Privacy

Asura is a player-built community for The Isle. We try to collect as little as possible, keep what we collect for as short as possible, and never sell any of it. This page explains what that means in practice.

What we collect

When you join the Discord and use our tools (Nexus, the in-game shop, the live map), we store:

  • Your Discord ID. Needed to know which account is linked to which in-game progress, supporter status, points balance, and ban status. Synced from Discord through the Sentinel admin service.
  • Your linked Steam IDs. Up to 10 per account. Used to recognize you in-game so the points and storage match.
  • Server activity. Login/logout times and joins/leaves on our Evrima servers. Used to run the economy (you earn 100 Asura Points per minute online) and to investigate cheating.
  • Asura Points ledger. Every shop, sell, casino, and quest transaction. Kept for the lifetime of the project so we can recover from rollbacks.
  • Stored dinos. When you save a dino through Nexus, we keep the save file until you restore it.
  • Quest progress and inventory. What dinos you have, which quests are open or completed.

What we do not collect

  • No Google Analytics, no Meta Pixel, no third-party advertising trackers.
  • No browser fingerprinting.
  • No IP-address logging at the application layer. Server access logs at the proxy retain IPs for 90 days for fraud and DDoS investigation, then they’re rotated out.
  • No mailing list, no email collection unless you opt in.

How long we keep it

  • Server access logs. 90 days, then deleted.
  • Discord ID + linked accounts. As long as you’re a member of the Asura Discord. If you leave or are removed, the linked record is marked inactive. You can request deletion through a Discord ticket.
  • Stored dinos. Until you restore them or until the server is wiped.
  • Asura Points ledger. Lifetime of the project for audit reasons.
  • Quest log. Used for ticket investigations (missed rewards, broken quests). Kept indefinitely.

Cookies

Strictly necessary only. We use a session cookie to keep you logged into Nexus and a cache cookie for preferences. We don’t show a cookie banner because we don’t set non-essential cookies. The EU “strictly necessary” carve-out applies.

Discord OAuth scopes

When you link your Nexus account, the OAuth flow asks for:

  • identify. To read your Discord ID and username.
  • guilds.members.read (through Sentinel). To verify you’re an Asura member and what supporter tier you hold.

We do not request email, connections, or any guild-management scope.

Steam linking

We use the official Steam OpenID flow. We only receive your public SteamID64. We never get access to your password, your library, or any private data.

The 3-plus year members wall on the homepage

The homepage shows avatars of long-time members as a longevity proof. Only the avatar image and the join year are shown, never your username, Discord ID, or any contact info. Avatars are served through our own proxy so Discord can’t track who visits the page. Legal basis: legitimate interest, community proof for new visitors. Opt out at any time by opening a Discord ticket. We exclude your avatar from the wall within 24 hours.

How to delete your data

Open a Discord ticket and ask. Per GDPR, we have 30 days to comply. We will:

  1. Confirm your identity through Discord.
  2. Delete your linked account record, points balance, and stored dinos.
  3. Anonymize any historical ledger entries that are needed for audit.
  4. Confirm completion in the ticket.

Leaving the Discord does not delete your data on its own. You have to ask explicitly.

Where we run

The site, Sentinel, and Nexus run on a Hetzner box in Germany (EU). Backups are stored on the same provider. There is no Cloudflare or third-party CDN routing your traffic by default.

Changes to this page

If we change what we collect or how long we keep it, the date at the top of this page changes and we post a #announcements notice on Discord 7 days before it takes effect.

Questions

Open a ticket on the Asura Discord. It’s the single contact channel. There’s no email. Everything goes through Discord so the trail is auditable.

See also: Terms · Rules.

Last updated: