Privacy Policy
Ordo ("we") is an alliance management platform for the mobile game Kingshot, operated by OrdoStrat. This policy explains what data Ordo collects, why, and what you can do about it. For anything this page does not answer, write to [email protected].
Who is responsible
The data controller is OrdoStrat, operating from the European Union. Contact: [email protected].
What we collect
- Sign-in data. Ordo uses Discord sign-in through Supabase. We receive your Discord ID, username, avatar and the email address on your Discord account. We never see your Discord password. Your Discord account ID is also used to grant and remove subscriber roles for you on our Discord server; disconnecting your Discord account from Ordo removes it.
- Email address. If you sign in with an email code instead of Discord, your address is held by our authentication provider (Supabase) and used only to send you sign-in codes. It is not stored in Ordo's own tables and is never used for marketing.
- Game profile data you enter. Your in-game name and the stats you choose to record: power, march and rally capacity, troop stats.
- Alliance activity. Alliance memberships and applications, event RSVPs and attendance, Bear Hunt registrations and submitted scores, War Room and battle-plan participation, minister appointment requests.
- Push subscriptions. If you enable notifications, your browser's push endpoint and its encryption keys. Nothing is stored unless you opt in, and the subscription is removed when you disable notifications or delete your account.
- Feedback reports. If you send feedback, the message you write plus technical context that helps us fix problems: browser and version, operating system, device model where the browser exposes it, screen size, language, timezone and app version.
- Support tickets. If you contact support on our Discord server, we receive the messages you write there and any details you choose to share (for billing issues this may include your email address or alliance name). Tickets are private channels visible to you and Ordo staff; billing tickets are visible to administrators only.
- Billing. Paid alliance subscriptions run through Stripe. We store Stripe customer and subscription identifiers only — your card details go directly to Stripe and never touch our servers.
- Server logs. Like practically every web service, our infrastructure records IP addresses, user agents and request identifiers for security and debugging. Logs are short-lived and are not used for profiling.
Cookies and local storage
Ordo sets no tracking or advertising cookies and runs no third-party analytics. The only browser storage we use is strictly necessary: your sign-in session (kept by the app at app.ordostrat.com), a small flag remembering that you dismissed the notice on this site, and your choice of light or dark theme.
Support
Support runs on our official Discord server. Opening a ticket there creates a private channel visible only to you and Ordo staff — billing tickets are restricted to administrators. Closed tickets are archived as transcripts so we can follow up and improve support. If you prefer not to use Discord, email [email protected] instead.
Who processes data for us
- Supabase — database and authentication.
- Cloudflare — content delivery, DNS and security in front of every request.
- Railway — hosts our API servers.
- Stripe — payment processing for paid tiers.
- Discord — the sign-in provider you authenticate with, and the platform our support server runs on: messages you write there are processed by Discord. We also send Discord your account ID to grant and remove subscriber roles on our server.
- Tickets (tickets.bot) — the ticket bot on our Discord support server. It processes the messages you write in support tickets and stores ticket transcripts for us.
- Resend — transactional email delivery: your email address reaches Resend when we send you a sign-in code.
- Google Fonts — this website and the app load fonts from Google's CDN, which means your IP address reaches Google when the page loads.
Some of these providers process data in the United States under their respective EU data-transfer safeguards.
Why we process it
- To run the service you signed up for (contract): accounts, alliances, events, the War Room.
- Because you asked for it (consent): push notifications. You can withdraw at any time by disabling them.
- To keep the service working and secure (legitimate interest): server logs, font delivery, abuse prevention.
Who can see your data inside Ordo
Ordo is a team tool, and that is visible in how data is shared: your alliance's leadership (owner and staff) can see your game profile, stats and activity; alliance members see shared plans and leaderboards; minister appointment bookings are visible server-wide across allied alliances. Your email address is never shown to other players.
How long we keep it — and deleting your account
We keep your data for as long as your account exists. You can delete your account yourself at any time in the app under Account settings → Delete account. Deletion is immediate and permanent: your account, profiles, memberships, scores, subscriptions and feedback are erased and your sign-in is removed. Alliance owners must first transfer ownership or delete their alliance. You can also email [email protected] and we will delete it for you, or export your data on request.
Your rights
Under the GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to processing based on legitimate interest. Write to [email protected] — we answer directly. You also have the right to lodge a complaint with your local data protection authority.
Children
Ordo is not directed at children under 16. If you believe a child is using Ordo with personal data we should not hold, contact us and we will delete it.
Changes to this policy
If this policy changes in a way that matters, we will say so visibly on this page and update the date at the top. Continued use of Ordo after a change means the updated policy applies.