Privacy Policy

SC Requisitions ("the app", "we", "us") operates sc-req.com, a crafting and materials-tracking tool for Star Citizen organizations. This policy describes what information we collect, why, and how you can control it.

1. What we collect

When you sign in with Discord or Google, we receive and store:

• Your display name (as provided by Discord/Google, editable afterward within the app)
• Your email address (required internally by our authentication system to create an account, even though the app itself never displays it to other users)
• A unique account identifier from the provider, used to recognize you on return visits

You may also choose to provide:

• An RSI (Star Citizen) handle, if you enter one
• Crafting requests, notes, and material inventory entries you create within an organization
• Which organizations you join or create

We do not collect passwords as sign-in is handled entirely by Discord or Google, and we never see or store your credentials for either service. We do not collect payment information, real-world addresses, or phone numbers.

2. Who can see your information

• Your display name is visible to other members of any organization you join.
• Your email address is never displayed to other users, in any organization, under any role.
• Crafting requests and shared material entries are visible only within the organization(s) you've shared them with and never across unrelated organizations.
• Depending on your role within an organization, some details (such as who requested a specific order) may be hidden from regular members and visible only to Quartermasters/Admins.

3. How your information is stored

Data is stored in a hosted PostgreSQL database (via Neon). Session information is managed by our authentication provider (Better Auth) using secure, encrypted cookies. We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

4. Third-party services

We use Discord and Google solely to authenticate you. Their own privacy policies govern what they collect on their end:

• Discord Privacy Policy
• Google Privacy Policy

5. Data retention

• Cancelled or fulfilled crafting orders are retained for approximately 30 days before being permanently deleted from our systems.
• Account, organization, and inventory data is retained for as long as your account exists.
• You can delete your own material entries and build-list items at any time from within the app.

6. Your rights and choices

You can, at any time:

• Change your display name from your Dashboard
• Leave any organization you've joined
• Delete your own shared material entries and pending requests
• Request full deletion of your account and all associated data by contacting us here

7. Your rights under GDPR (European users)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data. You have the following rights:

• Right to Access — request copies of your personal data.
• Right to Rectification — request that we correct inaccurate or incomplete information.
• Right to Erasure — request that we erase your personal data, under certain conditions.
• Right to Restrict Processing — request that we restrict processing of your personal data, under certain conditions.
• Right to Data Portability — request that we transfer your data to you or another organization, under certain conditions.
• Right to Object — object to our processing of your personal data, under certain conditions.

To exercise any of these rights, contact us here. We will respond within 30 days.

8. CalOPPA compliance

In accordance with the California Online Privacy Protection Act (CalOPPA):

• You can browse our public pages anonymously.
• This Privacy Policy is linked clearly from our site and includes the word "Privacy."
• You will be notified of policy changes via the "Last updated" date on this page.
• You can request changes to your personal information by contacting us here.

We do not use advertising or third-party behavioral tracking, and none of our cookies are used for tracking purposes regardless of Do Not Track browser settings. Note that our authentication session cookie is still required for sign-in to function at all as this is a functional necessity and not a tracking mechanism.

9. Children's privacy

This app is not directed at children and is not knowingly used to collect information from anyone under 13 years of age.

10. Changes to this policy

We may update this policy as the app changes. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this policy or your data can be sent to here.