Legal
Privacy Policy.
This page says what Vivid collects, why, and what happens to it. The short version: we keep what we need to run keys, sign-in, cloud configs, and support, and we do not sell any of it.
01What we collect
- Discord identity. Your Discord user ID, username, and avatar, received when you redeem a key or open a ticket through the bot. The ID is the primary key for your account.
- Keys and entitlements. Which keys you redeemed, the game they carry, and when they were redeemed.
- Sign-in and session data. Session tokens, sign-in timestamps, the IP address a request came from, and a hardware-derived identifier used to bind a session to your machine and to detect account sharing.
- Cloud configs. The configs you save, including per-place configs the client creates automatically. A published config is public together with your Discord name and avatar.
- Support tickets. Everything written in a ticket, plus any config data the assistant reads or edits while helping you.
- Diagnostics. Crash reports and error logs from the client, which can include the game version, the client version, your Windows version, and a stack trace. They do not include your game chat or your files.
02What we do not collect
We do not read your files, browser history, clipboard, or messages. The keystroke overlay shows keys on screen and does not record them. We do not collect payment card numbers; if keys are sold, payment is handled by a payment provider and we receive only a confirmation and a reference.
03Why we use it
- To issue and redeem keys, and to decide which game your account may run.
- To sign you in and keep your session tied to your machine.
- To store and sync your configs and to show published configs to other users.
- To answer support tickets, including automated help that edits your config on request.
- To find and fix crashes and bugs.
- To prevent abuse: key sharing, credential stuffing, and attacks on our servers.
04Who sees it
Nobody outside the project except the services we run on. Those are Discord, which carries the bot and the tickets; the hosting provider that runs our servers; and, if keys are sold, the payment provider. Each of them has its own privacy policy. We do not sell data and we do not share it with advertisers.
Published configs are visible to every Vivid user by design. If you do not want your name and avatar shown, do not publish.
05How long we keep it
- Account, key, and entitlement records: for as long as you have an account, plus a short period afterwards to handle disputes.
- Sign-in logs and IP addresses: up to 90 days, unless needed for an abuse investigation.
- Cloud configs: until you delete them or your account is deleted.
- Tickets: until closed, then archived for up to 12 months.
- Crash reports: up to 12 months.
06Security
Config data is signed so the client rejects anything that was tampered with in transit, and it is stored encrypted at rest. Secrets are never sent to the client in plain form. No system is perfectly secure; if we learn of a breach that affects you we will say so in the Discord.
07Your choices
- You can delete any of your cloud configs from the menu at any time.
- You can unpublish a published config from the menu.
- You can ask for a copy of the data we hold about you, or ask us to delete your account and everything tied to it, by opening a ticket. Deleting your account ends any remaining access.
08Children
Vivid is not directed at children under 13, and we do not knowingly keep data about them. If you believe a child has an account, open a ticket and we will remove it.
09Changes
If this policy changes, the effective date at the top changes, and material changes are announced in the Discord.
10Contact
Privacy questions go through a ticket in the Discord.