Privacy Policy

This Privacy Policy explains how Team Muses ("we", "us") handles information in Team Muses Hub (the "Service"), a private, invitation-based tool for a Disney Lorcana play group to share card wishlists, track tradeable spares, and coordinate. By using the Service you agree to this policy.

Information we collect

Account information (via Discord)

You sign in with Discord. With your permission, Discord shares your account user ID, username, display (global) name, avatar, and email address. We store these to create your member profile, sign you in, and let teammates and the Discord bot identify you. We never receive your Discord password.

Content you provide

• Cards you add to your wishlist and your tradeable spares, including quantities, foil preference, priority, and any notes you write.
• Decklists you choose to import from dreamborn.ink. When you submit a Dreamborn link, we fetch that publicly available deck page to read its card list.

Optional: linked Ravensburger Play account

If a performance-dashboard feature is enabled and you choose to connect your Ravensburger Play account, we store an access token (encrypted) and use it only to read your own event and match history to show your statistics. You can disconnect it at any time, which removes the stored token.

Technical information

• A session cookie to keep you signed in.
• Standard server logs, which may include your IP address, browser/user-agent, and timestamps.

How we use information

• To operate the Service: authenticate you, store and display your wishlist/spares, and compute trade matches with teammates.
• To power the Discord bot commands (for example, showing a teammate's wishlist or trade matches in your server).
• To maintain security, prevent abuse, and debug problems.

We do not sell your personal information or use it for advertising.

Information that is shared

• With your team: your name, avatar, wishlist, and spares are visible to other signed-in members so the Service can function.
• Public wishlist links: each member has a shareable wishlist page and QR code at a hard-to-guess URL. Anyone who has that link can view that wishlist without signing in. Treat the link as public and only share it where you're comfortable.
• In Discord: bot command responses display the requested wishlist or trade data in the Discord channel where the command is used.

Third-party services

The Service relies on these third parties, each under its own privacy policy:

• Discord — authentication and the bot. See discord.com/privacy.
• Lorcast — card data and card images (lorcast.com).
• dreamborn.ink — only when you import a deck link you provide.
• Ravensburger Play — only if you connect your account for the optional performance feature.

Data retention

We keep your information for as long as you have a member account. If you ask us to delete your account, or you are removed from the group, we delete your profile, wishlist, spares, and any linked-account token. Routine server logs are retained only for a short period for security and troubleshooting.

Security

We take reasonable measures to protect your data, including encrypting any stored Ravensburger access token. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your choices and rights

• You can sign out at any time, and edit or remove your wishlist and spares yourself.
• You can request a copy of your data, or request deletion of your account and data, by contacting us.
• You can disconnect an optional linked Ravensburger account to remove its stored token.
• Depending on where you live, you may have additional rights (such as access, correction, or erasure) under laws like the GDPR or CCPA. Contact us to exercise them.

Children

The Service is not directed to children. You must meet Discord's minimum age requirement for your country (at least 13) to use it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.

Contact

Questions or requests about your data: info@teammuses.org.