Privacy Policy

When you sign in with Discord, we receive your Discord ID, username, global display name, avatar URL, and email address (read-only). When you link your Thrill username, we store that username string. We do not collect or store any payment details, financial information, deposit/withdrawal history, or wagering balance — all of that lives on Thrill.

For leaderboards and monthly challenges, we periodically query Thrill's affiliate API for wager totals of players registered under code joshii998. The data we cache is limited to: your Thrill username, total wagered amount in the current cycle window, and (for challenge claims) bet IDs you submit. We do not see your bet history outside of bet IDs you voluntarily submit for a challenge claim.

Linked Thrill usernames credit your wagers to the leaderboard and gate monthly-challenge eligibility. Discord identity is used to authenticate you and to ping you when a reward is sent your way. We do not sell, rent, or share your data with advertisers or third parties for marketing purposes.

Account + linking data is retained for as long as your account is active. Wager totals are retained per leaderboard cycle and archived after rollover for historical leaderboards. If you request deletion (see Your Rights below) we will remove your row from our database within 30 days; archived leaderboard standings will keep only your masked username (first + last character only).

We use HTTP-only session cookies to keep you signed in via Discord OAuth. We use `localStorage` to remember UI preferences (sidebar collapse state, sound mute, last-viewed leaderboard tab). We do NOT use third-party tracking pixels, advertising cookies, or behavioral analytics SDKs.

Authentication is handled by Discord OAuth — see Discord's privacy policy for what they collect. Thrill affiliate data is queried server-side using an operator-issued API key; your Discord identity is never forwarded to Thrill. Hosting is provided by infrastructure partners under standard data-processing agreements.

You can request export of all data we hold about you, or full deletion of your account, by opening a ticket in our Discord server with the subject "Privacy Request". We honor all valid GDPR/CCPA-style requests within 30 days as required by law. Note that some deletion is irreversible — archived leaderboard standings will be anonymised, not removed.

GhostGambles is strictly 18+ (or your local legal gambling age, whichever is higher). We do not knowingly collect data from minors. If you believe a minor has registered, contact us via Discord and we will remove the account immediately.

We may update this Privacy Policy as the service evolves. Material changes (new data categories, new third-party processors) will be announced in our Discord. Continued use after a change constitutes acceptance.