1. Introduction

This Privacy Policy (“Policy”) describes how Nickel City X-Wing (“NCX,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website, mobile applications, and related services (collectively, the “Service”). We are committed to protecting your privacy and ensuring you have a positive experience with NCX.

2. Information We Collect

3. How We Use Your Information

• Authenticate and authorize access to the Service
• Deliver and manage push notifications (opt-in only)
• Improve and optimize Service functionality
• Personalize your experience
• Maintain league statistics and player records
• Maintain security and prevent fraud

4. Push Notifications

Push notifications are opt-in only. You must explicitly authorize push notifications when prompted by the app. You can disable push notifications at any time through your device settings or the app’s settings without affecting your ability to use other features.

5. Information Sharing & Third-Party Services

We do not sell your personal information. We use the following third-party services to operate the Service:

• Discord — Authentication (OAuth2 login)
• Vercel — Application hosting and serverless functions
• Neon — Database hosting for league data
• Railway — Database hosting for league data
• Apple Push Notification Service (APNs) — Push notification delivery for iOS
• Firebase Cloud Messaging (FCM) — Push notification delivery for Android

These services may process your data as described in their respective privacy policies. We only share the minimum information necessary for each service to function. Your information may also be disclosed when required by law or regulation.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

7. Data Retention & Account Deletion

We retain your personal information indefinitely for the purpose of maintaining league statistics and player records.

You may request deletion of your account and all associated personal data at any time by emailing gregkash@gmail.com with the subject line “Account Deletion Request.” We will process your request within 30 days and confirm deletion via email. Upon deletion, your Discord authentication data, push notification tokens, and device information will be permanently removed. Anonymized league statistics (win/loss records, game scores) may be retained for historical league integrity.

8. Children’s Privacy (COPPA Compliance)

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will promptly delete such information and terminate the child’s account. Parents or guardians who believe their child has provided information to us should contact us immediately at the email address provided below.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Right to Access: You can request access to the personal information we hold about you.
• Right to Correct: You can request that we correct inaccurate personal information.
• Right to Delete: You can request deletion of your personal information, subject to legal obligations.
• Right to Data Portability: You can request a copy of your personal information in a portable format.
• Right to Opt-Out: You can opt out of push notifications at any time.

Contact us to exercise any of these rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date above.