Privacy Policy

Last updated: October 21, 2026

WCO MOB (“we”, “us”, or “our”) operates wcomob.com, its event registration system, and the WCO MOB plugin for ChatGPT. This policy explains what information we collect, why we collect it, and the choices you have.

Information we collect

  • Account information. Your name, email address, hashed password, avatar, member ID, role, and whether your email or two-factor authentication is configured.
  • Event registrations and orders. The name and email used for a registration, attendee names, the ticket type, the payment method selected, the payment reference, the order total, and the order status. Payments are made by Interac e-Transfer; we do not receive or store card numbers.
  • Content you submit. Posts, after-action reports, comments, contract ideas and comments, rules questions, loadout items and photos, organization and sponsor details, and other material you upload or write.
  • Plugin and MCP activity. When you connect the WCO MOB plugin through ChatGPT, you authorize it to access your account and the data your account can already view. We receive the OAuth client and token metadata needed to keep that connection working, and we log requests so we can secure and troubleshoot the service.
  • SMS conversations. When you text an event number, we store the sender and recipient phone numbers, message text, timestamps, message identifiers, and delivery status. Authorized admins can read conversations and send replies through the website or the ChatGPT plugin.
  • Technical information. IP address, browser and device information, pages requested, timestamps, and security logs generated when you use the site.

How we use information

  • Create and maintain your account and sign you in.
  • Process event registrations, issue tickets, reconcile payments, and manage attendance.
  • Run events, publish content, manage contracts and budgets, and coordinate with organizers, moderators, and assistants.
  • Send transactional messages, such as order confirmations, ticket changes, verification emails, and password resets.
  • Respond to event questions and coordinate with players and staff by SMS, including automated rules help when enabled.
  • Protect the site, detect abuse, enforce our terms, and comply with legal obligations.

When we share information

We do not sell personal information. We share it only with service providers and people who need it to operate the site:

  • Hosting and infrastructure. Laravel Cloud hosts the application, Cloudflare provides security and delivery, and cloud storage holds uploaded files and generated PDFs.
  • Email. Resend delivers transactional email.
  • SMS delivery. Twilio processes sender and recipient phone numbers and message content to receive and deliver SMS and report delivery status.
  • Automated SMS help. When automated rules help is enabled, DeepSeek receives your question, recent conversation text, and relevant event information, rules, and instructions to generate a reply.
  • OpenAI. If you connect the plugin, ChatGPT receives the information you ask it to retrieve or change. This can include SMS conversation text and phone numbers when an authorized admin uses the SMS tools. OpenAI’s own terms and privacy policy also apply to your use of ChatGPT.
  • Event staff. Organizers, moderators, and assistants can see the information needed to run their events, including registrations, contracts, tasks, and budgets.
  • Legal and safety. We may disclose information when required by law or when necessary to protect people, the site, or our rights.

Cookies and similar technologies

We use a session cookie to keep you signed in and a CSRF token to protect forms. Cloudflare may set security cookies to detect bots and abusive traffic. We do not use advertising cookies.

Retention

We keep account and event records while your account is active and for as long as needed to run events, resolve disputes, meet legal requirements, and maintain backups. Security logs are kept for a shorter period. When information is no longer needed, we delete it or remove the details that identify you.

Security

We use HTTPS, hashed passwords, access controls, and optional two-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

  • You can review and update your profile and security settings while signed in.
  • You can disconnect the plugin at any time from ChatGPT. That stops future plugin access, though records already created remain in our system.
  • You can ask us to access, correct, or delete your personal information by emailing [email protected]. We may need to keep some records, such as completed orders, where the law or our legitimate event records require it.

Children

The site is not directed to children under 13, and we do not knowingly collect their personal information. Events may have their own age requirements and consent rules.

International processing

Our service providers may process information in Canada, the United States, or other countries. Where required, we use appropriate safeguards for those transfers.

Changes to this policy

We may update this policy as the site or the plugin changes. The date at the top shows when it was last revised. Material changes will be announced on the site or by email where appropriate.

Contact

Questions about this policy can be sent to [email protected].