorization flow. With your permission (via the identify scope), we receive the following from Discord:

• Discord User ID — a unique numerical identifier assigned to your Discord account
• Username — your current Discord display name
• Avatar hash — a reference to your Discord profile picture (not the image file itself)

We do not receive your email address, password, payment information, or any other personal data from Discord.

The identify scope is the minimum required by Discord Activities to function. No other scopes are requested.

3. How We Use This Information

The information received from Discord is used exclusively for the following purposes within your active game session:

• Identifying you within the game room so your votes are correctly attributed
• Displaying your username to other players in the lobby and during the game
• Determining host privileges (the first player to join a room becomes the host)
• Associating your TTS (text-to-speech) narration requests with your channel session

We do not use this information for advertising, profiling, or any purpose outside of operating the active game session.

4. Data Retention

Game sessions are ephemeral. Your user data (Discord User ID, username, avatar) exists only in memory for the duration of an active game session, managed by Cloudflare Durable Objects. Once a game session ends or the room is vacated, this data is not persisted to any long-term database.

We do not maintain databases of users, game histories, or player statistics. There is no account to delete because none is created.

5. Third-Party Services

The Service relies on third-party infrastructure and AI providers. Their respective privacy policies govern how they handle data:

• Discord — The platform through which you access the Activity. Your Discord account data is governed by Discord's Privacy Policy.
• Google (Gemini API / Imagen API) — Story text, scene imagery, and voice narration are generated by Google's AI APIs. The scene text sent to the narration API is derived from in-game story content, not your personal information. Governed by Google's Privacy Policy.
• Cloudflare — The Service is hosted on Cloudflare Workers and uses Durable Objects for real-time state. Standard network-level data (IP addresses, request metadata) may be logged by Cloudflare per their infrastructure policies. Governed by Cloudflare's Privacy Policy.

6. Cookies and Tracking

Horror Quest does not use cookies, browser storage, analytics trackers, or any cross-session tracking technology. The game state is held in server-side Durable Objects for the duration of the active session only.

7. Children's Privacy

The Service is available to users who meet Discord's minimum age requirement (13 years old in most jurisdictions). We do not knowingly collect or process information from children under the age of 13. If you believe a child under 13 has used the Service, please contact us and we will take appropriate action.

8. Data Security

All data in transit is encrypted via HTTPS/WSS (TLS). Session data is confined to Cloudflare's infrastructure and is never stored in plaintext on external servers. We implement standard security practices appropriate for the minimal data we handle.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions proportionate to the sensitivity of the data involved.

9. Your Rights & Data Deletion

Because we do not persist personal data beyond an active game session, there is generally no stored data to access, correct, or delete after a session ends. Game session data (Discord User ID, username, avatar) is held only in memory for the duration of the session and is automatically discarded when the session ends.

If you believe data associated with your Discord User ID has been retained and you would like it deleted, please contact us at shadowskeep.co.za with the subject "Data Deletion Request." We will confirm receipt and complete deletion within 30 days.

Depending on your jurisdiction, you may have additional rights under applicable data protection laws (such as GDPR or POPIA). We will honor such requests to the extent applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or the data we handle, please reach out through the Horror Quest GitHub repository or the Discord server where the Activity is hosted.