AmalgadonPrivacy Policy
Last updated: September 20, 2026This Privacy Policy explains what information Amalgadon ("we", "us") collects, how it is used, and your rights. It covers both the Amalgadon website (amalgadon.com) and the Amalgadon Discord bot.
1. Information We Collect
Website
Board data (shared builds) When you share a board via a link, the encoded board state (hero, minion slots, trinkets, notes, and title) is stored in our database linked to a short ID. No account or login is required; this data is anonymous and associated only with the share ID in the URL. Votes When you upvote or downvote a shared build, we store a hashed fingerprint of your request (derived from your IP address and user agent) to prevent duplicate votes. We do not store your raw IP address. Analytics We use Umami to collect anonymised usage data: pages visited, referrer, device type, and which features were used — for example that a board was shared, an image exported, or a card looked up through our Discord bot. Umami does not use cookies, does not track you across other websites, and records no personally identifiable information. Nothing we collect is linked to an individual, and none of it is sold or shared for advertising. If you would rather not be counted at all, runlocalStorage.setItem('ama_va_skip', 'true') in your browser's console on this site. That setting is respected for both page views and feature usage, and stays until you clear your browser data.
Contributions
When you submit a correction or addition to a card page, we store what you wrote. If you ask to be credited, we also store the name or nickname and the contributor code you supply; both are chosen by you and neither has to identify you. You may optionally give an email address, which we use only to confirm we received your contribution and to tell you if it is approved. Your address is never shown publicly and is never used for anything else.
API key requests
When you request a developer API key we store your name, email address, and the details of the application you gave us. We use the address to contact you about that key — in particular to tell you if it is revoked. Your key itself is stored only as a one-way hash.
Discord Bot
When you use the Amalgadon Discord bot, we process the following information only for the duration of handling your command and do not store it afterward:- Your Discord user ID — used solely for per-user rate limiting. A temporary counter keyed to your user ID is stored in our cache (Redis) and automatically expires after 60 seconds.
- The content of your slash command (card names, board data) — used to respond to your command and then discarded.
2. How We Use Your Information
| Data | Purpose |
|---|---|
| Shared board data | Power share links at /build/[id] |
| Vote fingerprints | Prevent duplicate votes |
| Analytics (anonymised, cookieless) | Understand site and feature usage, and improve the Service |
| Contribution content and credit details | Review contributions and credit contributors on the site |
| Contributor and developer email addresses | Confirm receipt, and notify you of an approval or a key revocation |
| Discord user ID (temporary) | Enforce per-user rate limits on bot commands |
We do not sell, rent, or share your data with third parties for marketing purposes.
3. Third-Party Services
We use the following third-party services that may process data on our behalf:
- Vercel — Hosting
- Umami — Privacy-friendly, cookieless analytics
- Supabase — Database (stores shared builds and vote fingerprints)
- Upstash — Redis cache (stores temporary rate-limit counters)
- Discord — Bot interactions platform
- Resend — Transactional email (delivers contribution and API key notifications)
Each of these services has its own Privacy Policy governing how they handle data.
4. Data Retention
- Shared builds that have been viewed by more than one unique visitor are retained indefinitely so that share links continue to work. Builds that have never been viewed by anyone other than the creator may be removed at any time, but are purged automatically after 14 days.
- Vote fingerprints are retained for as long as the associated build exists.
- Rate-limit counters (Discord bot) expire automatically after 60 seconds.
- Contributions, including any email address supplied with one, are retained for as long as the contribution is credited on the site.
- API key records, including the applicant details, are deleted when the key is revoked.
5. Your Rights
Depending on your location, you may have rights to access, correct, or delete personal data we hold about you. Because most data on Amalgadon is anonymous, we may not be able to identify data associated with you without the share link or other context you provide.
To make a request, email info@amalgadon.com.6. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "last updated" date at the top of this page when we do. Continued use of the Service after changes are posted constitutes acceptance of the revised Policy.