Privacy Policy

1. Information we collect

• Order information: service type, server, level, goals and additional notes.
• Contact information: WeChat, QQ, phone number or other contact details you choose to provide.
• Transaction information: order number, amount, currency, payment status and PayPal transaction identifiers. Card details and payment passwords are handled by the payment provider.
• Technical and security information: necessary access logs, timestamps and error records used to prevent abuse.

2. How we use information

• Confirm requirements, provide quotes, arrange services and deliver results.
• Handle payments, refunds, disputes and customer support.
• Prevent fraud, protect account security and meet legal obligations.
• Improve website reliability and the ordering process.

3. Sharing information

• We share only the minimum information necessary with service providers fulfilling your order.
• Payment providers such as PayPal process payment information under their own privacy policies.
• We do not sell your personal information, except where required by law, necessary to protect lawful rights, or necessary to complete a service you have expressly authorized.

4. Retention and security

• Order and transaction records are retained as needed for service delivery, disputes, tax and compliance purposes, then deleted or de-identified.
• Account credentials should only be shared temporarily through an agreed channel when necessary and with your confirmation. Do not enter them in public forms.
• No internet transmission can be guaranteed completely secure. If you notice unusual activity, contact support immediately and change your game account password.

5. Your choices

You may request access to, correction of or deletion of personal information where permitted by law through your original order support channel. You may also withdraw unnecessary authorization for an order that has not yet been carried out. Some transaction records may need to be retained for compliance, fraud prevention or dispute resolution.

6. Contact

Submit privacy requests through the support channel used for your order and provide your order number so we can verify your identity. We will not ask for payment passwords or verification codes in chat.

You may also send player-account or privacy questions to MapleSquadSupport@gmail.com. Do not include passwords, verification codes or reset links in your email.

7. Player accounts and social sign-in

• When you use player-account features, we process your player ID, display name, email address and email-verification status. Social sign-in also provides the identity provider's account ID and authorized basic profile information, which we use to identify your account, link sign-in methods and provide account support.
• Discord sign-in requests only identify (basic profile) and email permissions. It does not read chat messages or server lists, or use this authorization to join servers automatically. You enter your third-party password only with that provider; it is not sent to our site. OAuth authorization tokens used for sign-in are stored encrypted on the server.
• The US site at us.maplesquad.com and Hong Kong site at cn.maplesquad.com share player accounts. maplesquad.com is the region-selection gateway. Account information and login sessions are stored by the Hong Kong identity service. The US site verifies login sessions with that service over HTTPS.
• We use login cookies shared between the two sites to maintain and verify your session. Production login cookies use Secure and HttpOnly settings and are not readable by page scripts.
• Orders submitted while signed in are associated with your player ID and record your display name and email at submission. This supports purchase-history queries across both sites and account-related support in the admin area. Older guest orders are not automatically assigned to an account just because an email matches.
• Registration-verification and password-reset emails are sent through Resend. We provide the recipient email address and email content, including time-limited verification or reset links, to that service for delivery.