Privacy Policy

Account data

When you sign in with Discord, we receive your Discord user ID and username from Discord's OAuth2 service. We store this alongside a session token and an activation status in our database. We do not collect passwords, email addresses, or any other personal information.

Website account and payments

The website uses the same Discord identity and Premium status as the extension. Your website session token is kept in your browser tab’s session storage and is removed when you sign out or close the tab.

When you submit a Tibia Coin payment for verification, we store your Discord account ID, the sending character name, amount, recipient, submission time, and review status. This information is used to match your transfer and activate your access. Submitting a request does not itself transfer coins.

Browser storage

The extension stores the following locally in your browser:

• Your session token and username, used to authenticate requests to our backend.
• A list of recently viewed character names and levels. This data never leaves your browser.

You can clear this at any time by logging out from the extension popup or clearing your browser's extension storage.

Discord

We use Discord's OAuth2 service for authentication. When you log in, you are redirected to Discord's login page. Discord's own privacy policy governs what they collect during that process.

tibia.com

Character data is fetched from tibia.com on your behalf by our backend. We do not store character data beyond a short-lived cache used to improve response times.