Privacy Policy

1. Information We Collect

When you use SquadCP (Squad Command Panel), we collect:

• Discord user ID, username, and avatar (via OAuth2)
• Discord server memberships and roles (to determine whitelist access)
• Steam64 IDs and/or EOS IDs that you voluntarily submit
• Steam player names (cached from Steam's public API)
• Audit logs of whitelist actions (submissions, edits, removals)

2. How We Use Your Data

Your data is used exclusively to:

• Authenticate you via Discord OAuth2
• Determine your whitelist tier based on Discord roles
• Generate whitelist files for Squad game servers
• Display your whitelist information on the dashboard
• Provide admin tools for server managers

3. Steam Account Linking

We use Steam's OpenID protocol to verify Steam ownership. When you click Link via Steam, you are redirected to steamcommunity.comto log in. Your Steam credentials are entered on Steam's site, never on ours. Steam sends us only your public Steam64 ID after you authorize.

We never see, receive, or store your Steam password, email address, two-factor codes, or any session tokens. The same applies to EOS verification — the in-game code only confirms you control the EOS ID; it carries no account credentials.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your Steam IDs are included in whitelist files that are served to your community's Squad game server via a secure, unique URL.

5. Data Storage

Your data is stored in a PostgreSQL database on our managed cloud server infrastructure. Session data is stored in encrypted cookies. We use HTTPS for all communications.

6. Data Retention

Active whitelist entries are retained as long as you maintain your Discord role. Inactive entries are automatically purged after the retention period configured by your server administrator (default 90 days).

7. Your Rights

You can:

• View your stored data via the My Profile page
• Edit or delete your Steam/EOS IDs at any time
• Request complete data deletion by contacting your server admin
• Revoke Discord OAuth2 access in your Discord settings

8. Cookies

SquadCP uses one strictly-necessary cookie — an encrypted session cookie (wl_session) that keeps you signed in. It expires after 24 hours and is never shared.

We do not use advertising, analytics, tracking, or fingerprinting cookies. Because the only cookie we set is essential to the service you asked for, no cookie-consent banner is required — there is nothing optional to consent to. If that ever changes, we will ask for your consent before setting any non-essential cookie.

9. Donations & Payments

SquadCP may offer an optional way to make a voluntary donationin support of the project's development. This is never required and provides no product, service, or whitelist benefit.

If you choose to donate, payment is processed entirely by a third-party donation provider (such as Ko-fi) on their own platform. We neverreceive or store your card number, bank details, or any other payment credentials — only, at most, the provider's confirmation that a contribution was made.

10. Contact

For privacy concerns, contact us via the SquadCP Discord community.