Privacy Policy

Ascend (also referred to as Ascend Hub or Play Ascend) is operated by Play Ascend, Inc., a Delaware corporation located at 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. Our website is play-ascend.com.

For the purposes of data-protection law, Play Ascend is the controller (or, under U.S. state laws, the business) for personal data about our users (account details, tracker queries, shop orders, matchmaking profiles, rewards activity). Play Ascend acts as a processor (or service provider) when a community admin uses Ascend AI and uploads markdown knowledge-base content to a server they manage — in that case, the community admin is the controller and Ascend processes that content on their behalf.

We only collect data that's necessary to operate the products you use. The full list, broken down by surface:

Account and identity

When you sign in with Discord:

• Your Discord user ID, username, display name, avatar URL, and email (provided by Discord with your consent).
• Optionally, your Riot ID (game handle + region) if you link it to use the VALORANT tracker.

VALORANT tracker

When you look up an account:

• The Riot ID and region you query.
• Publicly-available match data we fetch on your behalf from a third-party VALORANT data provider — this is data Riot Games already publishes about your account.

Shop

When you place an order:

• The game, denomination, and region of the item purchased.
• Order metadata (order ID, timestamps, delivery method).
• The delivery email or Discord identity we use to send the code.
• Payment data is handled by Stripe, our payment processor. We do not see or store your card details — Stripe sends us only the order/subscription confirmation and a customer reference.
• Gift-card codes are deleted from our systems within 24 hours of successful delivery.
• Tournament entry fees: the entry amount, the timestamp, the team and tournament, and your registration and refund status. Payment is handled by Stripe. We store the payment status and Stripe identifiers, not your card.

Ascend AI (Discord support bot)

When you install Ascend AI on a Discord server you manage:

• Your Discord server (guild) ID, server name, and member count.
• Your configured settings: allowed channels, bot personality, support-channel routing, daily question limits.
• The markdown knowledge-base documents you upload — you are the controller of this content; Ascend processes it on your behalf.
• Question / answer logs for the admin-dashboard analytics, retained for 30 days then aggregated.

Other surfaces

Matchmaking, marketplace, rewards, crosshairs, recruit, and esports collect only what's necessary to operate the feature: queue entries, listing content you write, ledger entries, crosshair codes you submit, queries you make.

Desktop app

If you use our downloadable desktop application, it works against the same account and Services as our website and collects the same categories of data described above for the surfaces you use — no new categories of personal data. In addition:

• Update checks. The app periodically contacts our update server to check whether a newer version is available. That request includes the app version and your operating system and processor architecture. It is not used to identify you.
• Diagnostics. The app may send limited technical and crash diagnostics so we can fix problems. These are the operational signals described under Security and fraud-prevention signals and Analytics, not new categories of data.

The app does not read data from your device beyond what is needed to run these features and the Services you use.

Analytics

We use Amplitude for product analytics with autocapture (page views, events, sessions). Session replay is sampled at 10%. Analytics are recorded only in production — never on local development. You can opt out via your browser's Do Not Track / Global Privacy Control signal, or by emailing info@play-ascend.com.

Security and fraud-prevention signals

To keep the platform fair and to prevent fraud, ban evasion, and multi-account abuse (for example, one person entering a tournament on several accounts), we record technical signals when you use the website: your IP address, an approximate country derived from it, your browser and operating system (from the user-agent), the network operator (ASN) of your connection, and a random first-party device identifier stored in the ascend_did cookie. We use these only for security, fraud prevention, and eligibility checks. We never use them for advertising. Your full IP address is kept for 90 days and then deleted; only a salted, one-way hash and a coarse network prefix are retained afterward, so we can still detect shared-account patterns without storing the address itself. Because these signals can overlap for people on the same home, campus, or VPN network, they are used as a review aid and never as the sole basis for an automated penalty.

Cookies and storage

We use a small set of cookies and local-storage keys, all strictly necessary or analytics:

Cookie / key	Purpose	Lifetime
sb-* (Supabase Auth)	Authentication session	Until logout
auth-redirect-to	Remembers where to send you after OAuth	10 minutes
ascend_did	Random device id for security and fraud prevention (not advertising)	~13 months
ascend-ai:discord-guilds:v1	Caches your Discord server list for the picker	7 days
amp_* (Amplitude)	Product analytics	1 year

We do not use third-party advertising cookies or cross-site tracking pixels.

We use the data above to:

• Operate the products you actively use — sign you in, return tracker results, fulfil shop orders, run Ascend AI replies, run matchmaking lobbies.
• Verify your account and the Discord/Riot identities you link.
• Send transactional emails and Discord DMs — shop delivery confirmations, promo codes, account notices.
• Improve the product through aggregated analytics, debugging, and usage measurement.
• Detect abuse and protect the platform — rate limits, fraud signals, anti-spam in Ascend AI.
• Comply with applicable law, including tax-record retention and lawful requests from law enforcement.

We do not:

• Sell your personal data.
• Share your personal data for cross-context behavioral advertising ("targeted advertising").
• Use your data to train third-party AI models for our own benefit (community-admin-uploaded Ascend AI KB content is sent to model providers only to generate the reply that admin's server requested).
• Share your data with anyone other than the service providers listed in the next section.

We use a small set of third-party processors / service providers, each bound by contract to use the data only to provide their service to us. Each has its own privacy policy:

Processor	What we share	Where
Supabase	Database + auth records	AWS (ap-south-1, Mumbai)
Stripe	Payment + subscription billing	United States
Third-party VALORANT data provider	Riot ID + region for tracker queries	Outside the United States
Discord	OAuth identity + Ascend AI runtime	United States
Resend	Transactional email delivery	United States
Amplitude	Product analytics + 10%-sampled session replay	United States
OpenAI / Anthropic	Ascend AI prompts (KB + the user's question)	United States
AWS Amplify	Web hosting	AWS (ap-south-1, Mumbai)

We share data with these processors only as needed to operate the relevant feature. We do not sell data to data brokers or advertisers, and we may disclose data when required by law or to protect our rights, users, or the public.

If we ever need to add or change a processor, we'll update the table above. Material changes will be announced on our Discord and via an in-app banner before they take effect.

We keep data only for as long as we need it:

• Account data — until you ask us to delete it.
• Tracker queries — cached briefly to speed up repeat lookups, then discarded.
• Shop order records — retained for as long as required by applicable U.S. tax and accounting law (typically up to 7 years). Gift-card codes are deleted within 24 hours of delivery.
• Tournament entry-fee records: retained for as long as required by applicable U.S. tax and anti-fraud law (typically up to 7 years). When you delete your account we anonymize these records and keep the de-identified payment and refund history for that period, after which it is purged.
• Ascend Credits ledger & reward redemptions — the record of credits earned/spent and rewards redeemed is a financial and fraud-prevention record. When you delete your account we anonymize these records (we remove your account link and any shipping address) and keep the de-identified transaction history for up to 7 years to satisfy U.S. tax, accounting, and anti-fraud obligations, after which it is purged. Ascend Credits have no cash value and unredeemed credits are forfeited on account deletion.
• Ascend AI knowledge-base documents — until the community admin deletes them or uninstalls the bot.
• Ascend AI question/answer logs — 30 days for admin-dashboard analytics, then aggregated.
• Security signals (IP address) — your full IP address is deleted 90 days after it was last seen. A salted, irreversible hash and a coarse network prefix are retained after that for ongoing fraud and ban-evasion detection.
• Analytics events — per Amplitude's default retention.
• Account-deletion backups — 30 days after a deletion request, all backups complete the purge.

We apply the following baseline rights to all users worldwide, regardless of jurisdiction. U.S. state residents (see the next section) and users in the EEA/UK have additional rights described below.

Right	What you can do
Access	Request a copy of your personal data in a readable format.
Deletion	Request deletion of your account and personal data. Completed within 14 days of verification, with a 30-day backup-purge window.
Portability	Request an export of your data in a machine-readable format.
Correction	Ask us to correct inaccurate information.
Objection	Opt out of analytics, session replay, or any non-essential processing.
Withdrawal of consent	Disable specific data uses or revoke prior permissions.
Complaint	Lodge a complaint with your local data-protection regulator.

To exercise any of these rights, email info@play-ascend.com from the email address linked to your Ascend account, or use the contact page. We'll respond within 14 days where we can, and in all cases within the timeframe the applicable law requires.

Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we process your personal data on the basis of: contract (to provide the Services you request), legitimate interests (to secure, debug, and improve the platform), consent (for analytics and optional features, which you can withdraw at any time), and legal obligation (e.g., tax records).

Regulators

If you're not satisfied with how we've handled your request, you can complain to your local regulator:

• California, US — California Privacy Protection Agency, cppa.ca.gov; or the California Attorney General.
• Other US states — your state Attorney General.
• European Union — your country's Data Protection Authority.
• United Kingdom — Information Commissioner's Office, ico.org.uk.

This section describes rights available to residents of U.S. states with comprehensive privacy laws, including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others. The categories below describe our practices over the preceding 12 months.

Categories of personal information we collect

Category (CCPA)	Examples we collect
Identifiers	Discord user ID, username, display name, email, avatar URL, linked Riot ID, IP address.
Customer records	Name/handle and email associated with your account and orders.
Commercial information	Shop orders, items purchased, subscription and rewards activity.
Internet / network activity	Page views, events, sessions, and 10%-sampled session replay via Amplitude.
Geolocation	Coarse region only (e.g., your game region or country) — never precise location.
User content	Profile, marketplace listings, crosshair codes, scrim posts, Ascend AI KB documents.

We collect this information from you directly, from Discord (via OAuth when you sign in), from the third-party VALORANT data provider, and automatically through analytics. We use it for the purposes described in How we use your data above, and we disclose it for business purposes only to the service providers listed in Who we share data with.

No sale, no sharing, no targeted advertising

We do not sell your personal information, and we do not share it for cross-context behavioral advertising ("targeted advertising") — as those terms are defined under the CCPA and other state laws. We have not done so in the preceding 12 months, including for the personal information of any consumer we know to be under 16. We also do not use or disclose sensitive personal information for purposes that would give rise to the right to limit its use.

Your rights

• Know / Access — request the categories and specific pieces of personal information we have collected about you.
• Delete — request deletion of personal information we collected from you.
• Correct — request correction of inaccurate personal information.
• Portability — request a copy of your data in a portable, machine-readable format.
• Opt out — opt out of any sale, sharing, or targeted advertising, and of certain profiling. (We don't do these, but you may still exercise the right, and we honor opt-out preference signals such as Global Privacy Control.)
• Limit sensitive information — direct us to limit the use of sensitive personal information.
• Non-discrimination — we will not discriminate against you for exercising any of these rights.
• Appeal — if we decline your request, residents of states that provide an appeal right may appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General.

How to exercise these rights

Email info@play-ascend.com or use the contact page and select a privacy request. We will verify your request using the email address and account identifiers associated with your account before acting on it. You may use an authorized agent to submit a request on your behalf with proof of authorization. We respond to verifiable requests within the time required by law (generally 45 days, extendable once where permitted).

California "Shine the Light": California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

Play Ascend, Inc. is based in the United States, and we serve users worldwide. Our primary database and web hosting run on AWS in the ap-south-1 (Mumbai) region, and several of the processors listed above are located in the United States. This means your data may be processed in countries other than the one you live in, whose data laws may differ from yours. When we transfer your data internationally:

• We rely on appropriate safeguards (such as standard contractual clauses and transfer impact assessments) where required by the GDPR or UK GDPR for transfers out of the EEA / UK.
• Our processors are contractually bound to apply protections at least equivalent to those described in this policy.

We use industry-standard technical and organisational controls:

• TLS in transit, AES-256 at rest (provided by AWS / Supabase).
• Row-level security on the database, with explicit access policies on every table.
• Minimum-permission OAuth scopes everywhere — Ascend AI's Discord install requests only Embed Links + Stream, no moderation permissions.
• Service-role credentials rotated periodically; user-facing tokens scoped per session.
• Production-only analytics — no dev or staging data leaks to Amplitude.

No system is 100% secure. If we discover a personal-data breach, we'll notify affected users and regulators as required by law, aiming to notify affected users within 72 hours of confirming it.

Ascend is not directed at children under 13 years of age, and we do not knowingly collect personal data from anyone under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). If you become aware that a child under 13 has provided us personal data without parental consent, email info@play-ascend.com and we'll delete it promptly. We do not knowingly sell or share the personal information of consumers under 16.

We may update this policy from time to time. The "Updated" date at the top of this page always reflects the current version. Material changes — anything affecting your rights or expanding what we collect — will be announced at least 30 days in advance via:

• A banner on play-ascend.com
• An announcement in our Discord server
• An email to your account address, if we have one

By continuing to use Ascend after the effective date of a change, you accept the updated policy.

For privacy questions, data-subject or consumer requests, or anything else covered by this policy, email info@play-ascend.com or write to Play Ascend, Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. You can also reach us through the contact page — pick "privacy request" and your email opens with the right intake template.

We aim to respond within 14 days, and in all cases within the time the law requires.