Privacy Policy

Last updated October 20, 2026

1. Who we are

Freya is a collection trading card game on Discord, run by Freya's team ("we", "us"). This policy covers Freya's bot in Discord, her Discord Activity and this website.

In this policy, "Freya", "she", "her" and "the bot" all mean that service: the bot, the Activity and this website, together or each on its own. Freya is software that Freya's team runs, not a person, so when this policy says Freya keeps or uses something, it means we keep or use it through her. Contact: contact@freyatcg.com.

2. What Freya keeps

Who you are on Discord

• Your Discord user id. Everything in Freya is tied to it. Freya also reads your account's age from it, which some features need (see the Terms).
• Where you play: the ids of the servers and channels you use Freya in.
• Some names, at the moment they're shown: both players' names in that server when a trade opens, a seller's Discord display name on their auctions, and an entrant's name in a giveaway.

What you do in Freya

• Every command, button press, menu pick, form and Activity action: who, in which server and channel, what it was, the options you gave (such as what you searched for or how many credits you offered), whether it worked, and how long it took.
• Your game history: when you joined and agreed to the rules, your credits and every change to them, packs opened and the cards they gave, the copies you own and who owned them before, trades, auctions, bids and sales, quick-sells, dailies and their streaks, chests, free packs, quests and achievements, giveaway entries and wins, letters and their gifts, your showcase and favorites, and the lists you looked through.
• Messages Freya sends you: the words of her DMs (an outbid, a sale, a prize), and your letterbox in the Activity.
• For server moderators: the choices made with /setup, and who made them.

What Freya doesn't collect

• Your messages. Freya connects to Discord with only the "Guilds" gateway intent, so she can't read what people write in chat. She only sees what you send her through commands, buttons and forms.
• Your email address, password, phone number or payment details. There's nothing to buy in Freya.
• Your IP address. Freya's own servers don't log it, but Cloudflare sees it (see section 5).

3. Signing in to the Activity

When you open Freya's Activity, Discord asks whether Freya may know who you are. That's the OAuth2 identify scope, and nothing more. Freya uses the token Discord gives her once, to ask Discord for your user id, then passes it back to the page for Discord's own Activity tools. She never stores it.

Freya then asks Discord, with her own bot account, for your name and picture in that server and which server and channel the Activity is open in. Your session is a signed ticket that the Activity's page holds while it's open. Freya doesn't store it. It carries your id, your name there, the server, the channel and the Activity's instance, and it stops working after 6 hours.

Your Discord picture is passed through Freya so others at the same table can see it. She doesn't store it, but your browser and Discord's picture service may keep a copy for up to a day.

The Activity's table, meaning who's there and what they're opening, lives only in memory and is gone when Freya restarts. Your sound settings are kept in your own browser's storage, on your device.

4. How Freya uses it

• To run the game: your cards, credits, trades, auctions, rewards and everything else you see in Freya.
• To keep it fair: checks against alt accounts before trading and the auction house, and reports that show trades moving value one way.
• To fix problems: error reports and logs. Each error has a short id that you see too, so we can find it.
• To tell you things: DMs and letterbox notes about your trades, auctions, prizes and letters from Freya's admins. If your DMs are closed, Freya gives up.
• To see what's used: which commands and features players use, which helps decide what to build or retire.

Some things are public by design: your pulls, trades, auctions and showcases are posted in the channel where you started them. Auctions show the seller's name in every server. Big achievements are announced in a server's events channel, and giveaway winners are pinged. Your collection, wallet and history are private.

Freya doesn't use your data for ads, doesn't build profiles of you, and doesn't use it to train AI.

5. Who else handles it

We don't sell your data, and we don't give it to advertisers or data brokers. These services help run Freya:

• Discord, where Freya lives. Messages Freya posts or DMs to you are on Discord, under Discord's Privacy Policy.
• A hosting provider that rents us the server Freya runs on, in eastern Canada.
• Cloudflare, which carries the Activity's connection to Freya and hosts this website. As any network does, it sees your IP address and your browser's request details, under Cloudflare's Privacy Policy.
• Google Drive, where a backup copy of Freya's database is kept (see section 6).

Error reports, which can include your Discord id and what you were doing, go to a private Discord channel for Freya's admins. We'll also share data if the law requires it.

6. Where it's kept, and for how long

• Freya's database, on a rented server in eastern Canada. It's kept while Freya runs, unless you ask us to delete yours.
• Logs, for up to 30 days.
• Backups, taken every 6 hours: all of the last 2 days, then one a day for 30 days.
• One backup a day in Google Drive, deleted after 30 days.
• Pictures of card copies with their serial numbers, in a cache that deletes the least recently viewed first.

Freya's records of what happened (credit movements, trades, pack opens) are never edited or thrown away while you play, because the game checks its books against them every day. That's why deleting your data means making it anonymous (section 7).

7. Your choices and rights

• Stop at any time. A server's moderators can remove Freya from it whenever they like.
• See your data. Ask, and we'll send you a copy of what Freya keeps about you.
• Correct it. Tell us if something's wrong.
• Delete it. Ask, and within 30 days we'll take your Discord id and the names we stored out of every record, putting a random stand-in in their place. What's left is anonymous numbers that keep the game's books balanced, and nothing in it can be traced back to you. Your account, cards and credits are gone for good, and the copies you owned leave the game. Backups made before then expire within 30 days.

Email contact@freyatcg.com or ask in the Freya server. We'll check that the request comes from your Discord account before acting on it.

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), the law gives you these rights and others, such as objecting to how your data is used or complaining to a data protection authority. We honour these requests whoever you are. Where the GDPR applies, we use your data to provide the game you joined, and for our legitimate interest in keeping it fair, secure and working.

8. Keeping it safe

Freya's server lets in only key-based logins for its admins, and a firewall keeps everything else out. Her database isn't reachable from the internet, and the Activity's pictures open only by links Freya signed. The Google Drive backup can see only Freya's own files. No system is perfectly secure. If your data is ever accessed without permission, we'll tell you as the law requires, and we'll tell Discord.

9. Children

Freya is for Discord users, and Discord requires you to be at least 13, or older where the law of your country says so. Freya isn't meant for anyone younger. If we learn we hold data from someone under that age, we'll delete it.

10. This website

This website sets no cookies, runs no scripts and loads nothing from other sites. Its fonts and pictures are its own. Cloudflare hosts it and keeps the usual request logs to run and protect it.

11. Changes to this policy

When this policy changes, the new version goes on this page with a new date, and we'll announce big changes in the Freya server.

12. Contact

Questions or requests about your data: contact@freyatcg.com.