Privacy Policy | Last Sietch

The short version

Browsing lastsietch.com needs no account and sets no cookies. Like any web server, ours logs requests, and those logs are deleted after 90 days.
The player portal signs you in with Discord. We get your Discord user ID and display name. We never get your email or your Discord password.
The portal links your Discord account to your in-game character so it can show your own game data to you.
Our social media accounts only post our own videos. Our publishing tool collects no data about anyone.
Email info@lastsietch.com to see or delete your data.

Browsing the website

The public site has no sign-in, no cookies, no analytics, no ad networks and no third-party scripts or fonts. Its live server status is fetched from our own server.

Our web server keeps an access log for every site we run. Each entry records your IP address, the time, the page or file you asked for, your browser's user agent string, the referring page and the response. Cookies and sign-in headers are removed before anything is written. We use these logs to keep the service running, find faults and stop abuse. They are deleted automatically after 90 days.

Signing in to the player portal

The portal uses Discord sign-in and asks Discord only for the identify permission. From Discord we store your user ID and your display name (or username). We do not request your email address, your server list or your messages, and we do not store your avatar.

If you choose to add another way to sign in, we also store:

A password: only a salted Argon2 hash, never the password itself.
A passkey: the public key and identifier your device gives us. Your private key never leaves your device.
An in-game sign-in code: a short code whispered to your character, valid for 5 minutes. We store only a keyed hash of it.

Signed-in sessions last up to 7 days without use and 30 days at most. For security we record your browser's user agent with each session, and the IP address and user agent of sign-in and account-link attempts. We keep those IP addresses for 90 days.

What the portal stores about players

Your account link: your Discord ID and display name, your game account and Funcom IDs, and your character name.
Game data about your character: name, level, current map, progression, storage and similar details, copied from our game servers so the portal can show them to you. Characters that leave the server drop out of this copy.
Things you do on the portal: chat and private messages, market listings, trades, requests and the trade ledger, gifts, transfers and deliveries, guild recruiting and join requests, looking-for-group posts, market watches and alerts, event reminders, reward claims, map waypoints and your display preferences.
Security and audit records: a log of sensitive actions (such as sign-in, linking, gifts and transfers) that includes your IP address for 90 days, so staff can investigate abuse and undo mistakes.
Support records: if you rescue a stuck character, we log its position before and after the move.

The account-link step can ask quiz questions about your character. We keep only hashes of your answers.

What other players can see

Portal chat, market listings, guild recruiting and looking-for-group posts are visible to other signed-in players, as are your character name and the other public details you choose to show. You appear in the player directory unless you turn that off in your settings.

Public standings can show character names and levels, but never your Discord identity.

We publish daily and weekly community activity digests on the portal, and anyone can read them without signing in. A digest may name your character with your estimated play time, for example "logged approximately 5.1 player-hours", and may also name you as a new arrival or as the holder of a testing-station record. Digests never show your Discord identity. If you would rather not appear, ask us and we will exclude your character from future digests (see Your choices).

Staff can see everything the portal stores, to run the servers and handle reports.

Cookies and browser storage

The portal sets only the cookies it needs to work: a session cookie that keeps you signed in, a security token that stops other sites from acting as you, and short-lived cookies used during sign-in and account linking (5 to 30 minutes). They are all first-party and marked Secure. There are no advertising or tracking cookies.

The portal also saves your display choices, such as theme, map layers and dismissed notices, in your browser's local storage, and caches its own app files so it loads faster. That data stays on your device. Clearing your site data removes it.

The public site saves one choice the same way: the Easier reading font switch in the footer. It stays on your device too.

Our Discord server and bot

Our Discord bot, Cielago, answers questions and handles support. It reads messages in the support and help channels it watches, and it uses member and presence information to run features like temporary voice channels. When you open a ticket or send a /report, it saves your Discord ID and name, the message you wrote and, for reports, your in-game name and server, so staff can follow up. Staff may use AI tools to help sort and summarise support tickets.

The bot sends you direct messages only for things you asked for, such as market alerts and receipts. Discord's own privacy policy covers everything else you do on Discord.

Our social media accounts

We post Last Sietch videos to our own accounts on YouTube, Instagram, Facebook and TikTok. Every post is reviewed and approved by the community owner before it goes out.

The publishing tool connects only to our own accounts and asks each platform only for permission to upload and publish videos. It does not read comments, messages, followers, viewer data or any other user data. It does not collect, store or share information about anyone. It stores only our own access tokens and the IDs and status of the posts it makes.

When you view or interact with our posts, you are on that platform, and its own privacy policy applies.

Who we share data with

We do not sell, rent or trade personal data, and we do not share it with advertisers. Data leaves our servers only:

to Discord, when you sign in and when our bot posts messages or alerts;
to our game servers, to deliver items, messages and features you use in the portal;
to the hosting providers that run our servers, which process it only on our behalf;
when the law requires it, or to protect players and the service from serious harm.

A few older portal pages load web fonts from Google Fonts, which means Google sees your IP address when they load.

How long we keep it

Web server logs: 90 days.
Portal chat: messages are deleted after 30 days, along with any reports about them. Resolved reports are deleted after 90 days and finished mutes after 30.
IP addresses in security records: 90 days. After that, account-link attempts are deleted, and the IP address is removed from audit records while the rest of the record is kept.
Sign-in codes and challenges: deleted within a day of expiring.
Looking-for-group posts: hidden after 7 days, or up to 30 if you choose.
Everything else, including your account link, private messages, the market and transfer ledgers, and security and audit records (without their IP addresses after 90 days), is kept while the community runs, or until you ask us to delete it. Market and transfer ledgers keep a permanent history of completed trades so disputes can be settled.

Your choices, and deleting your data

Unlink: you can unlink your Discord account from your character at any time in the portal's account settings. This stops the portal using the link, but keeps the record until you ask for deletion.
Delete as you go: you can delete your own chat messages, private messages, looking-for-group posts and market watches in the portal.
See or delete everything: email info@lastsietch.com from any address, or open a ticket in our Discord, and tell us your Discord username and character name. We will confirm it is you through Discord, then send you a copy or delete your portal data within 30 days. We may keep the minimum needed to enforce a ban or settle a trade dispute, and we will tell you if we do.
Leave the activity digests: email info@lastsietch.com or open a ticket with your character name, and we will exclude your character from future digests.
Revoke Discord access: in Discord, go to User Settings, then Authorized Apps, and remove the Last Sietch portal.

Deleting portal data does not delete your character from the game itself. Your game account and character are governed by the game publisher.

Security

All of our sites use HTTPS. Passwords and codes are stored only as hashes, portal sessions use secure first-party cookies, and access to our servers and databases is restricted to staff. No system is perfectly secure, but we take care to collect little and protect what we keep.

Children

Our services are not directed at children under 13, and you must meet Discord's minimum age to use the portal. If you believe a child under 13 has given us personal data, email us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top. For significant changes we will also post a notice in our Discord.

Contact

Privacy questions or requests: info@lastsietch.com. You can also reach staff through a ticket in our Discord. See also our Terms of Service.