Privacy Policy

ONE585 Hub is a scheduling and alliance management tool for Kingshot players. It is operated as a personal project and is not affiliated with any company.

We collect only what is needed for the app to work:

• Account data — your email address, used to log in via Supabase Auth.
• Profile data — kingdom name and kingdom number, if you choose to set them.
• Schedule data — battle schedules and player slot submissions you create or submit.
• Violation tracker data — in-game player names, UIDs, alliance names, and infraction records entered by alliance leaders. This data relates to in-game identities, not real-world personal data.
• Activity logs — a record of key actions taken in the app (e.g. adding or editing records), used for moderation and audit purposes.
• Discord webhook URLs — if you configure Discord integration, the webhook URLs you enter are stored to enable automated posts to your Discord server.

We do not collect real names, phone numbers, payment information, or location data.

• To provide and operate the app (authentication, displaying your schedules and tracker data).
• To send automated messages to Discord channels you have configured.
• To maintain an activity log for moderation purposes.

We do not sell your data, use it for advertising, or share it with third parties except as described below.

The app relies on the following services, each with their own privacy practices:

• Supabase— database and authentication. Your data is stored on Supabase's infrastructure. Supabase is GDPR-compliant and offers a Data Processing Agreement.
• Vercel — web hosting and serverless functions. Vercel processes requests to serve the app. Vercel is GDPR-compliant.
• Discord— if you enable Discord integration, messages are sent to your Discord server via webhook. Discord's own privacy policy governs that data once delivered.

• Passwords are hashed by Supabase using bcrypt — we never see or store your password in plain text.
• All data is transmitted over HTTPS/TLS.
• Password resets use secure one-time links, never email the password itself.
• Manager passcodes are stored as hashed values — not in plain text.

Your data is kept for as long as your account exists. When your account is deleted, your profile, schedules, submissions, and violation records are permanently removed. Activity log entries may be retained for a short period for audit purposes before deletion.

Depending on where you are located, you may have the right to access, correct, export, or delete your personal data. In practice:

• Delete your account — contact the administrator through the app. All associated data will be permanently removed.
• Correct your data — you can update your kingdom name and number in your profile at any time.
• Export or access your data — contact the administrator through the app and we will provide a copy of your data.

The app uses cookies only for essential functionality:

• A session cookie to keep you logged in (managed by Supabase Auth).
• A manager passcode cookie if you authenticate as an alliance manager.

We also use browser local storage to remember your theme preference and changelog read status. No tracking, advertising, or analytics cookies are used.

This app is not directed at children under 13. We do not knowingly collect personal data from children.

If we make material changes to this policy, the "Last updated" date at the top of this page will change. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

For privacy questions or data requests, please contact the administrator through the app.