Privacy policy

Last updated: 2 October 2026

Heraldry is a geography game operated by Contemporise inside Discord. This policy covers the Heraldry Activity.

Information we use

When you authorize the Activity or use Heraldry’s chat commands and voting buttons, Discord provides your stable user ID, username, display name and avatar. We store this profile, first and last activity dates and a participation count. Changing your Discord name does not create a new player.

We also process lobby and team membership, captain roles, match settings, answers, scores and game timing. Other players can see your name, avatar, team and voting status. In team play, your suggestions are visible only to your teammates; the team’s locked answer stays hidden from other teams until the round ends. Individual answers stay hidden until results. Hosting providers may process request logs for operation and security.

Daily saves your guesses and progress for the UTC day across devices. Completed games save a summary of your score, game mode, date and rules for your profile, streak and rankings. Individual, team and Daily rankings are separate. Server administrators can save game defaults and schedule a daily channel quiz.

Why and where

We use this information to authenticate you, run shared matches, show results and protect the game against abuse. Vercel hosts the Activity and Supabase stores its server data. Discord supplies authorization and Activity features under its own policies. We do not sell your data or use it for advertising.

With Discord authorization, Rich Presence can show that you are playing Heraldry, the game phase and party size. Your selected answers are never included in Rich Presence. Discord controls who sees your activity status.

Signed Discord authorization and deauthorization events help us record app connections and invalidate sessions after authorization is revoked. The optional Heraldry Player connection requests permission to update Heraldry’s linked-role metadata. It is separate from ordinary gameplay and does not request email access.

Storage and retention

A signed session token may be stored in your browser session storage for authentication. Your chosen game rules may be remembered on your device so you can reuse them. Match data expires after 48 hours and rate-limit data after one minute; expired records are removed during subsequent writes. Player profiles remain until a valid deletion request or until we no longer need them to operate the service. Providers retain operational logs according to their own settings and policies. Data may be processed outside your country.

Daily guesses expire after three days. Completed score summaries, profile visibility choices and server configuration remain until a valid deletion request or until no longer needed to operate these features. Invitations expire after one day, and a pending Activity launch after five minutes.

Chat rounds and votes are removed after 48 hours; app connection event records after 30 days. A temporary Discord interaction token lets us update the chat question and results, and is erased after final delivery or within 14 minutes. The optional role connection uses a secure state cookie for up to ten minutes. We do not store its OAuth access or refresh tokens.

Your choices

You can revoke Heraldry authorization in Discord settings. For access, correction or deletion of your stored player profile, contact us privately through Support using the Discord account concerned. Revoking authorization does not automatically delete previously stored data.

Use /profile private:true to hide your profile from other players and remove it from public rankings. This does not hide your name or results in games you join. Daily sharing copies a spoiler-free result; you choose where to post it. Administrators can cancel scheduled quizzes with /schedule stop.

Age and scope

You must meet Discord’s minimum age requirements. We do not request email addresses, read your messages or send marketing. Scheduled server quizzes post only to the channel configured by an administrator. We do not send personal Daily reminders. This game does not create a Supabase Auth account.

We will update this page if our data practices change. Material new permissions will require a separate authorization.