Privacy
No login, no record. Simple as that - here's exactly what happens when you do connect.
What gets stored
Without login - nothing. No profile, no tracking, no cookies beyond the session.
With Discord login - your Discord ID, display name, avatar hash, and a session token. That's it.
Colosseum team actions store memberships, invites, and roles on the server.
Public IOSoccer data is cached server-side to speed up pages.
What we never touch
No Discord password - ever. OAuth only confirms you are who you say you are.
No Steam credentials, payment info, or private data of any kind.
No private Discord messages are read during login or at any other point.
No third-party analytics or ad trackers added intentionally.
How cookies work here
1
You click "Login with Discord" - Discord confirms your identity through OAuth without us ever seeing your password.
2
A short-lived OAuth state cookie is set for the duration of the redirect to prevent tampering. It expires immediately after.
3
After a successful login, a secure HTTP-only session cookie is set. JavaScript on the page cannot read it.
4
Logout clears the cookie and deletes the session record from the server. Nothing lingers.
Stats, names, and match data
This is public IOSoccer data
Player names, ratings, match logs, lineups, goals, and cards are sourced from public IOSoccer endpoints - not collected by us.
Player names may link to Steam profiles when a Steam ID is present in the data.
If the source is wrong or delayed, what you see here is too. Data refreshes when the upstream source does.