Privacy Policy

1. Information We Collect

Donghua Central collects only the information necessary to operate the platform. When you authenticate via Discord OAuth2, we receive the following data from Discord's API:

• Discord User ID — a unique numeric identifier for your account.
• Username & Display Name — your Discord username and global display name.
• Avatar hash — used to load your Discord profile picture from Discord's CDN.
• Email address — requested as part of the standard OAuth2 scope. Used only for internal identification and never shared or displayed publicly.

We do not collect passwords. We do not have access to your Discord messages, servers, friends list, or any other account data beyond the above.

2. How We Use Your Information

We use the information collected for the following purposes:

• To authenticate you and maintain your session across visits.
• To display your name and avatar in the community interface.
• To associate your community contributions (posts, reactions, edits) with your account.
• To determine your role within the Donghua Central Discord server for access-tier purposes.

We do not use your data for advertising, profiling, or any automated decision-making processes.

3. Cookies and Sessions

Donghua Central uses a single HTTP-only authentication cookie to maintain your logged-in session. This cookie is set when you sign in and expires after seven days of inactivity. It contains no personally identifiable information — only an encrypted session reference.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies of any kind.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to any third party. Your information is shared only in the following limited circumstances:

• SpacetimeDB — our database infrastructure. User identity tokens are passed to SpacetimeDB to associate your session with community data stored on their platform. No raw personal data is transmitted beyond a derived identity hash.
• Discord CDN — your avatar image is loaded directly from Discord's content delivery network. No data is sent to Discord by us beyond the standard image request.

5. Data Retention

Authentication session data is retained for the duration of your active session (up to seven days from last activity). Community contributions such as forum posts and wiki edits are retained until you request their removal or until your account is deleted.

If you have not signed in for an extended period and request account deletion, we will remove your personal data within thirty days of your request.

6. Your Rights

You have the following rights regarding your data:

• Access — you may request a summary of the personal data we hold about you.
• Correction — if any data is inaccurate, you may request its correction.
• Deletion — you may request the deletion of your account and associated personal data.
• Portability — you may request an export of your community data in a readable format.
• Objection — you may object to any processing of your data at any time.

To exercise any of these rights, please contact us via the contact page or through our official Discord server. We will respond within fourteen days.

7. Security

We take reasonable technical measures to protect your data, including encrypted cookies, HTTPS-only connections, and server-side token signing. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we are committed to responsible handling of your information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be announced on the platform and, where applicable, via our Discord server. Continued use of the platform following such notification constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy or your personal data, please reach out via our contact page or through the official Donghua Central Discord server.