Privacy Policy

Naruto Realms is a fan-made project operated by 09Clicks (Germany). It is not affiliated with, endorsed by, or partnered with Shueisha, TV Tokyo, Pierrot, or any official Naruto rights-holder.

The Bot stores the following data so the game can function:

• Discord user ID + username — to track your profile, inventory, stats
• Discord server (guild) IDs the Bot is invited to — to track server settings
• Gameplay data — your cards, XP, Ryo, battles, raids, achievements, streaks, clan + village memberships
• Per-server configuration — channel IDs, role IDs, language preference, command prefix (set by server admins via the Website dashboard)

The Website additionally stores:

• Discord OAuth access tokens — encrypted in a signed cookie, so you stay logged in to the dashboard for up to 7 days
• Audit logs — actions taken on the dashboard (e.g. settings changes, admin operations) with timestamp + your Discord ID

We do not collect: email addresses, payment information, IP addresses, message content from chats, or any data unrelated to bot functionality.

Every piece of data above is necessary for the Bot to work as a card-collection + battle game. We use it only for:

• Operating the game mechanics (your cards, battles, progression)
• Displaying public leaderboards (top players, top servers, top clans)
• Sending in-game notifications (raid alerts, war announcements) to your configured channels
• Server-admin functionality on the Website dashboard
• Security + abuse prevention (audit log)

We do not sell your data, share it with advertisers, or use it for any marketing purpose.

All gameplay data is stored in a SQLite database on a dedicated server hosted in Germany. The Website runs on Vercel infrastructure. Access to the database is restricted to the bot operators.

• Discord — the platform the Bot runs on (their Privacy Policy applies to your Discord account itself)
• Vercel — hosts the Website (Privacy Policy)
• Top.gg — if you choose to vote for the Bot, Top.gg shares your Discord ID with us so we can grant the vote-reward (Privacy Policy)
• QuickChart.io — chart images shown in /stats are rendered by an external service. No personal data is sent — only the numeric values being charted.
• Discord CDN + Fandom Wiki CDN — character images displayed by the Bot are hosted on these external CDNs

Gameplay data is retained indefinitely while your account is active. If you stop using the Bot, your data remains so you can resume later. You can request full deletion at any time (see below).

OAuth session cookies expire automatically after 7 days. Audit logs are retained for 90 days for security review.

You have the right to:

• Access — request a copy of all data we store about you
• Rectification — request correction of inaccurate data
• Deletion — request full erasure of your account + all associated data
• Portability — request your data in a machine-readable format
• Objection — opt out of any specific processing
• Withdraw consent — leave the Bot or unlink your Discord at any time

To exercise any of these rights, open a ticket in our official Discord at discord.gg/narutorealms or email kontakt@09clicks.de. We respond within 30 days.

The Website uses two cookies, both essential (no tracking, no analytics):

• nr_session — your signed login session (HttpOnly, Secure, SameSite=Lax, 7 days)
• nr_oauth_state — CSRF protection during Discord OAuth login (10 minutes, deleted after callback)

We do not use any analytics, advertising, or tracking cookies.

The Bot follows Discord's minimum age requirement of 13 (or higher where local law mandates). We do not knowingly collect data from children below this threshold.

If we make material changes, we'll announce them in the official Discord and update the "Last updated" date at the top of this page. Continued use after changes constitutes acceptance.

For any privacy questions or to exercise your rights:
📩 kontakt@09clicks.de
💬 discord.gg/narutorealms