Privacy Policy
Last updated: April 8, 2026
1. Who We Are
Weered (weered.ca) is operated by Weered Technologies, based in Nova Scotia, Canada. This policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.
2. Information We Collect
| Data Type | What | Why |
|---|---|---|
| Account Data | Email address, username, password (hashed) | Account creation and authentication |
| Profile Data | Display name, avatar selection, bio | Community identity and personalization |
| Usage Data | Lobbies visited, rooms joined, feature interactions | Platform improvement and analytics |
| Chat Messages | Text messages sent in rooms and lobby chat | Delivery of the messaging service |
| Linked Accounts | Bungie, Riot Games, or other third-party OAuth tokens | Game integrations (guardian lookup, summoner stats, etc.) |
| Payment Data | Processed by Stripe; we do not store card numbers | Subscription billing |
| Device Data | Browser type, OS, IP address | Security, fraud prevention, and analytics |
| Push Tokens | Web push subscription endpoints | Notification delivery |
3. What We Do Not Collect
- We do not record video or audio from video chat or voice rooms. Video and audio streams are transmitted in real-time via WebRTC and are not stored on our servers.
- We do not record screen shares. Screen sharing sessions are peer-to-peer and are not captured or retained.
- We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
4. How We Use Your Information
- To operate, maintain, and improve the Weered platform
- To authenticate your account and manage sessions
- To deliver game integrations through linked third-party accounts
- To process payments for premium subscriptions
- To send notifications you have opted into (push notifications, DM alerts)
- To enforce our Terms of Service and Community Guidelines
- To detect, prevent, and respond to security threats or abuse
5. Third-Party Services
We integrate with the following third-party services, each governed by their own privacy policies:
- Bungie / Destiny 2: OAuth account linking for guardian stats, inventory, and Xur data
- Riot Games: Riot Sign-On for League of Legends summoner data
- Twitch: Stream data and embedded players
- Stripe: Payment processing (PCI-DSS compliant; we never see your full card number)
- LiveKit: Real-time video, voice, and screen sharing infrastructure
- Web Push (VAPID): Browser push notification delivery
6. Data Storage & Security
Your data is stored on servers located in North America. We use industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Hashed passwords (bcrypt)
- JWT-based authentication with secure token handling
- Role-based access controls for administrative functions
7. Data Retention
We retain your account data for as long as your account is active. Chat messages are retained for the operational life of the room or lobby. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (e.g., fraud prevention records).
8. Cookies & Local Storage
Weered uses localStorage to store your authentication token and user preferences. We do not use third-party tracking cookies. We do not run third-party advertising scripts. We may use minimal analytics to understand platform usage in aggregate.
9. Public Game Data & Mod Catalog
Weered surfaces publicly-available metadata from third-party game services to power features like the mod catalog, live server browser, stream listings, and live player counts. We:
- Cache metadata only. For mods, we cache the name, author, summary, thumbnail URL, endorsement count, and download count, sourced from the public Nexus Mods API. We do not rehost mod files. Every install link points to the mod's original Nexus page; downloads happen there, not here.
- Do not collect Nexus credentials. Reading the public catalog never requires a Nexus account or API key. We do not ask users for, store, or proxy any third-party API keys.
- Honour author opt-out. If you are a mod author and prefer your work not appear in our catalog, email support@weered.ca with the mod name. We will hide it from the catalog within one business day. The hide is persistent: even if our poller re-fetches the public Nexus listing, the exclusion stays in effect.
- Other public game data sources we cache the same way: Steam (live player counts, public server browser), Twitch (live streams for a given game), Bungie (Destiny 2 public profiles, opt-in linked), Riot (League of Legends summoner stats, opt-in linked), and similar first-party public APIs. None of these require us to store credentials beyond what the user explicitly links.
10. Your Rights (PIPEDA)
Under Canadian privacy law, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Withdraw consent for data processing (this may limit your ability to use the platform)
- Unlink third-party accounts at any time
11. Children's Privacy
Weered is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@weered.ca.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify users of material changes through the platform or by email. Your continued use of Weered after changes constitutes acceptance.
13. Contact
Privacy questions or data requests: privacy@weered.ca
General inquiries: weered.ca/contact
General inquiries: weered.ca/contact
