Privacy

What Torii knows about you, why it knows it, and who else gets to see it.

What we hold

To have an account at all: your username, your email address, your password as a bcrypt hash and never the password itself, and the country your account is flagged with.

Because you play: your scores, your replays, your pp and your ranking stats, your playtime, your medals, your favourites, your friends and the maps you have played. That is the entire point of a server, so none of it is optional.

Because you filled it in: your profile page, your avatar and banner, your Discord name, your links and the other optional fields. All of that is public. Do not put anything on your profile you would not want on the open internet.

If you linked your account to ToriiHalo, we store which Discord account goes with which Torii account.

If you donated, we store what the payment provider hands us: the amount, the currency, the display name and message you left, and the email address on the payment. That is how supporter months end up on the right account.

The web server logs connections, your IP address included, the way every web server does. Those logs exist to keep the thing running and are not part of your profile.

What is public

Your profile, your scores, your replays, your stats and your rank, both on the site and in the client. Anyone can watch a replay you set. Your email address, your password hash and your donation details are not public.

Who else gets it

• Discord, if you link your account or use ToriiHalo. Once it is on Discord, Discord's own rules apply to it.
• Ko-fi, if you donate. They run the payment, and we never see your card.
• o!rdr, if you ask for a replay render. Your replay and the map go to their renderers and the finished video lives on their site.
• Cloudflare, whose bot check runs on the registration form.

Nothing is sold to anybody, and there are no ad or analytics trackers on the site.

Cookies

A session cookie so you stay logged in, plus whatever the bot check sets on the registration form. That is the whole list.

Getting things deleted

There is no self-service delete button. Ask in the Discord and we will remove or anonymise the account: the profile, the email address, the profile text, the media. Scores are the hard part, because a leaderboard with holes in it is a broken leaderboard, so tell us what you want gone and we will tell you what is actually possible.

Asking about your data

Anything about your own data, a copy of it included, goes through the Discord. A person answers it, so give it a few days.