← Back to Home

The Wicked — Privacy Policy

Last Updated: August 15, 2026

1. Introduction

This Privacy Policy explains how The Wicked ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website, Discord bot, and related services (collectively, "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information From Third Parties

3. Discord Bot Data Collection

When you add our Discord bot ("The Wicked") to a server, we may collect:

Data Type Purpose Retention
Server ID, Name, Icon Server identification and dashboard display Until bot is removed
Channel IDs and Names Configuration (logging, welcome, tickets) Until bot is removed
Role IDs and Names Permission configuration Until bot is removed
User IDs Economy, moderation, and feature functionality Varies by feature
Moderation Logs Record of warnings, bans, mutes Indefinitely or until deleted
Ticket Transcripts Support record keeping 90 days after closure
Economy Balances Virtual currency tracking Indefinitely or until reset

What We Do NOT Collect:

4. How We Use Your Information

5. Data Sharing & Third Parties

We do NOT sell, rent, or trade your personal information. We may share data only in these circumstances:

5.1 Third-Party Services We Use

Each third party has their own privacy policies. We encourage you to review them.

6. Data Security

We implement reasonable security measures to protect your data:

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

To exercise these rights, contact us at support@thewicked.dev.

9. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

10. CCPA Compliance (California Residents)

If you are a California resident, you have rights under the CCPA:

11. Children's Privacy (COPPA)

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.

Users between 13-18 must have parental consent to use our Services.

12. Cookies & Tracking

We use cookies for:

You can disable cookies in your browser settings, but some features may not work properly.

13. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

14. Nyx Marketplace Data

This section describes data handled specifically because of the Nyx marketplace. It applies in addition to the rest of this policy.

14.1 Payment Processing

Payments are processed by Stripe. Card numbers, CVCs, and bank details are entered on Stripe's systems and are never received or stored by The Wicked. We store only the identifiers Stripe returns to us, such as a checkout session ID, a payment intent ID, the amount, the currency, and whether the payment succeeded. Stripe's handling of your data is governed by the Stripe Privacy Policy.

14.2 Seller Information

Sellers are paid through Stripe Connect. When you begin seller onboarding:

14.3 Order Records

For each transaction we retain the buyer and seller account IDs, the item, the amount, our commission, the currency, the status, the timestamp, and the Stripe identifiers. This is required for order history, dispute handling, refunds, tax records, and accounting, and is retained after an order completes.

14.4 Buyer & Seller Messages

When an order is paid, a private message thread is opened between the buyer and the seller so goods can be delivered and questions answered.

14.5 What Sellers See About Buyers

A seller can see the username, profile picture, and order details of anyone who buys from them, and can exchange messages with them. Sellers receive your email address only if Stripe provides it to them as part of the transaction. Sellers are independent of The Wicked and are responsible for their own handling of your information.

14.6 Legal Basis and Retention

Where GDPR applies, marketplace processing is carried out to perform a contract with you (Article 6(1)(b)), to comply with legal obligations such as tax and accounting record-keeping (Article 6(1)(c)), and for our legitimate interests in preventing fraud and resolving disputes (Article 6(1)(f)). Transaction and payment records are kept for as long as required by applicable financial and tax law, which may be longer than the retention periods in Section 7 and may survive deletion of your account.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by:

Continued use of our Services after changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions, concerns, or data requests, contact us:

We aim to respond to all privacy inquiries within 30 days.

17. Additional Disclosures

17.1 Do Not Track

We do not currently respond to "Do Not Track" browser signals. However, you can manage your privacy preferences through your browser settings.

17.2 Analytics

We may use analytics services to understand usage patterns. This data is aggregated and does not personally identify you.

17.3 Advertising

We currently do not display third-party advertisements. If this changes, we will update this policy.