Overseer – Privacy Policy

This Privacy Policy applies to:

• Discord server owners and administrators who install Overseer
• Users of Discord servers that use Overseer
• ARK: Survival Evolved (Xbox) players whose gameplay data is processed through Nitrado-hosted servers connected to Overseer
• Website users and subscription holders

A. Discord Data

We store:

• Discord user ID
• Discord username
• Guild (server) ID
• Commands executed
• Command arguments
• Timestamp of command
• Actions performed by the command

Discord command logs are stored indefinitely. We do not store general Discord message content outside of ARK-related logs.

B. ARK Server Data (via Nitrado API)

Using the Nitrado API token provided by server administrators, we collect and process gameplay data from ARK: Survival Evolved (Xbox) servers hosted through Nitrado.

This includes:

• Gamertags
• Platform identifiers
• Historical name changes
• Character data
• Tribe membership history
• Cluster join history
• Ban records issued via Overseer
• Server event logs including:
  • Chat messages
  • Player joins and leaves
  • Admin commands
  • Tribe logs

Raw server logs are stored for 60 days, aggregated into statistical summaries, and then permanently deleted.

C. Subscription & Payment Data

Payments are processed by Stripe.

Within our own database, we store only:

• Stripe customer ID
• Subscription ID
• Subscription status
• Subscription type
• Subscription period dates

We do not store card numbers, billing addresses, or payment method details. Payments are processed by Stripe under their own privacy policy.

• Bot and database hosted on a Hostinger VPS
• Backups stored on Google Drive
• Backups retained for 6 months

Backups are not used for active processing.

We use personal data to:

• Providing server management tools
• Monitoring ARK server activity
• Generating player statistics
• Enforcing bans and moderation actions
• Providing subscription features
• Improving, testing, and developing Overseer

We reserve the right to use stored data for internal testing and development purposes.

We do not sell personal data.

We process personal data under the following lawful bases:

Legitimate Interests

• Operating moderation tools
• Preventing abuse and ban evasion
• Maintaining service security
• Improving the Service

We consider these interests proportionate and necessary for the operation of Overseer.

Contract

Where processing is necessary to provide paid subscription services.

ARK: Survival Evolved (Xbox) may include players under 18. We do not verify age information. Gameplay data is processed as part of standard server logging functionality.

We share data only with:

• Hostinger (hosting)
• Google Drive (backups)
• Stripe (payments)
• Discord and Nitrado APIs

We do not sell or trade personal data.

Where third-party providers process data outside the UK, they do so under their own compliance mechanisms.

• Gamertag profile data stored indefinitely
• Server logs stored for 60 days before deletion
• Discord command logs stored indefinitely
• Backups retained for 6 months

• API tokens encrypted before storage
• Restricted infrastructure access
• Hostinger VPS hosting
• Secure backup retention

While reasonable measures are taken, no system is completely secure.

Under UK GDPR, individuals have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Object to processing
• Lodge a complaint with the UK ICO

Contact: data.protection@ovsr.net

Individuals may request deletion of their personal data by contacting the email address above.

What We Will Delete

• Gamertag profile data
• Historical name records
• Character data
• Tribe history linked to that gamertag
• Cluster join history
• Aggregated statistics linked to the profile

What We May Retain

We may retain limited information necessary for enforcing bans, preventing abuse or ban evasion, protecting service integrity, defending legal claims, or complying with legal obligations.

Backups

Deleted data may remain in disaster recovery backups for up to 6 months. If restored, deletion requests will be re-applied.

We may update this Privacy Policy from time to time. Continued use of the Service constitutes acceptance of the updated version.