Donation Terms & Privacy

• 1. Nature of Contributions
• 2. Supporter Tiers & Perks
• 3. What Information We Collect
• 4. Payment Processing
• 5. Who Has Access
• 6. How Long We Keep It
• 7. Your Rights
• 8. Security
• 9. Contact

By completing a contribution you confirm that you understand it is voluntary, that the thank-you perks described are discretionary, and that you have read these terms.

Refunds: Contributions are non-refundable except where required by applicable law. If you believe a charge was made in error, contact staff and we will review it promptly.

Chargebacks: If you initiate a chargeback with your bank or payment provider, it will result in a permanent ban from our servers.

Each supporter tier lasts 31 days from the date of contribution. The associated Discord role is automatically removed when the period ends.

• In-game perks (events, buffs, boss fights) are provided as a thank-you and require the recipient to be in good standing. Players who are banned, suspended, or under active moderation may be unable to receive them.
• Community events triggered by supporter contributions are run for the whole server and remain at staff discretion. They are not guaranteed deliverables.
• Custom additions noted on any tier are subject to change at staff discretion.
• Permanent milestone ranks are awarded based on cumulative lifetime contributions and never expire.
• The Paragon rank is merit-based, not purchasable, and requires active server participation. It may be revoked after 30 days of inactivity.

When you make a contribution, we collect and store the following:

• Discord ID - collected when you log in with Discord using Discord's official OAuth2 system.
• Contribution amount and currency
• Contribution date and time
• Supporter tier granted
• Email address - provided by Stripe after a successful payment. Stored so we can locate your contribution history if you ever lose access to your Discord account.
• Message to staff - any optional message you type on the donation form.
• Payment reference ID - a transaction reference from Stripe (not a card number or payment details).

We do not collect or store card numbers, CVVs, billing addresses, or any other payment credentials. These are handled entirely by Stripe and never pass through our servers.

We do not sell, share, or disclose your information to third parties, except to Stripe as necessary to process your payment.

All payments are processed by Stripe (stripe.com), a PCI-DSS Level 1 certified payment processor used by millions of businesses worldwide including Amazon, Google, and Shopify.

When you click "Contribute by card" you are redirected to Stripe's hosted checkout page. Your card details are entered directly on Stripe's servers - Elys Astra never sees or stores your card information.

Stripe's own privacy policy applies to information you provide during checkout: stripe.com/privacy

Contribution records are stored in a private database on our server. Access is restricted to:

• Server owner (Kamona) - Payment logs via Stripe.
• Nullception - Private Database where the system itself lives.
• HR staff - can view contribution records and manage supporter tiers. Cannot access card details (which are never stored) or emails.

Staff are expected to handle contributor information with discretion. Access to the database outside of the donation management tools is limited to Kamona or Nullception.

Contribution records are retained indefinitely to maintain your supporter history, resolve disputes, and track lifetime milestone ranks. This includes your Discord ID, amount, date, and email.

If you request deletion of your data, we will remove personally identifiable information (email) from historical records where technically feasible. Note that anonymised contribution totals may be retained for milestone rank tracking.

You have the right to:

• Request a copy of the information we hold about your contributions.
• Request correction of inaccurate records (e.g. wrong Discord ID linked to a contribution).
• Request deletion of your personally identifiable information, subject to our ability to maintain anonymised records for dispute resolution.

To exercise any of these rights, open a donation ticket.

• The donate page and all endpoints are served over HTTPS.
• Discord login uses Discord's official OAuth2 system - we never receive or store your Discord password.
• Card payments are handled by Stripe's PCI-DSS Level 1 certified infrastructure.
• Webhook payloads from Stripe are verified using HMAC signatures before processing.
• Database access is restricted to the server and not publicly accessible.

While we take reasonable steps to protect your information, no internet transmission is 100% secure. If you believe your data has been compromised, contact staff immediately.

For questions about these terms, your data, or any contribution-related concern:

• Open a support ticket in the Elys Astra Discord server

We aim to respond to all data-related requests within 7 days.