// PRIVACY
Privacy policy
Last updated October 15, 2026.
paffytaffy.com and the Paffytaffy plugin for ChatGPT are a fan project run by the Halo Infinite player Paffytaffy ("we"). This page explains what data they handle. There are no accounts, cookies, ads or analytics.
The match data we publish
We publish Halo Infinite matchmaking data from Paffytaffy's own match history, read from Halo's match history service with Paffytaffy's account. For each player who has played at least 3 matches with or against Paffytaffy, it includes:
- their gamertag and Xbox user ID (XUID)
- the results and player stats of those shared matches, such as wins, kills, deaths, assists, accuracy and damage
- their Ranked Arena rank, for players whose rank we looked up
It covers only matches that included Paffytaffy, not anyone's full history. The data is published as public files on GitHub Pages and shown on this site and through the ChatGPT plugin. The plugin's answers include gamertags, records, stats and ranks, but not XUIDs.
What you send us
Searching the site
When you look up a gamertag, your browser downloads the public data files from GitHub Pages and searches them itself. The gamertag you type is never sent to our server. GitHub receives the file requests, as it does for every site it hosts. See GitHub's privacy statement.
The 1v1 Duel form
When you send a challenge from the 1v1 Duel page, our server receives the gamertag you entered and posts it to Paffytaffy's private Discord channel, so Paffytaffy can message you to set up the match. The message stays in Discord until it is deleted, and Discord's privacy policy applies to it. Our server log records each challenge it sends, with the gamertag.
To stop spam, the server counts challenges per IP address for 15 minutes and remembers each gamertag for an hour, so a repeat doesn't ping twice. Both are kept in memory only and are gone when the server restarts. IP addresses are never saved.
The ChatGPT plugin
When ChatGPT uses the Paffytaffy plugin, it sends our plugin server only the tool's inputs: a gamertag, or which leaderboard and how many rows. We don't receive your other messages, your name or your ChatGPT account details, and the plugin server doesn't log the inputs. Its rate limit is one shared count for all requests, so it doesn't use IP addresses. OpenAI handles your conversation under its own privacy policy.
Server logs and hosting
The site, the Duel server and the plugin server run on Replit. The Duel server logs the method, path and status of each request, not your IP address. The plugin server logs only errors. Replit keeps these logs under its own retention, and as the host it processes each request's network details, such as your IP address, to deliver it. See Replit's privacy policy.
Your browser
The site sets no cookies and loads no analytics or tracking scripts. It saves one item in your browser's local storage, paffytaffy:duel-nudge-seen, so the 1v1 Duel popup shows only once. Clearing this site's data removes it.
Your choices
- Remove your data: to have your gamertag and stats taken out of the published data, message @paffytaffy_ on X with your gamertag.
- Delete a Duel challenge: message the same account to have your challenge deleted from Discord.
Children
The site and the plugin aren't directed at children under 13.
Changes
If this policy changes, we'll update this page and the date at the top.
Contact
Message @paffytaffy_ on X. More help is on the support page.