Privacy Policy
This describes what Tome collects when you use the bot in Discord or sign in on this website, and what happens with it.
What Tome collects
- Your Discord ID, username, and avatar - used to identify your account and show your profile. Signing in on this website uses Discord's "identify" permission only - Tome never requests your email address or your Discord password, and can't see either.
- Gameplay data - your card collection, in-app currency balances, wishlist, trade/market history, and quest progress. This is the actual data the bot exists to track.
- Server configuration - a server's ID and the channel IDs an admin sets up (drop channel, main channel, etc.), stored so Tome behaves correctly in that server.
- Basic technical logs - our hosting and CDN providers (including Cloudflare) may log IP addresses and request metadata briefly, the way most web infrastructure does, for security and abuse prevention.
- A scrambled network fingerprint - when you verify your account or sign in on this website, Tome stores a one-way fingerprint of your IP address (a keyed hash; for IPv6, of your network rather than your exact address). It can't be turned back into your IP, and Tome never stores the IP address itself. It's used only to spot duplicate accounts - two accounts on the same network get the same fingerprint - and matches are reviewed by staff rather than acted on automatically. The one automatic step: if your network matches an account that's currently banned from Tome, verification is held until staff take a look. Fingerprints are deleted automatically 90 days after they were last seen.
- Your Discord account's creation date - read from your Discord ID when you verify, as another signal for spotting brand-new throwaway accounts.
For real-money purchases (made on this website or through a ticket with the Tome team), payment details like card numbers are entered directly with the payment provider shown at checkout - Tome never receives or stores them. Tome keeps a record of what you bought and when, so it can be delivered and any problems sorted out. See the Terms of Service for how purchases work.
What it's used for
- Operating the bot's actual features - pulls, trading, the marketplace, quests, leaderboards, and everything else Tome does.
- Preventing cheating, scams, and abuse between users.
- Diagnosing bugs and improving Tome over time.
Your data is never sold, and isn't shared with anyone outside the service providers needed to actually run Tome (database hosting, Cloudflare, Discord itself) - or if required by law.
How long it's kept
Network fingerprints are deleted automatically 90 days after they were last seen. Everything else is kept for as long as your Tome account/collection exists. If you want your data deleted, contact us using the details below - some information (like a completed trade both parties were part of) may be kept in an anonymized or aggregate form for record-keeping even after a deletion request.
Age requirement
Tome follows Discord's own minimum age requirement for using Discord at all. Tome doesn't knowingly collect data from anyone younger than that, and an account found to violate this will be removed.
Your choices
- Removing Tome from a server, or signing out of the website, stops that new data from being collected going forward.
- You can request a copy of your data, or ask for it to be deleted, at any time.
Changes to this policy
This policy may be updated as Tome changes. Meaningful changes will be reflected here with an updated date at the top.
Contact
Questions, data requests, or concerns? Reach out in the Tome docs or through the support server linked there.