Privacy Policy

1. Who is responsible

FIVE CITY (“we”, “us”, or “our”) operates the Five City player feedback website and is responsible for the personal data it processes for this survey. Contact us at contact@five.city.

This policy covers the survey website. Discord operates independently and explains its own processing in the Discord Privacy Policy.

2. Information we process

• Discord account information: your Discord user ID, display name or username, avatar URL when available, and whether you belong to the designated FIVE CITY Discord server.
• Sign-in and security information: an encrypted Discord access token, session identifiers, expiration times, and temporary information used to validate sign-in and protect requests.
• Survey responses: your selected country or territory, server language, and game interface language; the survey identifier; and the submission time. Your response is linked to your Discord user ID to prevent duplicate submissions.
• Browser preferences: your selected website language and temporary, unsubmitted selections stored on your device.
• Support messages: information you choose to send to our contact email, including the contact details needed to reply.

The country and language selections express your preferences. We do not treat them as verified information about your residence, nationality, or ethnicity. Responses in our database are not anonymous because they are associated with a Discord ID.

We request the Discord permissions identify and guilds.members.read. Discord may return additional profile or membership fields as part of those responses; we use only what is needed for the functions described here and do not store the full responses. We do not request your Discord password, email address, messages, or contact list.

3. Why we use this information

We use this information to sign you in, verify server membership, accept one response per account, confirm previous participation, understand community preferences, protect the survey from abuse, and handle support or privacy requests.

Where a legal basis is required, we rely on processing necessary to provide the Service you request, our legitimate interests in running a fair and secure community survey and evaluating its results, and compliance with legal obligations where applicable. Where law requires consent for a particular activity, we will obtain it before that activity.

Participation is optional. Without the account information and membership check, we cannot accept your response. We do not use survey data for advertising, sell it, or use it to make automated decisions with legal or similarly significant effects.

4. Cookies and browser storage

The website uses the following functional storage:

• fc_session: a sign-in cookie that expires within 24 hours, or sooner if the associated Discord authorization expires.
• fc_oauth: a temporary security cookie used during Discord sign-in, valid for up to 10 minutes and cleared when the sign-in callback is handled.
• five-city-locale: your language preference, saved in a cookie for up to one year and in local storage until cleared.
• Session storage: unsubmitted choices, associated with your Discord ID in this browser tab, so that retrying a request does not lose them. They are normally cleared after a successful submission or sign-out; otherwise their lifetime depends on your browser’s session handling.

The website does not use advertising cookies or third-party analytics scripts. You can clear browser storage in your browser settings. Blocking sign-in cookies may prevent participation. Clearing browser storage does not delete a response already saved on our server.

5. Who can access the information

Access is limited to authorized FIVE CITY personnel who need it to operate the survey and handle requests. The private results dashboard shows totals and distributions. Its CSV export includes selections and submission times, but excludes Discord IDs and names. These exports are for the team; individual responses are not published by the Service.

We exchange authorization and membership requests with Discord. We may use infrastructure and email providers to host the Service, protect it, or handle correspondence; any such providers may process information only as needed to provide their services. We may also disclose information where legally required or when you expressly direct us to do so.

Your browser communicates with the server to load the website, which necessarily involves network information such as an IP address. The survey database does not store IP addresses or user-agent details. Infrastructure providers may process technical connection or security logs.

6. How long information is kept

Sign-in sessions expire within 24 hours, or earlier when the Discord access token expires. Expired session and sign-in verification records are removed during subsequent sign-in or session checks. Signing out removes the current server-side session and its stored access token.

We keep identifiable responses for as long as needed to collect and review this survey’s results and enforce its one-response rule. The survey currently has no fixed closing date. Responses do not expire automatically; FIVE CITY is responsible for reviewing and removing them when they are no longer needed, when the Service closes, or in response to a valid deletion request, unless retention is required by law.

Backup copies and team exports may contain survey information. Database backups may also contain the account and session information present when they were created, including encrypted access tokens. They are managed separately and must also be removed or updated when the information is no longer needed or a valid deletion request applies. Removing a live record or signing out does not by itself erase an existing backup. Support correspondence is kept only as long as needed to handle the request and meet any applicable legal obligations.

7. Security and international processing

We use server-side sessions, encrypted storage for Discord access tokens, access restrictions for administrative functions, and checks designed to prevent forged requests. No method of storage or transmission is completely secure.

Discord and any service providers may process information in countries other than yours. Where applicable law requires safeguards for an international transfer for which we are responsible, we will use those safeguards. You may contact us for information about the providers and storage locations used for the Service.

8. Your choices and privacy rights

Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of your personal data, restrict processing, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. You may also complain to your local data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

To make a request, email contact@five.city with the subject “Privacy request” and describe what you need. Include your Discord user ID if your request concerns a survey response, so we can locate it. We may ask for proportionate verification that you control the account. Do not send your password or access token. We will respond within the time required by applicable law.

Data deletion is handled by the FIVE CITY team; there is no self-service deletion button. You can sign out and separately revoke the application’s access in Discord’s account settings. These actions do not automatically delete your saved response, so contact us if you also want it removed. The survey’s final-response rule does not override your privacy rights.

9. Children

The Service is not intended for anyone under 13 or below any higher minimum age required in their country or by Discord. If you believe a child who does not meet these requirements has provided personal data, contact us so we can investigate and remove it where appropriate.

10. Changes to this policy

We will update this page when our practices change and revise the date above. Material changes will be communicated through the Service, and we will obtain any consent required by law before using information for a new purpose.