msfwar.com

Privacy Policy

Last updated: September 25, 2026

MSFWAR is operated by Chandler Prisk (ChandyMan), Tennessee, United States, for the MARVEL Strike Force community. For privacy questions, email chandlerprisk@gmail.com. This policy covers the website and its connected Discord bot. The information we process depends on the features you use. Browsing public counters does not require connecting your game account.

Game accounts and saved information

When you connect your MSF account through Scopely, we receive authorization tokens and account information made available by the official MSF API, such as your account identifier, in-game name, roster, squads, and alliance information where available. We use this information to display your roster, personalize counter and planner features, and support the account features you request. You sign in with Scopely; MSFWAR does not ask for your Scopely password.

The browser stores login information and settings locally. Our backend also processes authentication tokens and stores session records, including refresh tokens and cached access tokens, to renew access. Tokens are sent to our backend when needed to authorize requests and to Scopely for authorized API access. They are not confined to your browser.

Saved defenses, planner or account settings, and shared configurations can be stored on our servers and linked to your account. Other preferences, cached game data, and custom choices are stored in your browser. A generated share code lets anyone who has that code access the information it represents.

Discord account linking

If you use /msfwar-link, we store a connection between your Discord user ID and an MSF session, together with account identifiers, an in-game name, and the player ID you supply. The bot uses this link to provide roster-aware commands. Linking is optional. Discord receives your bot interactions and any content you choose to post there.

Community posts, submissions, and messages

Recruiting boards and player/alliance cards: we store the names, Discord contact details, player IDs, powers, requirements, images, and other information you submit. Published listings and cards can be seen by other visitors.
Counters, notes, and votes: we store submitted lineups, powers, battle results, notes, screenshots or image links, display names, timestamps, and account identifiers where needed for attribution, ownership, and voting. Approved counter details, posted community notes, and published event submissions are visible to visitors. Individual voter identifiers are used internally; the displayed totals summarize feedback.
Counter-submission screenshots: the review queue makes these available to moderators and authorized contributors; the public approved-counter feed does not include those evidence-image links. The images are hosted by ImgBB, and someone with an image's direct URL may be able to view it. Do not upload information you need to keep confidential.
Direct messages: we store message contents, sender and recipient identifiers, names, timestamps, conversation context, and read/block state to deliver the inbox. Messages are available to conversation participants. Reporting a conversation sends the reason and up to its ten most recent messages to the moderation queue. These messages are not end-to-end encrypted.
Contact forms and reports: information you send is stored for the site team to read and respond to or investigate. Include only the information needed for your request.

Some features work without an MSF login. For these, your browser holds a generated identifier and secret that allow it to retrieve messages or manage a listing; the backend keeps an identifier and a hash used to verify control. Clearing browser storage can remove your ability to manage those records, without deleting the records themselves.

Nitro advertising and privacy choices

MSFWAR is preparing to use Nitro (NitroPay, part of Overwolf) to provide advertising. Nitro ads are not enabled during the layout-preview stage. When enabled, Nitro and its advertising partners may process IP addresses, browser and device information, identifiers, approximate location, and ad interactions to deliver, measure, prevent fraud in, and personalize advertising where permitted. See Nitro’s Privacy Policy for its practices and contact information.

When Nitro advertising is enabled, its regional consent platform provides a way to review or change advertising consent. Where applicable, use the consent preferences and “Do Not Sell My Personal Information” links supplied on this page and in the site footer. Consent may be withdrawn through those controls. You may also contact us using the contact page to request access, correction, or deletion of information held by MSFWAR. Browser privacy controls can restrict storage and tracking.

MSFWAR does not pass your connected game account, roster, private messages, email address, or hashed email address to Nitro as first-party advertising data.

Usage information, cookies, and advertising

MSFWAR uses browser storage for preferences, sign-in, cached data, saved plans, and feature state. Hosting and service providers process network information such as IP addresses, browser information, requested URLs, and request times to deliver and protect the service. Some submission limits use an IP address temporarily to reduce abuse.

The site loads Google Analytics and a Plausible analytics script served through Tiiny. These services process visit and interaction information under their own practices. Our defense-popularity feature sends the game mode, searched defense, and a generated event identifier to an MSFWAR-operated endpoint to count searches. That request does not include your MSF login token or roster in its payload.

The site includes Google AdSense code. When ads are served, Google and other advertising vendors may use cookies, web beacons, IP addresses, or other identifiers to collect information and serve ads, including ads based on prior visits to this and other websites. See How Google uses information from sites and apps that use its services and Google's Privacy Policy.

You can manage Google's ad personalization through My Ad Center, review participating vendors' choices at YourAdChoices, and use your browser's cookie and site-storage controls. Blocking cookies or clearing storage may affect site features and does not by itself stop every network request.

Services that receive information

Cloudflare hosts the website and backend storage and processes requests. Scopely supplies authentication and game APIs. Google services provide analytics, advertising, fonts, source spreadsheets, and YouTube content. Tiiny supplies the analytics script noted above. ImgBB receives images uploaded through the site's image-upload features. Embedded videos and externally hosted images or fonts can send request information to their providers when loaded. Discord and Buy Me a Coffee receive information when you use their linked services. These providers may process data in countries other than your own.

We use stored information to provide requested features, maintain the site, and investigate abuse. Published content is public; messages, reports, and review evidence have the access described above. Site administrators and service providers may access stored information to operate and support the service. Third-party services apply their own privacy policies, including Cloudflare, Scopely, Discord, and ImgBB.

How long information stays

Login-renewal sessions and Discord account links have a 90-day storage expiry that can be renewed when used or refreshed.
Defense share codes expire after seven days. One-time Discord linking requests expire after five minutes.
Recruiting listings stop appearing after 60 days unless renewed. Disappearing from a public listing is not a promise that every stored copy has been erased.
Saved settings, messages, notes, votes, and moderation records do not all have a fixed automatic deletion date. They can remain until edited, removed, replaced, or trimmed by the feature's storage limits. Browser copies remain until you or your browser clear them. External image hosts, analytics services, and other providers have their own retention practices.

MSFWAR Intel Monthly Debrief

When an eligible member enables Intel, a separate MSF connection allows automatic roster checks. Intel stores dated roster snapshots, player-card totals, and completed signed-in counter searches (mode, team, and time) to create private monthly progress reports. Collection begins after enrollment; earlier personal history is not reconstructed. Automatic checks use the first of each month in US Eastern time and retry when the game service is unavailable.

Intel connection credentials stay on the server. Reports are available only to the connected, eligible account. Downloading or sharing an image is your choice, and you can hide your commander name. Stopping Intel removes its saved connection credentials and stops future checks and search tracking; existing history is retained. Use the removal contact below to request deletion of saved Intel history. Optional Member Benefits alerts send a private message to your website inbox when a new report is ready or watched counters change. Messages are available through your signed-in MSFWAR account. You choose which alerts to enable and can turn them off in Member Benefits. Watchlist choices, private website messages, read status, and delivery records are stored to deliver these alerts; reports remain private behind sign-in. Member Benefits ads are off by default. Signed-in members can save an ad preference with their account; admins without a connected game account save this choice on their device. Ads are not requested while the member preference is off.

Paid memberships and Stripe

The operator responsible for MSFWAR's handling of membership data is Chandler Prisk, Tennessee, United States; contact chandlerprisk@gmail.com. When you subscribe, Stripe and Sold through Link, LLC collect the billing contact and payment information needed to process your payment, calculate and administer applicable taxes, send receipts, prevent fraud, manage recurring billing, and provide transaction support. Depending on payment and tax requirements, this can include your name, email address, billing address, payment details, IP address, and transaction/device information. See Stripe's Privacy Policy and Link's Privacy Policy. If you choose a Link account, Link also processes information for that account under its own policy. MSFWAR does not receive or store full card numbers or card security codes.

MSFWAR stores a link between your server-verified MSF account identifier and a randomly generated billing reference, Stripe customer/subscription/checkout identifiers, your selected recurring amount, subscription and cancellation status, paid-through date, and billing update records. We record the accepted terms version, amount, checkout reference, and acceptance time. Stripe receives the random billing reference and terms version so we can reconcile payments; we do not send your roster, counter searches, or private website messages to Stripe. Authorized support staff can view necessary billing information in Stripe when responding to a request or resolving a payment issue.

We use this information to perform the membership agreement, grant or end access, manage payments and support, meet applicable accounting/legal obligations, and prevent duplicate payments or abuse. Where data-protection law requires a lawful basis, these uses rely on contract performance, legal obligations, or our legitimate interests in secure service operation, as appropriate. Optional Intel enrollment and alert choices remain separate. A subscription does not enroll you in marketing emails.

Cloudflare hosts MSFWAR's account and billing-link records. Stripe and other infrastructure providers may process information in the United States and other countries under their published privacy practices and applicable safeguards. Billing records, consent records, and event identifiers can remain after cancellation as needed for accounting, refunds, disputes, fraud prevention, and legal requirements; they are not automatically deleted when benefits end. We review deletion requests individually and retain only information needed for these purposes. Stripe maintains its own records under its policy.

Connecting Discord is optional. Discord authorizes access to your basic profile; we store your Discord user ID, display name, linked MSF account, and membership role synchronization status to grant and remove the MSFWAR Member role in our server. We do not request your Discord password, email, or private messages. Disconnecting removes this membership role and account link without canceling your subscription. Public search recognition is separately opt-in: we store your chosen public name and display preference, and only active participating members are eligible to appear. You can turn recognition off on your membership page.

You can ask for access, correction, deletion, or other rights available under your local law, including restriction, objection, or portability where applicable, by emailing support. We may verify control of the account. You may also complain to your applicable data-protection authority. Canceling payment and deleting personal information are separate actions: Manage billing stops future renewals; contact support about deletion. If a deletion request also seeks closure of an active membership, we will arrange cancellation as part of that request.

Disconnecting, corrections, and removal

Use the site's disconnect control to remove its browser login, and /msfwar-unlink to remove the bot's account link and its linked session. Disconnecting the browser or clearing site storage does not automatically delete server-side sessions, messages, submissions, saved data, or uploaded images.

Where provided, use the edit or delete controls for your own listings and community notes. To request access to, correction of, or removal of other information, contact ChandyMan through the Contact page or MSFWAR Discord. Identify the relevant account, listing, message, or submission so it can be located. We may need to verify that you control the account or record. Never send a password, authentication token, or private account-link URL.

Removing content from MSFWAR may not remove copies another person saved or content retained by an external provider. Contact that provider where a separate removal request is needed.