Legal
Privacy Policy
Last updated 11 November 2026
This policy explains what information Mutuals ("we", "us") handles when you use https://mutuals.gg, the dashboard at app.mutuals.gg, and the embeddable widget. We keep it to what we need to run the service.
Dashboard users
When you log in with Discord, we receive and store:
- Your Discord ID, username and avatar.
- The list of Discord servers you manage and their approximate member counts, used to pair stores of similar size.
- Store details you add: store name, store URL and the scripts listed.
We request only the Discord identify and guilds scopes. We cannot read your messages or act on your Discord account.
Cookies
The dashboard uses a strictly necessary session cookie to keep you logged in, plus a short-lived cookie used during Discord login to prevent forgery. We store only a hash of the session token. The marketing site and the embed widget set no cookies and no tracking identifiers on a visitor's device.
Widget visitors
When the widget loads on a partner store, we count views and clicks. To avoid counting refreshes and double-clicks, we derive a temporary visitor key from your IP address, browser user agent and the date, hashed with a secret. The key changes daily and is not stored in our database. We do not build profiles or sell visitor data.
From the same request we also derive three coarse labels: your country (from your IP address, never anything more precise), your device type (mobile, tablet or desktop) and your browser family. We store only daily totals per store for each combination of those labels, never your IP address, user agent or any identifier, so the totals cannot be traced back to you. We use them to show store owners aggregate statistics about their own audience, on the basis of our legitimate interest in providing that feature, and delete them after 13 months.
How we use information
- To provide, secure and improve the service.
- To show stores' scripts on partner stores and report aggregate counts.
- To respond to support requests and prevent abuse.
Sharing
Your store name, URL and listed scripts are shown to partner stores and their visitors; that is the point of the service. We use infrastructure providers (such as Cloudflare for hosting) to run Mutuals, and they process data on our behalf. We do not sell personal information.
Retention and deletion
We keep account data while your account is active. You can end partnerships from the dashboard, and you can ask us to delete your account and associated data at any time by contacting us. We may keep limited records where needed for security or legal reasons.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to certain processing. Contact us and we will respond within a reasonable time.
Children
Mutuals is not directed at children under 13, and we do not knowingly collect their data.
International transfers
Our providers operate globally, so your information may be processed outside your country.
Changes
We may update this policy. The date above shows the latest version; material changes will be noted on the site.
Contact
Questions? Email hello@mutuals.gg.