Citadel

Privacy Policy

Last updated: April 23, 2026

1. Information We Collect

When you use Citadel DayZ Manager, we collect:

  • Account data — Email address and a bcrypt-hashed password. We never store plaintext passwords.
  • Server data — Citadel DayZ Manager runs locally on your machine. Server metrics, player connections, chat logs, kill events and any other gameplay data are stored in your local install and are never sent to our servers.
  • Usage data — Minimal telemetry on licence check-ins (account ID, version, IP used for licence verification) to prevent abuse.
  • Billing data — Payments are processed by Stripe; subscribers from before our migration may still be billed via Paddle until they renew. The payment processor holds your card details — we receive only the transaction ID, plan, and your email.

2. How We Use Your Data

We use collected data to:

  • Provide and maintain the Citadel DayZ Manager service
  • Display server metrics, player data, and dashboards
  • Process subscriptions and billing
  • Send service-related notifications (outages, updates)
  • Improve the platform based on usage patterns

3. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe — Payment processing, recurring billing, and chargeback handling for new and re-subscribing customers
  • Paddle — Continues to process recurring billing for subscribers who signed up before our migration to Stripe, until they cancel or renew
  • Resend — For transactional email delivery (account confirmation, password reset, billing notices)
  • Law enforcement — Only when required by law

4. Data Retention

Server metrics, logs, player profiles, chat history, and backups are stored locally on your machine and remain under your sole control — we cannot see them. Account data (email + hashed password + licence state) is retained until you delete your account or request deletion.

5. Data Security

We protect your account data with encryption in transit (TLS), bcrypt password hashing, signed JWT licence tokens (RS256), and rate-limited authentication endpoints. Your server data never leaves your machine and is therefore protected by your own system security.

6. Cookies

Citadel DayZ Manager uses localStorage for authentication tokens. We do not use third-party tracking cookies or advertising pixels. No data is shared with advertising networks.

7. Your Rights

You can:

  • Access your account data through the dashboard
  • Export your server data at any time — it lives on your machine
  • Delete your account and associated data by contacting support
  • Opt out of non-essential communications

8. Third-Party Services

Citadel DayZ Manager integrates with Stripe (billing for new subscribers), Paddle (legacy billing for pre-migration subscribers), Resend (email), and optionally Discord (your own bot, configured by you). Each provider has its own privacy policy; we encourage you to review them.

9. Children

Citadel DayZ Manager is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions, reach us on Discord.