Legal

Privacy Policy

Last updated 11 November 2026

This policy explains what information Mutuals ("we", "us") handles when you use https://mutuals.gg, the dashboard at app.mutuals.gg, and the embeddable widget. We keep it to what we need to run the service.

Dashboard users

When you log in with Discord, we receive and store:

We request only the Discord identify and guilds scopes. We cannot read your messages or act on your Discord account.

Cookies

The dashboard uses a strictly necessary session cookie to keep you logged in, plus a short-lived cookie used during Discord login to prevent forgery. We store only a hash of the session token. The marketing site and the embed widget set no cookies and no tracking identifiers on a visitor's device.

Widget visitors

When the widget loads on a partner store, we count views and clicks. To avoid counting refreshes and double-clicks, we derive a temporary visitor key from your IP address, browser user agent and the date, hashed with a secret. The key changes daily and is not stored in our database. We do not build profiles or sell visitor data.

From the same request we also derive three coarse labels: your country (from your IP address, never anything more precise), your device type (mobile, tablet or desktop) and your browser family. We store only daily totals per store for each combination of those labels, never your IP address, user agent or any identifier, so the totals cannot be traced back to you. We use them to show store owners aggregate statistics about their own audience, on the basis of our legitimate interest in providing that feature, and delete them after 13 months.

How we use information

Sharing

Your store name, URL and listed scripts are shown to partner stores and their visitors; that is the point of the service. We use infrastructure providers (such as Cloudflare for hosting) to run Mutuals, and they process data on our behalf. We do not sell personal information.

Retention and deletion

We keep account data while your account is active. You can end partnerships from the dashboard, and you can ask us to delete your account and associated data at any time by contacting us. We may keep limited records where needed for security or legal reasons.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to certain processing. Contact us and we will respond within a reasonable time.

Children

Mutuals is not directed at children under 13, and we do not knowingly collect their data.

International transfers

Our providers operate globally, so your information may be processed outside your country.

Changes

We may update this policy. The date above shows the latest version; material changes will be noted on the site.

Contact

Questions? Email hello@mutuals.gg.