Privacy Policy
1. Scope
This Privacy Policy covers the invite-gated Vault website, member accounts, downloads, and optional Discord profile display. Public Terms and Privacy pages can be viewed without signing in and do not unlock the member forum, installer download, or admin tools.
2. Information we store
Depending on how you use the service, we may store:
- Account data: username, password hash and salt, role, account creation time, and preferences such as theme colors.
- Security data: optional authenticator secrets, hashed backup codes, and related two-factor status.
- Session data: signed-in session identifiers and expiry times kept in cookies / server session storage.
- Invite data: invite keys, audience, assigned usernames, usage, and expiry.
- Download activity: last download time, cooldown / override state, and related requests.
- Optional Discord profile: Discord user ID you submit, plus display name, username, and avatar metadata retrieved to show your profile.
- Operator content: announcements or updates posted by administrators.
- Technical logs: ordinary server logs that may include IP address, timestamps, and request paths needed to run and secure the service.
3. How we use information
- To authenticate members and protect accounts (including optional two-factor authentication).
- To deliver invites, announcements, and authorized software downloads.
- To enforce cooldowns, roles, and operator controls.
- To display an optional Discord profile you choose to attach.
- To maintain, secure, and troubleshoot the service.
We do not sell member data. We do not use this site for advertising networks.
4. Cookies and sessions
The site uses a session cookie to keep you signed in after invite redemption, registration, or login. Viewing the public Terms or Privacy pages does not create a member session and cannot by itself unlock the forum. You can clear site cookies in your browser to end local session state.
5. Discord lookups
If you submit a Discord user ID, the server may ask Discord’s API (using the operator’s bot credentials) for public profile fields needed to show your name and avatar. Do not submit an ID you are not allowed to associate. You may remove a saved Discord profile from Settings → Connections when signed in.
6. Sharing
Information is shared only as needed to operate the service, for example:
- With Discord when looking up a profile you requested by ID.
- With hosting / infrastructure providers that run the server.
- When required by law or to protect the service and its members.
7. Retention
Account, invite, download, preference, and connection data are retained while the service is operated and the account remains active, unless the operator deletes them sooner. Session records expire according to configured session lifetime. Backups may exist for recovery for a limited time.
8. Security
Passwords are stored using a one-way hash. Sessions and admin capabilities are restricted on the server. No method of transmission or storage is perfectly secure; protect your password and authenticator codes, and tell the operator if you suspect unauthorized access.
9. Children
This service is intended for authorized members invited by the operator. It is not directed at children under 13, and we do not knowingly collect information from them.
10. Your choices
- Update your password and optional two-factor settings while signed in.
- Add, update, or remove a Discord profile ID in Connections.
- Sign out to end your current session.
- Contact the administrator to ask about correction or deletion of account data they control.
11. Changes
We may update this Privacy Policy. The effective date above will change when we do. Continued use of the service after an update means you accept the revised policy.
12. Contact
Privacy questions should be directed to the site administrator who manages your invite or member account.