Privacy Policy

When you create an account, I store your display name, your password (hashed with bcrypt, so I never see the actual value), and a magic-link token that lets you sign in across devices.

If you choose to sign in or register with Discord, I store your Discord user ID and display name to identify your account. I do not store your Discord password or access your servers, messages, or friends list.

When you use the app, I also store:

• Your weekly availability schedule (the half-hour slots you marked as free, stored as UTC timestamps)
• Your timezone preference and saved schedule preset
• The parties you belong to, and any scheduled boss runs
• If your party connects Discord: the server ID and channel ID you configure. The YoonA bot only sends messages there and does not read anything from your server.

I do not collect your email address, real name, payment information, or location data beyond the timezone you optionally set yourself.

Availability schedules are automatically pruned to just the current and next week on a rolling basis. I am not holding onto a history of your schedule.

Your account itself stays until you delete it from the app or website, or ask for help deleting it.

When you join a party, other members of that party can see your display name, the time slots you have marked as available, and any boss runs that have been scheduled. This is the core functionality of the app. If you leave a party, your availability is no longer visible to them.

A few services run under the hood that I want to be transparent about:

• Vercel hosts the app. I also use Vercel Analytics and Speed Insights, which collect anonymous page-view data with no cookies and no cross-site tracking. Vercel Privacy Policy
• Turso is the production database, so your data lives on their infrastructure. Turso Privacy Policy
• Discord is used in two ways: you can log in or register using Discord OAuth (in which case I store your Discord user ID and display name to identify your account), and if your party enables run notifications, the YoonA bot sends messages to a channel you configure and does not read your server's messages. Discord Privacy Policy

I do not sell, rent, or share your data with advertisers or any third parties outside of the hosting services listed above.

I use one session cookie (bossing_token) to keep you signed in. I also use localStorage to remember your theme preference. There is no tracking or advertising use.

You can delete your account yourself from the mobile app or on the website in Settings → Delete Account. There is also a public guide at mushroomgamers.com/delete-account.

Deleting your account removes your account data, saved availability, schedule preset, and sign-in access. Your party memberships are removed as part of the same process.

If you are the only remaining member of a party, that party and its scheduled runs are deleted. If other members remain in a party you lead, leadership transfers automatically so the party can continue.

Some limited information may be retained only when there is a legitimate technical or legal reason to do so.

If anything meaningful changes about how I handle your data, I will update the date at the top of this page. Continued use of the app after that reflects your acceptance of the update.