Privacy Policy

This Privacy Policy explains how bargeats (“we”, “us”, or “our”) collects, uses, and protects information about you when you use our website and Discord bot (collectively, the “Service”).

1. Information We Collect

We collect the following categories of information:

• Discord account data — When you authenticate via Discord OAuth2 we receive your Discord user ID, username, global display name, and avatar hash. We do not receive your email address or password.
• Transaction data — Records of credit purchases and OTP usage, including timestamps and amounts.
• Usage data — Standard server logs including IP addresses, browser type, and pages visited. These are retained for up to 30 days for security and debugging purposes.

2. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Service;
• Process credit purchases and deliver phone numbers;
• Authenticate you securely via Discord OAuth2;
• Detect and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Phone Numbers

Temporary phone numbers issued by the Service are provided by a third-party telephony provider. Inbound SMS messages received on those numbers are processed to extract the OTP and delivered to you. Message content is not stored beyond the duration of the active session and is deleted automatically once delivered.

4. Payments

Payments are processed by Stripe. We do not store your card number or full payment details. Stripe’s privacy practices are governed by the Stripe Privacy Policy.

5. Cookies & Local Storage

We use a single session cookie to keep you logged in after authenticating via Discord. We also use browser localStorage to track when you last viewed your notification bell (so we can show unread counts). No advertising or tracking cookies are used.

6. Data Retention

We retain your account and transaction data for as long as your account is active. If you wish to delete your account and all associated data, contact us via Discord and we will process the request within 30 days.

7. Your Rights

Depending on your location, you may have rights under applicable data protection law (such as the UK GDPR) including the right to access, correct, or delete your personal data, and the right to object to or restrict certain processing. To exercise any of these rights, contact us via our Discord server.

8. Security

We use HTTPS for all data in transit and store credentials using industry-standard hashing. While we take reasonable precautions, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

9. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated “Last updated” date.

11. Contact

If you have questions or concerns about this Privacy Policy, please contact us via our Discord server.