Operator: Serhii Miasniankin, an individual (not a registered business), residing in Manitoba, Canada. Contact: miasniankinserhii@gmail.com.
Serhii Miasniankin acts as the data controller for personal data processed via SectMind ("the Service").
This page describes what personal data SectMind ("the Service") collects, why, how long it is kept, and what rights you have. By using the Service you agree to this policy.
1. What we collect
- Account data: email address, encrypted password (or Google account identifier if you sign in with Google).
- Player profile: the sect nickname you choose (max 15 characters), the chosen game server, and any in-game state you create (buildings, disciples, squads, resources, notifications).
- Technical data: IP address, browser user-agent and timestamps of requests — captured by our backend infrastructure (Supabase / Cloudflare) for security and abuse prevention.
- Bot integration data: the API key you generate to connect a chatbot (Claude, ChatGPT, etc.) and the timestamps of bot requests.
- Purchase data (received from Paddle): your billing email, country (for sales tax), transaction identifier, product purchased, and subscription/delivery status. We do not receive or store your full card number, CVC, or bank account details — those are collected and held by Paddle.
We do not collect: real names, physical addresses, phone numbers, payment card numbers, or biometric data.
2. Why we use it
- To run the game (authenticate you, persist your sect, deliver in-game events).
- To prevent abuse: rate limiting, anti-cheat, ban evasion detection.
- To send transactional emails (signup confirmation, password reset). We do not send marketing email.
- To deliver purchased items (jade coins, jade deliveries) to your account and to keep purchase records for accounting and tax compliance.
3. Legal basis for processing
Depending on the activity, we rely on the following legal bases (GDPR / UK GDPR / PIPEDA):
- Performance of a contract — creating and maintaining your account, running the game, and delivering purchased items you paid for.
- Legitimate interests — security, anti-cheat, abuse prevention, and product improvement.
- Legal obligation — tax and accounting records held via our payment provider, and responses to lawful requests from authorities.
- Consent — where required, e.g. for optional communications; you can withdraw consent at any time.
4. Where data is stored
Data is stored on infrastructure provided by Lovable Cloud (Supabase, hosted on AWS) and Cloudflare. Backups are kept by these providers per their standard retention policies.
5. Sharing
We do not sell or rent personal data. Data is shared only with:
- Infrastructure providers (Supabase / AWS, Cloudflare) acting as data processors for hosting, storage, and delivery of the Service.
- Paddle.com Market Limited, our Merchant of Record, for processing payments, calculating and remitting sales taxes, issuing invoices, and handling refunds and chargebacks. See Paddle's privacy notice at paddle.com/legal/privacy.
- Professional advisers (accounting, legal) where necessary.
- Authorities when required by a valid legal request.
When you connect a third-party chatbot (Claude, ChatGPT, Gemini, etc.), the prompts and responses you exchange with that bot are governed by that provider's privacy policy, not ours.
6. Payments
All purchases in SectMind are processed by Paddle.com Market Limited, which acts as the Merchant of Record for every order. Paddle collects and processes the payment, calculates and remits applicable taxes, issues invoices, and handles refunds and chargebacks. We only receive a transaction reference, the product purchased, your billing email and country from Paddle, plus the items to grant to your account.
7. Cookies and local storage
We use only strictly necessary cookies / browser localStorage entries to keep you signed in and to remember your language preference. No advertising or third-party tracking cookies.
8. Retention and deletion
We keep your account data as long as your account exists. You can request deletion at any time by writing to miasniankinserhii@gmail.com; we will erase your account, sect, and associated in-game data within 30 days. Aggregated, non-identifying analytics may be retained.
Purchase and tax records are retained for as long as required by applicable tax and accounting law (typically 6–7 years) even after your account is deleted.
9. Security
We apply reasonable technical and organisational measures to protect your data, including HTTPS/TLS in transit, password hashing, row-level security on the database, restricted access to the admin panel, and regular dependency updates. No online service can be guaranteed 100% secure, but we take security seriously and address issues promptly.
10. International transfers
Your data may be processed in Canada, the United States, the United Kingdom and the EEA, depending on where our infrastructure providers (Cloudflare, Supabase/AWS) and Paddle operate. Transfers are covered by the standard contractual terms and safeguards adopted by those providers.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, port your data, and withdraw consent. EU/UK users may lodge a complaint with their national supervisory authority; Canadian users may contact the Office of the Privacy Commissioner of Canada. To exercise any right, email miasniankinserhii@gmail.com. We aim to respond within 30 days.
12. Age
The Service is not directed at children under 13 (under 16 in the EU). If you believe a child has registered, contact us and we will delete the account.
13. Changes
We may update this policy as the game evolves. Material changes will be announced in-game and via the connected email address.