Effective Date: August 19, 2026
Calytix (“we,” “us,” or “our”) respects your privacy and is fundamentally committed to protecting it. Our philosophy is simple: we only want the data strictly necessary to run the site, provide features, and facilitate your submissions. We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
This Privacy Policy explains what information we collect, how it’s used and disclosed, and the choices and rights you have over it.
02Information We Collect
We may collect information about you in a variety of ways depending on how you interact with the Platform:
Personal Data
If you register for an account, link a Discord or Patreon account, or submit an idea via the Submission Portal, we collect the information you voluntarily provide or authorize through that connection — such as your display name, email address, Discord handle and ID, and Patreon membership tier. This is used to run your account, contact you about your submission, and recognize your support tier.
Newsletter Subscribers
If you sign up for updates, we collect your email address and use a double opt-in process (you must confirm via a link sent to your inbox before you’re added to the list). We do not add anyone to the newsletter without this confirmation.
Payment Data
When you make a purchase, payment data is collected via our integrated payment processors (e.g., Stripe, PayPal, or Patreon). Calytix does not store your credit card numbers. We only retain the transaction record, billing details necessary for accounting, and, where applicable, an internal store-credit balance tied to your account.
Security & Consent Logs
We keep a record of security-relevant account activity — logins, logouts, password resets, account linking/unlinking, and flagged suspicious activity — along with a timestamped record of when you accepted these Terms and this Privacy Policy. These records store a hashed (not raw) version of your IP address and your browser’s user agent string, and exist to secure your account and, if ever needed, to demonstrate that you agreed to a specific version of our legal documents.
Derivative Data
Our servers automatically record strictly necessary technical data when you access the site (IP address, browser type, operating system) for the purposes of security and DDoS prevention. This server log data is ephemeral.
03Use of Your Information
tl;dr — We use your data to run your account, process transactions, keep the Platform secure, and reach out about things that concern you.
Having accurate information about you permits us to provide you with a smooth, efficient, and tailored experience. Specifically, we may use information collected about you to:
- Process transactions and alert you regarding the status of your lore/mechanic Submissions.
- Create and manage your account and, where applicable, your Contributor Dashboard.
- Email you regarding account updates, receipts, technical notices, or confirmed newsletter updates.
- Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
- Maintain a record of your acceptance of our legal documents, in case it’s ever needed to resolve a dispute.
04Our Legal Basis for Processing
tl;dr — We process your data because it’s needed to run the service you asked for, to meet legal obligations, or because you gave consent.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we process your personal data on one or more of the following legal bases:
- Contractual necessity: to create your account, process a purchase, or review a Submission you’ve asked us to review.
- Legitimate interests: to secure the Platform, prevent fraud and abuse, and maintain records of legal agreement acceptance, balanced against your rights.
- Consent: for newsletter emails (which use double opt-in) and for optional public credit of your name or handle.
- Legal obligation: where we’re required to retain records, such as for tax or accounting purposes.
05Disclosure of Your Information
tl;dr — We don’t sell or share your data. We use a small number of trusted processors to run the site.
We do not share your private data with third parties except in the following limited situations:
- By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
- Third-Party Service Providers: We may share your data with third parties that perform services for us, such as payment processing (Stripe, PayPal, Patreon), identity/account linking (Discord), or database hosting (Supabase). They are contractually bound to protect your data and may only use it to provide their service to us.
- With Your Consent: If you explicitly authorize us to publicly credit you by your real name or handles on our public-facing site associated with your Submission.
We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act / California Privacy Rights Act.
06Data Retention & Deletion
tl;dr — When your account is deleted, we scrub your personal identifiers but keep non-personal content (like an accepted Submission) as part of the Verdition canon.
We keep your personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required by law (such as tax or accounting requirements).
When you delete your account, we do not erase your profile record outright. Instead, we anonymize it: your email address, Discord handle and ID, Patreon identifiers, store credit balance, and notification preferences are permanently cleared, while the underlying record and any associated stories or Submissions are retained without personal identifiers attached. This lets us preserve project history and honor Contributor Rights obligations to content you contributed, without continuing to hold your personal data.
Creative content that has been accepted and integrated into the Calytix universe (characters, items, lore) is retained indefinitely as canon under the Contributor Rights Policy — this is separate from, and unaffected by, the deletion of your personal identifiers.
07Your Privacy Rights
tl;dr — Depending on where you live, you may be able to access, correct, delete, restrict, or export your data, and you won’t be penalized for asking.
Depending on your location, applicable privacy law (such as the GDPR in the EU/UK, or state privacy laws including the CCPA/CPRA in California, and similar laws in states like Virginia, Colorado, or Connecticut) may grant you rights regarding your personal data, including the right to:
- Request access and obtain a copy of your personal information.
- Request rectification or erasure (see the anonymization process described above).
- Restrict or object to the processing of your personal information.
- Request a portable copy of your personal information in a common format.
- Lodge a complaint with your local data protection or privacy regulator.
To make a request, contact us via the Support Portal or email. We will consider and act upon any request in accordance with applicable data protection laws. We will never discriminate against you for exercising your privacy rights.
08Data Security
tl;dr — Encrypted connections, restricted access, hashed IPs instead of raw ones, and reputable infrastructure providers.
We use reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS) for all site traffic, restricted access to production systems and databases, row-level access controls so accounts can generally only read their own data, hashing of IP addresses in our security and consent logs rather than storing them in plain form, and reliance on processors (such as Supabase and Stripe) whose infrastructure maintains industry-standard security certifications.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach of your personal information ever occurs, we will notify affected users and regulators as required by applicable law.
09International Transfers
We are based in the United States, and information we collect may be processed in the United States or in other countries where our service providers operate. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. Where required, we rely on appropriate transfer mechanisms (such as standard contractual clauses) with our service providers to ensure your data remains protected.
10Children’s Privacy
The Platform is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. Submitting to the Submission Portal specifically requires you to be 18 or older, or to have verifiable parental or guardian permission, as described in our Terms of Service. If we learn that we have collected personal information from a child in a manner inconsistent with this policy, we will delete or anonymize it as quickly as practicable. If you believe a child has provided us personal information, please contact us via the Support Portal.
11Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updates take effect when posted with a revised effective date at the top of this page. For material changes that reduce your privacy protections, we will provide reasonable advance notice through the Platform or official Discord where practicable. We encourage you to review this page periodically.
12Contact Us
If you have questions about this Privacy Policy, the data we hold about you, or wish to exercise any privacy right, contact us through the Support Portal, via our official Discord server, or by email at support@calytix.dev.