Madmoo
Privacy policy
I keep as little about you as I can, and I'll tell you exactly what that is. You don't need an account to use the guides and tools.
Last updated 8 November 2026
Who I am
Madmoo is run by me, Moo, one person, as a hobby. I'm responsible for the personal data the site keeps. For questions or requests, email privacy@madmoo.gg.
What I keep
Without an account: nothing that identifies you. The site keeps your theme and your tools' data (squads, research levels and so on) in your own browser, and clears the tools' data after 2 hours of not using them. It isn't sent to me.
With an account: your email address. Your gamer name, if you give one, and whether you want it shown. The social logins you've linked (which provider, and your id there; never a password). When you signed up and signed in, how, and a shortened network address (the last part removed). Which version of the terms and this policy you agreed to, and when.
Sign-in codes: while a code is waiting to be used, I keep a scrambled copy of it and of your email address. Both are deleted within a day.
If you donate: a record of each donation: the amount, the date, what it came to in Australian dollars, your VIP points, and Stripe's references for the payment. Never your card details.
If you're a patron: your tools' data (your sanctuaries with the server and player name you gave each, squads, heroes, research, alliance research, Raven, curios, VIP level and statues, Alliance Duel settings and theme), saved with your account so it follows you to every device.
If you post or vote: the topics and replies you write (when, and when you edited them), the posts you report and why, and your votes: poll and tier list votes, and "Was this helpful?" answers you give while signed in.
What's public
Patrons' gamer names and VIP points are shown on the site: in thank-yous and on the VIP points leaderboard. You can turn that off on your account page; then the site says "A generous patron" instead (your points still count). Your email address is never shown.
Topics and replies you post are public: anyone can read them and search engines can list them. They show your gamer name (or "A generous patron" if you hide it) and a Patron badge. Votes are only ever shown as totals.
Why I keep it
To run your account and sign you in: you asked for an account, and I can't give you one without these.
To keep the site safe: stopping abuse and spotting attempts to break into accounts. That's my legitimate interest in a safe site.
To keep a record of what you agreed to, and of donations, as the law expects (bookkeeping and tax).
I don't sell your data, use it for advertising, or track you across other sites.
Emails
I only email you sign-in codes and important messages about your account. No newsletters unless you ask for them, and my emails carry no tracking.
Who else handles it
Microsoft Azure hosts the site and its database and sends its emails (Azure Communication Services), in Australia. Azure Application Insights keeps the site's technical logs: pages asked for, errors, timings and a reference for each request. I keep emails, names and full network addresses out of those logs.
Stripe handles payments if you donate, under its own privacy policy. It receives your email address and payment details, and keeps its own record of the payment.
Discord, Google, Facebook and Apple, only if you choose to sign in with one: they tell me your id there and your email address, under their own privacy policies.
I don't share your data with anyone else, unless the law makes me.
Where it's kept
In Microsoft's data centres in Australia. If you use a social login or Stripe, those companies may handle your data in other countries.
How long I keep it
Your account: until you delete it. Records of what you agreed to: as long as your account exists.
Sign-in history: 12 months. Sign-in codes: deleted within a day. Accounts started but never used: deleted after 30 days.
Technical logs: 30 days. Database backups roll off after 7 days.
To stop people flooding the sign-in page or guessing codes, the site remembers how often a network address tried to sign in. That's only held in the site's memory, never saved, and forgotten within a day.
Records of donations: as long as the law requires for bookkeeping and tax (in Australia, 5 years). If you delete your account, I keep the money side (amount, date, Stripe's references) without your name, email or account.
Patrons' saved tools data: until you delete your account. Everyone else's stays in their own browser and is cleared after 2 hours of not using the tools.
Posts and replies: until you delete them, or I remove them for breaking the rules (removed posts stay in the database, hidden, so a mistake can be undone). If you delete your account they stay on the site without your name, as "A former member". Reports and votes stay too, without your name.
"Was this helpful?" answers from visitors: kept with a scrambled code made from the day and your network address (never the address itself), so one person can't vote again and again. The code is cleared the next day.
Your rights
You can see and download everything I keep about you (Download my data on your account page), correct your gamer name and email, and take your data elsewhere (the download is a JSON file any program can read).
You can delete your account at any time. It's erased straight away; anything you posted can stay, without your name, and records of donations stay without your name for bookkeeping.
You can object to how I use your data, or ask me anything about it: email privacy@madmoo.gg. I'll answer within a month.
If you're not happy with my answer, you can complain to a data protection authority: in Australia, the Office of the Australian Information Commissioner (OAIC); in the EU or UK, the supervisory authority where you live.
Children
Anyone can read the guides. Accounts are for people aged 13 and over, or older where the law says so (16 in some countries).
Keeping it safe
Signing in uses one-time codes, not passwords, so there's no password to leak. Codes are stored scrambled, expire after 10 minutes and stop working after 5 wrong tries. Everything travels over HTTPS.
Changes to this policy
When this policy changes in a way that matters, members are asked to read it and agree again. The date at the top says when it last changed.
Questions? Email me at privacy@madmoo.gg.