The Wicked — Privacy Policy
Last Updated: February 8, 2026
1. Introduction
This Privacy Policy explains how The Wicked ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website, Discord bot, and related services (collectively, "Services").
By using our Services, you consent to the data practices described in this policy. If you do not agree, please do not use our Services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Username, email address, password (hashed)
- Profile Information: Bio content, links, theme settings, avatar images
- Communication Data: Support tickets, messages, feedback
- Payment Information: Processed by third-party providers (we do not store full payment details)
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, timestamps
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
2.3 Information From Third Parties
- Discord OAuth: Discord user ID, username, avatar, email (if authorized)
- Spotify OAuth: Spotify user ID, currently playing track (if authorized)
- Game APIs: Public game statistics from TrackerNetwork and similar services
3. Discord Bot Data Collection
When you add our Discord bot ("The Wicked") to a server, we may collect:
| Data Type |
Purpose |
Retention |
| Server ID, Name, Icon |
Server identification and dashboard display |
Until bot is removed |
| Channel IDs and Names |
Configuration (logging, welcome, tickets) |
Until bot is removed |
| Role IDs and Names |
Permission configuration |
Until bot is removed |
| User IDs |
Economy, moderation, and feature functionality |
Varies by feature |
| Moderation Logs |
Record of warnings, bans, mutes |
Indefinitely or until deleted |
| Ticket Transcripts |
Support record keeping |
90 days after closure |
| Economy Balances |
Virtual currency tracking |
Indefinitely or until reset |
What We Do NOT Collect:
- Message content (except in tickets where explicitly consented)
- Voice or video data
- Private or direct messages
- Data from servers where the bot is not present
4. How We Use Your Information
- To provide and maintain our Services
- To personalize your experience (themes, preferences)
- To process transactions and payments
- To communicate with you about updates or issues
- To enforce our Terms of Service
- To detect and prevent fraud or abuse
- To improve our Services and develop new features
5. Data Sharing & Third Parties
We do NOT sell, rent, or trade your personal information. We may share data only in these circumstances:
- Service Providers: Hosting, payment processing, email delivery
- Legal Requirements: When required by law, court order, or government request
- Safety: To protect the rights, safety, or property of The Wicked or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5.1 Third-Party Services We Use
- Discord: Bot functionality and OAuth authentication
- Spotify: Optional music integration
- TrackerNetwork: Game statistics API
- Payment Processors: Secure transaction handling
Each third party has their own privacy policies. We encourage you to review them.
6. Data Security
We implement reasonable security measures to protect your data:
- Passwords are hashed using industry-standard algorithms
- OAuth tokens are encrypted at rest
- HTTPS encryption for all data transmission
- Regular security audits and updates
- Access controls limiting who can view data
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
- Account Data: Retained until you delete your account
- Bot Configuration: Retained until the bot is removed from the server
- Logs and Analytics: Retained for up to 12 months
- Ticket Transcripts: Retained for 90 days after closure
- Economy Data: Retained indefinitely unless manually reset
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
- Revoke Consent: Withdraw consent for data processing
To exercise these rights, contact us at support@thewicked.dev.
9. GDPR Compliance (EU Users)
If you are in the European Economic Area (EEA), you have additional rights under GDPR:
- We process data based on consent, contract necessity, or legitimate interests
- You may lodge a complaint with your local data protection authority
- We will respond to data requests within 30 days
10. CCPA Compliance (California Residents)
If you are a California resident, you have rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
11. Children's Privacy (COPPA)
Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.
Users between 13-18 must have parental consent to use our Services.
12. Cookies & Tracking
We use cookies for:
- Essential Cookies: Authentication, session management (required)
- Preference Cookies: Theme, language settings
- Analytics Cookies: Understanding how users interact with our site
You can disable cookies in your browser settings, but some features may not work properly.
13. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by:
- Posting a notice on our website
- Updating the "Last Updated" date
- Sending email notifications for major changes (if applicable)
Continued use of our Services after changes constitutes acceptance of the updated policy.
15. Contact Us
For privacy-related questions, concerns, or data requests, contact us:
We aim to respond to all privacy inquiries within 30 days.
16. Additional Disclosures
16.1 Do Not Track
We do not currently respond to "Do Not Track" browser signals. However, you can manage your privacy preferences through your browser settings.
16.2 Analytics
We may use analytics services to understand usage patterns. This data is aggregated and does not personally identify you.
16.3 Advertising
We currently do not display third-party advertisements. If this changes, we will update this policy.