Privacy Policy

Updated October 12, 2026

This policy explains data handling for Solari, its website and Shaded. The Solari team can be contacted at [email protected].

Data used by the service

We process Discord user IDs, usernames, avatars and available profile banners; gameplay records such as cards, currencies, grades, timers, trades, wishlists and friends; relevant server, channel and message IDs; staff permissions and audit records; and submitted artwork, creator credits and review decisions. Support requests contain the information you choose to send.

Discord sign-in uses the identify scope to retrieve your identity. Authentication cookies and browser storage maintain sign-in, protect requests, support app login and remember interface preferences. Discord credentials are entered on Discord, not sent to Solari. Hosting and network providers may process technical connection data, including IP addresses, to deliver and secure the service.

Website network matching for abuse review

When you use the website while signed in, sign in with Discord on the website, or register a Solari account there, the application may process your public IP address to find accounts using the same address or network range. IP addresses are obtained from the website connection, not from Discord bot commands. Forwarded addresses are accepted only through explicitly trusted hosting proxies.

The application stores keyed cryptographic digests of the full address and its IPv4 /24 or IPv6 /64 range, associated with your Discord user ID, observation dates, sampled visit counts and whether website sign-in or registration was observed. It does not store the raw address in this matching feature, collect device fingerprints or use third-party IP lookup services. These linked records remain personal data, not anonymous data. Collection is sampled rather than a complete log of every page visit.

Only staff authorized for account review can see shared-address and shared-range leads. They are not proof of alternate accounts and never cause automatic restrictions: households, schools, VPNs and mobile providers can share addresses. Matching records expire from review after 30 days and are deleted in scheduled batches; limited backup copies may remain until backup rotation. Hosting providers may independently keep connection logs under their own policies. Contact support to request access, correction or deletion.

Purpose and visibility

Data supports authentication, persistent gameplay, community features, submission review, support and abuse prevention. Public profiles, collections, leaderboard statistics, displayed balances and public game messages can be visible to other users. Trade participants see the details of their trades. Authorized staff can access relevant moderation and operational records.

Discord access

The current bots do not request Presence, Server Members or Message Content privileged gateway intents. Commands, component interactions and intentionally supplied submissions still provide information needed to fulfill your requests. We do not collect general server conversations or online-presence histories through those intents.

Sharing and restrictions

Discord provides authentication and bot delivery. Amazon Web Services (Lightsail) hosts the application and database, and Cloudflare provides the website's network edge and stores published card images. Stripe processes Prisma purchases: you pay on Stripe's checkout page, Stripe handles your card and billing details under its own privacy policy, and Solari receives only the purchase amount, status, Stripe payment references and your Solari account ID so it can add the Prisma. Infrastructure and email providers process data as needed to operate those services. Information may also be disclosed when required by law or necessary to address abuse or security incidents. Discord API data must not be sold, shared with advertising networks or data brokers, used to profile people beyond game functionality, or used to train AI models.

Retention and your choices

Account and gameplay records persist across restarts and inactivity. The current application does not automatically erase inactive accounts. Email support to request access, correction or deletion; requests are handled manually after appropriate ownership verification. Data no longer necessary to provide the service will be deleted, except records necessary for legal obligations, security or resolving disputes. Limited backup copies may remain until backup rotation. Removing the bot or revoking Discord authorization alone does not erase stored gameplay records.

You can sign out and remove browser site data, and revoke authorization through Discord. These actions may require signing in again. Do not send passwords or access tokens with privacy requests.

Security, children and updates

We use access controls and protected authentication flows, but no service can guarantee absolute security. Report suspected unauthorized access to support. We will notify Discord and affected users of unauthorized access to Discord API data as required. The service is not intended for users under 13 or below the applicable minimum age. Contact us if you believe a child below that age has supplied data. Policy changes will be posted here, with additional notice for material changes where required.

Website network review coverage

Network observations may be linked to a verified Discord website sign-in before game registration. Reviewers can see the Discord account name, ID, registration status and matched observation dates. Only authorized Owners can configure trusted hosting proxies. Raw player IP addresses are not shown in the review panels. The existing 30-day observation window and manual-review-only rules continue to apply.