Privacy and data
Know what CitadelOps uses.
A plain-language overview of the information Hosted Ops needs and the boundaries around optional analytics.
What Hosted Ops needs
CitadelOps uses your sign-in, hosted account settings, credit activity, and the game-session data needed to run the tasks you enable. A successful sign-in creates a secure, HttpOnly CitadelOps session cookie valid for up to seven days on the same browser. Do not post passwords, session data, game logins, or payment details in Discord.
Analytics stays off until you allow it
With your permission, Google Analytics uses analytics cookies to measure visits and broad, predefined interactions across CitadelOps.
What CitadelOps does not send
CitadelOps does not send usernames, email addresses, account, player, castle, operation, or receipt IDs, credentials, game payloads, command details, error text, or private gameplay content to Google Analytics.
For manually tagged campaigns, Analytics may receive only validated source, medium, and campaign labels; advertising click IDs and every other URL query value are excluded.
Campaign measurement uses the same choice
When you allow analytics and campaign measurement, CitadelOps keeps a first-party campaign record in a secure CitadelOps cookie: the validated campaign labels, the landing page, and a Google click identifier (gclid, gbraid or wbraid) when the ad link carried one.
Only verified outcomes (a verified Discord join or a first real payment) are reported to Google Ads, with that click identifier and never your e-mail, username, account or Discord details. Ad personalization stays off, and nothing is used for remarketing or audiences.
Discord membership verification
Verifying your Discord membership is optional and separate from the analytics choice. It stores your Discord account ID and your membership status and join date in the official server with your CitadelOps account, visible to CitadelOps operators only and never sent to Google or analytics.
The Discord account ID is deleted when your CitadelOps account is deleted and removed after 13 months of inactivity for visitors without an account. Ask on Discord or support to have it removed earlier.
Free trial record
To give each game account one trial, we keep a trial record: the game world and player ID, when the trial started and ended, how it ended, your CitadelOps user ID, and when you confirmed giving up a trial, if you did. It never holds your game login or password. We keep it indefinitely, also after you delete the hosted account or your CitadelOps account, because its purpose is to prevent repeat trials.
Tell us what happened, not your secrets
Join the official CitadelOps Discord for help and questions. Never post a password, passkey secret, session cookie, full game login, or payment details.