Privacy Policy

Grim’s Squad Hub is the private members’ platform for Grim’s Squad, a player squadron in Elite Dangerous. It is run by the squadron’s leadership for its own members. It is not a commercial service, it is not open to the public, and it sells nothing.

When you sign in with Discord, we receive and store:

• Your Discord account ID — the permanent numeric identifier. This is how we recognise you on your next visit.
• Your Discord username, display name and avatar — so the site can show who you are rather than a number.
• Your roles in the Grim’s Squad Discord server — this is how the site knows whether you are a member, an officer, or an applicant, and therefore what you are allowed to see.
• The date you joined the server — used to calculate your tenure rank. It is calculated fresh each time rather than stored as a rank, so it cannot drift from the truth.
• Access and refresh tokens from Discord — encrypted before they are written to the database (see Security).

As you use the site we also store what you create: forum posts, ship loadouts, event sign-ups, and similar. That is ordinary content you chose to write.

• Your email address. We do not request the email permission from Discord at all. There is no email anywhere in this platform — no newsletters, no password resets, no notifications — so an address could never be used for anything. Storing personal data with no purpose only creates something to lose.
• Your messages. The bot does not have the Message Content permission. It cannot read what you write in Discord, in any channel, ever.
• Other servers you are in. We request access to your membership of our server specifically, not the list of servers you belong to.
• Payment details. We take no payments.
• Third-party analytics and advertising. There are no trackers, no advertising pixels and no analytics products on this site. Web fonts are served from our own server rather than Google’s, so loading a page does not tell anyone else that you visited.

The platform is being built to show squadron activity — where members are, what they fly, what they have hauled. Every one of those is opt-in per item, and every switch starts in the off position:

• Your location
• Your credit balance
• Your fleet
• Your recent activity
• Whether you appear on the public roster
• Whether you appear on leaderboards

Turning one on is a deliberate act. Until you do, that information is absent from what other members and the public can see — not merely hidden by the interface, but genuinely not sent. This is enforced by the server, not by the page you are looking at, so it holds regardless of what a browser is asked to do.

Connecting your Frontier account, or uploading flight telemetry, are separate choices you make explicitly. Neither happens automatically, and neither is required to use the site.

To operate a members’ site: to know who you are, to work out what you are allowed to see, to attribute the things you post to you, and to keep a record of administrative actions such as rank changes and moderation so they can be reviewed.

We do not sell it, rent it, trade it, or hand it to advertisers. There is nobody to sell it to and no reason to.

• Discord — the source of your identity. Their handling of your data is governed by their own privacy policy.
• Our hosting provider — the servers the site runs on. They hold the data at rest on our behalf and do not use it.
• Squadron officers — can see membership information, applications and moderation records, because administering the squadron requires it. Privileged actions are written to an audit log.

That is the complete list.

Your Discord tokens are encrypted with AES-256-GCM before they reach the database. Each one is cryptographically bound to your account, so a stolen database row cannot be replayed against a different account — the decryption simply fails.

Tokens are never written to logs, never included in error messages, never returned by the API, and never shown in the interface. Logs are scrubbed of tokens, secrets and IP addresses automatically.

No system is perfectly secure, and we will not pretend otherwise. If we ever discover a breach affecting your data, we will tell the affected members directly and promptly rather than quietly.

For as long as you are a member, plus a short period afterwards so that an accidental removal from Discord can be undone without losing your history.

Audit log entries about administrative actions are kept longer, because their purpose is to make it possible to review what officers did after the fact.

• See it. Ask an officer and we will give you a copy of everything we hold about you.
• Correct it. Most of it comes from Discord, so changing it there changes it here on your next sign-in.
• Delete it. Ask, and your account and personal data are removed. Posts you made in shared discussions may remain with your name detached, because deleting them outright would gut conversations other people took part in. Tell us if you want those gone too and we will discuss it.
• Withdraw consent. Every optional switch can be turned back off at any time, and doing so stops that data being shown immediately.
• Leave. Removing the application in your Discord settings revokes our access. Leaving the Discord server ends your access to the site.

Discord requires its users to be at least 13, and older in some countries. We rely on that: if you are able to hold a Discord account, you meet the minimum age for this site.

Some of our members are under 18. The privacy defaults described above apply to everyone equally and are deliberately conservative — nothing about your location, activity or fleet is visible unless you choose to make it so. If you are a parent or guardian with a concern, contact the squadron leadership and we will deal with it directly.

If what we collect changes, this page changes with it in the same update, and the version number at the top goes up. Material changes will be announced in Discord rather than slipped in quietly.

Message the squadron leadership in the Grim’s Squad Discord server. If you would rather not use Discord, an officer can give you an alternative route.