Privacy Policy

1. Information We Collect

When you register and use Midnight, we collect the following information:

• Discord account data — your username, user ID, and avatar hash, obtained through Discord OAuth at login
• Usage statistics — aggregated counts such as visitor numbers, hit counts, and Robux/RAP values associated with your account
• Configuration data — webhook URLs, filter settings, referral codes, directory slugs, and other preferences you configure in your dashboard
• Chat messages — messages sent in the platform chat, automatically deleted after 24 hours
• Authentication cookie — a secure, HTTP-only cookie stored in your browser to maintain your login session. We do not use tracking, analytics, or advertising cookies.

2. How We Use Your Information

We use collected information solely to operate and provide the Service, including to: authenticate your identity; display your dashboard statistics and profile; deliver webhook notifications to URLs you configure; enable referral tracking and leaderboard features; and improve the reliability and performance of the Service. We do not use your data for advertising or profiling.

3. Data Sharing

We do not sell, rent, or share your personal information with third parties, except in these limited circumstances:

• Discord — we use Discord's API for authentication. Discord's Privacy Policy governs that interaction.
• Cloudflare — we use Cloudflare for DDoS protection and bot mitigation. Cloudflare may process your IP address and browser signals. See Cloudflare's Privacy Policy.
• Legal requirements — we may disclose information if required to do so by law, or to protect the rights, property, or safety of the Service and its users.

4. Data Retention

We retain your account data for as long as your account is active. Chat messages are automatically deleted after 24 hours. If you delete your account via the Manage section of your dashboard, all associated data — including your profile, sites, stored cookies, referral data, and chat history — is permanently and immediately removed from our database.

5. Security

We implement reasonable technical safeguards including HTTPS encryption, secure HTTP-only authentication cookies, and access controls on our server infrastructure. However, no system is completely secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from factors outside our reasonable control. We encourage you to use a strong, unique recovery code and to notify us immediately if you suspect any unauthorized access to your account.

6. Your Rights

You have the right to access the data we hold about you (visible in your dashboard), correct inaccurate data by updating your settings, and permanently delete your account and all associated data at any time. To exercise these rights, use the account deletion feature in your dashboard or contact us via Discord.

7. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy periodically. The effective date at the top of this page reflects when the policy was last revised. Continued use of the Service after any changes constitutes your acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us via our Discord server.