Privacy Policy

This Privacy Policy explains what HyperWare ("we", "us") collects when you use GhostOS — the GhostOS Discord bot and the GhostOS web dashboard (the "Service") — how we use it, and how to delete it. We only collect what the features need, we don't sell your data, and we don't use it for advertising.

1. What we collect

From Discord

• Your Discord user ID — everything GhostOS stores about you is keyed to it.
• Your Discord username and avatar — only when you sign in to the web dashboard (Discord's identify permission), to show who's signed in. We never see your email address, password or messages.
• Server and channel IDs — for features a server turns on (which channel the activity feed, vendor watch, LFG panel or news posts go to), and which server a Zero to Hero session or LFG listing belongs to.
• What you enter in commands — for example a Zero to Hero session name and your display name in it, LFG activity, start time, notes and your LFG timezone, and loadout names.
• Item alerts — the items (and vendors) you ask GhostOS to watch, and a history of the alerts it sent you. GhostOS sends these to you as Discord direct messages.
• Clan roles — if a server links a Destiny clan to a Discord role, which roles GhostOS manages for you in that server and your clan rank (so it only ever takes back roles it manages).

From Bungie.net (only after you run /link)

• Sign-in tokens that let GhostOS act on your account, and your Bungie.net and Destiny membership IDs.
• Game data read when a feature needs it — characters, inventory, vault, collections, triumphs and seals, and activity history. Most of this is read live and not stored.
• Post-game reports for your recent activities. A post-game report is Bungie's public record of a match and includes everyone in it — their Bungie names, characters and stats — including teammates who don't use GhostOS.
• Things GhostOS saves for you — saved loadouts and loadout share codes, Zero to Hero participation, coins and gear snapshots, and which exotic weapons and titles you already had (so the activity feed only announces new ones).

On the web dashboard

• One sign-in cookie (a random session ID), needed to keep you signed in. It lasts up to 30 days or until you sign out. We don't use analytics, tracking or advertising cookies.
• Companion settings — how you've arranged the Companion page (panel order, hidden panels, whether GhostOS loadouts show, and a pinned character), so it looks the same on every device you open it on.

2. How we use it

• To run the features you use — vault and loadout tools, stats, Wrapped, LFG, Zero to Hero and the rest.
• To check linked players' new activities about every 30 minutes, so features like Wrapped, activity history and the activity feed are up to date.
• To send you Discord direct messages you asked for — item alerts when something you watch goes on sale, and reminders for LFG listings you joined (the start-time reminder, “starting now”, the fireteam filling up, or moving up off the waitlist).
• To post in Discord servers that turned those features on. If a server you're a member of turns on the activity feed, your successful raid, dungeon and exotic mission clears, exotic weapons you get for the first time and titles you earn are posted in that server, with your Discord mention and Bungie name. To stop this, use /unlink.
• If a server you're a member of links a Destiny clan to a role, GhostOS reads that clan's public roster on Bungie.net about every hour; if you've linked and are in the clan, it gives you the roles that server chose (for being in the clan and/or for your clan rank), changes them when your rank changes, and takes them back if you leave the clan (unless the server keeps them) or /unlink.
• If you're on an LFG listing with a start time, from shortly before that time GhostOS shows the rest of the fireteam (on the listing in Discord and on the web dashboard) whether you're online, what activity you're in, and your Bungie name. This is read through Bungie's public profile, so if you hide your online status in Bungie's privacy settings it shows as hidden. It's kept only on that listing, and leaving the listing removes you from it.
• To keep the Service working and secure — for example error logs that can include your Discord user ID.

3. Who we share it with

We don't sell or rent your data. It only goes to the services GhostOS needs to work:

• Bungie — to read your game data and carry out actions you ask for.
• Discord — to reply to commands and post messages in servers.
• Our hosting provider (Railway), which runs GhostOS and its database.

Builds you share are public. When you share a loadout, anyone with its link or code can view the parts you chose to include, together with your Discord display name. Nothing else about your account is shown. Deleting the loadout, or running /unlink, removes the share.

GhostOS also downloads public data that contains nothing about you — a community god-roll wishlist from GitHub, and public posts from Bungie's own Bluesky accounts. We may disclose information if the law requires it.

4. How long we keep it

• Post-game reports are deleted automatically after 90 days.
• Web sign-ins expire after 30 days.
• Everything else is kept until you run /unlink or ask us to delete it. If your Bungie sign-in expires, GhostOS stops acting on your account, but your saved data stays until you delete it.

5. Deleting your data

Run /unlink in Discord. After you confirm, GhostOS deletes your Bungie.net link and tokens, the post-game reports you're in, your saved loadouts and share codes, Zero to Hero sessions you host (for everyone in them) and your place and coins in other sessions, your LFG listings and sign-ups, your web dashboard sign-ins and everything else stored about you. One exception: a post-game report that another linked player was also in is kept for that player's history, because it's a shared public record of that match.

If you don't use GhostOS but appear in a post-game report stored by it (for example as someone's teammate), or you want anything else deleted, email hyperware.os@outlook.com with your Bungie name and we'll remove what we can.

6. Security

Your data is stored in a private database only GhostOS can reach, dashboard sign-ins use a secure, HTTP-only cookie, and the dashboard's actions are protected against cross-site requests. No system is perfectly secure, but we work to protect your information and only keep what the features need.

7. Children

GhostOS is not for anyone under 13, and we don't knowingly collect data from children under 13. If you believe a child under 13 has used GhostOS, email hyperware.os@outlook.com and we'll delete their data.

8. Changes to this policy

We may update this policy. When we do, we'll change the "Last updated" date above. Significant changes will also be noted on the GhostOS website.

9. Contact

Questions or requests about your data: hyperware.os@outlook.com.