The Wicked — Privacy Policy
Last Updated: August 15, 2026
1. Introduction
This Privacy Policy explains how The Wicked ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website, Discord bot, and related services (collectively, "Services").
By using our Services, you consent to the data practices described in this policy. If you do not agree, please do not use our Services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Username, email address, password (hashed)
- Profile Information: Bio content, links, theme settings, avatar images
- Communication Data: Support tickets, messages, feedback
- Payment Information: Processed by third-party providers (we do not store full payment details)
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, timestamps
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
2.3 Information From Third Parties
- Discord OAuth: Discord user ID, username, avatar, email (if authorized)
- Spotify OAuth: Spotify user ID, currently playing track (if authorized)
- Game APIs: Public game statistics from TrackerNetwork and similar services
3. Discord Bot Data Collection
When you add our Discord bot ("The Wicked") to a server, we may collect:
| Data Type |
Purpose |
Retention |
| Server ID, Name, Icon |
Server identification and dashboard display |
Until bot is removed |
| Channel IDs and Names |
Configuration (logging, welcome, tickets) |
Until bot is removed |
| Role IDs and Names |
Permission configuration |
Until bot is removed |
| User IDs |
Economy, moderation, and feature functionality |
Varies by feature |
| Moderation Logs |
Record of warnings, bans, mutes |
Indefinitely or until deleted |
| Ticket Transcripts |
Support record keeping |
90 days after closure |
| Economy Balances |
Virtual currency tracking |
Indefinitely or until reset |
What We Do NOT Collect:
- Message content (except in tickets where explicitly consented)
- Voice or video data
- Private or direct messages
- Data from servers where the bot is not present
4. How We Use Your Information
- To provide and maintain our Services
- To personalize your experience (themes, preferences)
- To process transactions and payments
- To communicate with you about updates or issues
- To enforce our Terms of Service
- To detect and prevent fraud or abuse
- To improve our Services and develop new features
5. Data Sharing & Third Parties
We do NOT sell, rent, or trade your personal information. We may share data only in these circumstances:
- Service Providers: Hosting, payment processing, email delivery
- Legal Requirements: When required by law, court order, or government request
- Safety: To protect the rights, safety, or property of The Wicked or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5.1 Third-Party Services We Use
- Discord: Bot functionality and OAuth authentication
- Spotify: Optional music integration
- TrackerNetwork: Game statistics API
- Payment Processors: Secure transaction handling
Each third party has their own privacy policies. We encourage you to review them.
6. Data Security
We implement reasonable security measures to protect your data:
- Passwords are hashed using industry-standard algorithms
- OAuth tokens are encrypted at rest
- HTTPS encryption for all data transmission
- Regular security audits and updates
- Access controls limiting who can view data
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
- Account Data: Retained until you delete your account
- Bot Configuration: Retained until the bot is removed from the server
- Logs and Analytics: Retained for up to 12 months
- Ticket Transcripts: Retained for 90 days after closure
- Economy Data: Retained indefinitely unless manually reset
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
- Revoke Consent: Withdraw consent for data processing
To exercise these rights, contact us at support@thewicked.dev.
9. GDPR Compliance (EU Users)
If you are in the European Economic Area (EEA), you have additional rights under GDPR:
- We process data based on consent, contract necessity, or legitimate interests
- You may lodge a complaint with your local data protection authority
- We will respond to data requests within 30 days
10. CCPA Compliance (California Residents)
If you are a California resident, you have rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
11. Children's Privacy (COPPA)
Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.
Users between 13-18 must have parental consent to use our Services.
12. Cookies & Tracking
We use cookies for:
- Essential Cookies: Authentication, session management (required)
- Preference Cookies: Theme, language settings
- Analytics Cookies: Understanding how users interact with our site
You can disable cookies in your browser settings, but some features may not work properly.
13. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.
14. Nyx Marketplace Data
This section describes data handled specifically because of the Nyx marketplace. It applies in addition to the rest of this policy.
14.1 Payment Processing
Payments are processed by Stripe. Card numbers, CVCs, and bank details are entered on Stripe's systems and are never received or stored by The Wicked. We store only the identifiers Stripe returns to us, such as a checkout session ID, a payment intent ID, the amount, the currency, and whether the payment succeeded. Stripe's handling of your data is governed by the Stripe Privacy Policy.
14.2 Seller Information
Sellers are paid through Stripe Connect. When you begin seller onboarding:
- Stripe collects your identity and bank details directly. We do not see or store them.
- We store your Stripe account identifier and whether Stripe has cleared you to accept payments and receive payouts.
- Your store name, listings, images, and descriptions are public.
- Identity verification is performed by Stripe under their own terms and legal obligations, not by us.
14.3 Order Records
For each transaction we retain the buyer and seller account IDs, the item, the amount, our commission, the currency, the status, the timestamp, and the Stripe identifiers. This is required for order history, dispute handling, refunds, tax records, and accounting, and is retained after an order completes.
14.4 Buyer & Seller Messages
When an order is paid, a private message thread is opened between the buyer and the seller so goods can be delivered and questions answered.
- Messages are stored on our servers and are not end-to-end encrypted.
- Authorised staff may access message content where necessary to investigate a dispute, a report, fraud, or a suspected breach of our Terms.
- The other party to your order can see your username and profile picture.
- Do not share passwords, card details, or other sensitive credentials in messages.
- Threads are retained alongside the order they belong to, so they remain available if a dispute is raised later.
14.5 What Sellers See About Buyers
A seller can see the username, profile picture, and order details of anyone who buys from them, and can exchange messages with them. Sellers receive your email address only if Stripe provides it to them as part of the transaction. Sellers are independent of The Wicked and are responsible for their own handling of your information.
14.6 Legal Basis and Retention
Where GDPR applies, marketplace processing is carried out to perform a contract with you (Article 6(1)(b)), to comply with legal obligations such as tax and accounting record-keeping (Article 6(1)(c)), and for our legitimate interests in preventing fraud and resolving disputes (Article 6(1)(f)). Transaction and payment records are kept for as long as required by applicable financial and tax law, which may be longer than the retention periods in Section 7 and may survive deletion of your account.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by:
- Posting a notice on our website
- Updating the "Last Updated" date
- Sending email notifications for major changes (if applicable)
Continued use of our Services after changes constitutes acceptance of the updated policy.
16. Contact Us
For privacy-related questions, concerns, or data requests, contact us:
We aim to respond to all privacy inquiries within 30 days.
17. Additional Disclosures
17.1 Do Not Track
We do not currently respond to "Do Not Track" browser signals. However, you can manage your privacy preferences through your browser settings.
17.2 Analytics
We may use analytics services to understand usage patterns. This data is aggregated and does not personally identify you.
17.3 Advertising
We currently do not display third-party advertisements. If this changes, we will update this policy.