Privacy Policy
Chimera Nexus is the website for the Chimera banks, a banking and share-trading service for players of the online game Politics & War, run on Discord. It is operated by Chimera Corp ("we", "us"). This policy says what personal information the site and the Chimera bot handle, why, who can see it, and what you can do about it. Nothing here is real money: balances, loans and shares are records inside a game economy.
1. What we collect
From Discord, when you sign in. You sign in only with Discord. We ask Discord for your Discord ID, your display name and your avatar, and for the roles you hold in the bank's Discord server and which other Chimera servers you belong to. The roles decide what you can see. Your Discord access token is used once during sign-in and is not kept. We never see your Discord password.
From you, in the bank. Your Politics & War nation ID when you register with the bot; your accounts, balances and transaction history; deposit, withdrawal and transfer requests, including any note you attach; loan requests (the amount, what it is for and your nation link) and the loans, repayments and interest that follow; your shareholdings, share offers and purchases, and your votes in shareholder votes; a record that you accepted these documents (your Discord ID, the version and the time); and how many times you have signed in to the website, with the dates of your first and latest sign-in, which the site uses only to decide how much on-screen help to show you. We do not record which pages you open.
From the game. To move deposits and withdrawals the bot uses the game's interface to check and make in-game trades and transfers for your nation, and records that they happened. If you gave the bot a Politics & War API key, it is stored for that purpose.
Technical data. The site sets one cookie (see section 6). Like any web server, ours records the time, your network address and the page requested when you visit, to run and secure the service.
What we do not collect. No advertising or analytics trackers, no real-world financial information, no payment cards, no location and no contacts. We use Discord only for signing in and for the commands you give the bot and the messages the bot sends you.
2. Why we use it
- To provide the service you asked for: signing you in, showing your accounts, moving your in-game money and resources, handling loans and shares.
- To keep the banks' books, which the banks need as a record of what happened (our legitimate interest, and the reason records cannot simply be erased; see section 7).
- To keep the service safe: preventing fraud, abuse and mistakes, and investigating problems.
- To tell you things you need to know, such as a loan decision (on the website and as a Discord message).
We use the information only for running the Chimera banks. We do not sell it and we do not use it for advertising.
3. Who can see it
- You see your own accounts, loans, shares and notifications.
- Your bank's staff and directors can see what they need to run that bank: customers' accounts and loans, loan requests, the shareholder register and the books. They are bound by the bank's rules and by these documents.
- Chimera platform administrators can view every bank's pages in a read-only view, and each such viewing is logged.
- Other customers see only what a feature is meant to show them: for example, a person you send money to is shown the sender, and share-market sales are anonymous to the other party. Customers are not shown how many people bank or hold shares at a bank.
4. Who we share it with
- Discord, because you sign in and receive messages through it, under Discord's own privacy policy.
- Politics & War, because deposits and withdrawals are real trades and transfers inside that game.
- Our hosting and service providers, who run the servers and network the service sits on.
- Where the law requires it, or to protect people and the service from harm.
5. Other websites your browser contacts
To draw the pages, your browser loads some files from other services: the Bootstrap style and icon files (jsDelivr), fonts (Google Fonts) and, if you have one, your Discord avatar (Discord's image servers). Those services see your network address and browser details when they send you the files, as for any website. We do not send them anything about your account.
6. Cookies
The site sets a single cookie, called session. It keeps you signed in and protects forms from forgery. It holds your Discord ID, display name,
the bank you are signed in to, your roles there and an expiry, and it is marked secure, HTTP-only and same-site. It ends when you sign out and in any case
within 12 hours; your sign-in is also re-checked with Discord regularly. It is strictly necessary for the site to work, so there is no cookie banner
and nothing to switch off. We set no advertising or tracking cookies.
7. How long we keep it
- Accounts, transactions, loans, shares and votes are kept for as long as the bank keeps its books. They form the bank's accounting history, and removing a person from it would make the books wrong, so these records are kept even if you leave the server. If you ask us to erase your information, we will remove or anonymize what can be removed and tell you what has to stay and why.
- Notifications are kept so you can read them on the site.
- Your acceptance record is kept for as long as the documents it refers to are relevant.
- Your sign-in cookie lasts at most 12 hours.
- Server logs are kept only as long as needed to run and secure the service.
8. Your rights
Depending on where you live (for example under the GDPR or the UK GDPR, or in California), you may have the right to know what we hold about you, to have it corrected, to have it erased or restricted (within the limits in section 7), to object to how we use it, to receive a copy in a usable form, and to complain to your data protection authority. You can also ask us to stop sending you Discord messages by switching off messages from the server's members in Discord; the same news stays in your Notifications tab. We do not sell personal information and do not make decisions about you by automated means that have legal or similarly significant effects: loans are approved by people.
To use any of these rights, contact the staff of your bank's Discord server (open a ticket or message a director). We may need to check it is you, and we will answer within the time the law sets.
9. Security
Connections to the site are encrypted. Access depends on your Discord roles, platform administrator views are read-only, and money-moving actions need you to confirm them. No system is perfectly secure, so keep your Discord account secure, and tell us at once if you think someone else used it.
10. Children
The service is not for anyone under 13, which is also Discord's minimum age. If you think a younger person has used it, tell us and we will deal with it.
11. Where it is kept
The service runs on servers that may be in a different country from you, so your information can be processed outside the country where you live. Where the law requires it, we rely on the safeguards it provides for that.
12. Changes
If we change this policy in a way that matters, we will update the version and date above and ask you to accept the new version the next time you sign in.
13. Contact
Chimera Corp — the staff of your bank's Discord server (open a ticket or message a director).