Privacy

Asura is a player-built community for The Isle. We try to collect as little as possible, keep what we collect for as short as possible, and never sell any of it. This page explains what that means in practice.

What we collect

When you join the Discord and use our tools (Nexus, the in-game shop, the live map), we store:

  • Your Discord ID. Needed to know which account is linked to which in-game progress, supporter status, points balance, and ban status. Synced from Discord through the Sentinel admin service.
  • Your linked Steam IDs. Up to 10 per account. Used to recognize you in-game so the points and storage match.
  • Server activity. Login/logout times and joins/leaves on our Evrima servers, the dinosaur you play, kills and deaths, and your in-game position while you are online (it drives the live map, the HUD, quests and achievements, and is kept for a few days only). Used to run the economy (you earn 100 Asura Points per minute online) and to investigate cheating.
  • Asura Points ledger. Every shop, sell, casino, and quest transaction. Kept for the lifetime of the project so we can recover from rollbacks.
  • Stored dinos. When you save a dino through Nexus, we keep the save file until you restore it.
  • Quest progress and inventory. What dinos you have, which quests are open or completed.

What we do not collect

  • No Google Analytics, no Meta Pixel, no third-party advertising trackers, on this site or on Nexus.
  • No browser fingerprinting. This site counts clicks on its own “Join the Discord” and “Open Nexus” buttons with a first-party counter: it stores the button name, the time, the referring domain, and a hash built from your IP address, browser and the day, which cannot be reversed and changes every day. It sets no cookie and is deleted after 90 days.
  • No IP-address logging at the application layer. Server access logs at the proxy retain IPs for 90 days for fraud and DDoS investigation, then they’re rotated out.
  • No mailing list, no email collection unless you opt in.

How long we keep it

  • Server access logs. 90 days, then deleted.
  • Discord ID + linked accounts. As long as you’re a member of the Asura Discord. If you leave or are removed, the linked record is marked inactive. You can request deletion through a Discord ticket.
  • Stored dinos. Until you restore them or until the server is wiped.
  • Asura Points ledger. Lifetime of the project for audit reasons.
  • Quest log. Used for ticket investigations (missed rewards, broken quests). Kept indefinitely.

Cookies

Strictly necessary only. This site sets no cookie at all. Nexus sets one, the session cookie that keeps you signed in and remembers which server you selected: it lasts 30 days once you are signed in, and ends with the browser session if you are not. We don’t show a cookie banner because we don’t set non-essential cookies. The EU “strictly necessary” carve-out applies.

Discord OAuth scopes

When you link your Nexus account, the OAuth flow asks for:

  • identify. To read your Discord ID, username and avatar. It is the only scope Nexus asks for: your roles on the Asura server are read by our own Discord bot, not through an extra permission on your account.
  • guilds.members.read (through Sentinel, the staff-side admin service). To verify you’re an Asura member and what supporter tier you hold.

We do not request email, connections, or any guild-management scope.

Steam linking

We use the official Steam OpenID flow. We only receive your public SteamID64. We never get access to your password, your library, or any private data.

The 3-plus year members wall on the homepage

The homepage shows avatars of long-time members as a longevity proof. Only the avatar image and the join year are shown, never your username, Discord ID, or any contact info. Avatars are served through our own proxy so Discord can’t track who visits the page. Legal basis: legitimate interest, community proof for new visitors. Opt out at any time by opening a Discord ticket. We exclude your avatar from the wall within 24 hours.

How to delete your data

Open a Discord ticket and ask. Per GDPR, we have 30 days to comply. We will:

  1. Confirm your identity through Discord.
  2. Delete your linked account record, points balance, and stored dinos.
  3. Anonymize any historical ledger entries that are needed for audit.
  4. Confirm completion in the ticket.

Leaving the Discord does not delete your data on its own. You have to ask explicitly.

Where we run

The site, Sentinel, and Nexus run on servers hosted by OVH in the European Union. Backups are stored on the same provider. There is no Cloudflare or third-party CDN routing your traffic to this site or to Nexus. The Asura store (shop.asura-theisle.com) is a separate site owned and operated by Tebex Limited, under Tebex’s own privacy policy.

Changes to this page

If we change what we collect or how long we keep it, the date at the top of this page changes and we post a #announcements notice on Discord 7 days before it takes effect.

Questions

Open a ticket on the Asura Discord. It’s the channel we answer fastest on, and everything goes through it so the trail is auditable. For a privacy or legal request you can also write to contact.asurati@gmail.com. Who publishes Nexus, and who sells what, is on the Nexus legal notice.

See also: Terms · Rules.

Last updated: