Privacy policy
1. Controller
Leon Mueller, c/o Online-Impressum #11168, Europaring 90, 53757 Sankt Augustin, Germany, email: [email protected] (see Imprint).
2. Hosting and server logs
The website and bots run on servers of vultris.cloud (Frankfurt am Main, Germany) and Contrabo (France) and are delivered through Cloudflare (proxy/CDN, security). When you visit, the web server and Cloudflare process technically required data, in particular IP address, date/time, requested page and browser information, for delivery, stability, security and abuse prevention (Art. 6(1)(f) GDPR). Web server logs are deleted after 14 days. The IP address is also used for rate limiting of our interfaces.
3. Internal visit statistics
For statistical purposes we store the requested path, the time and, for logged-in users only, your internal user ID. The IP address is not stored, no cookies are set and no data is passed to third parties (Art. 6(1)(f) GDPR).
3a. Login with Discord
Login is exclusively via Discord (Discord Inc., USA). We receive your Discord ID, display name, avatar, email address and your server list. We store this data plus role, language setting, 2FA status (if enabled) and session data to provide the panel (Art. 6(1)(b) GDPR). Discord's privacy policy applies additionally. Transfers to the USA may rely on standard contractual clauses or the EU-US Data Privacy Framework.
4. Cookies
We only use strictly necessary cookies: a session cookie (login, up to 30 days) and a language cookie (bp_locale, 1 year), Section 25(2) no. 2 TDDDG. No consent is required. We do not use tracking or advertising cookies.
5. Discord images (avatars, server icons)
Avatars and server icons are loaded directly from Discord servers (cdn.discordapp.com), which transmits your IP address to Discord (Art. 6(1)(b)/(f) GDPR).
6. Payments via Stripe
Paid services are processed by Stripe (Stripe Payments Europe Ltd., Ireland; possibly Stripe Inc., USA). Your email address and order amount are passed to Stripe; payment details are entered directly with Stripe and are not received by us (Art. 6(1)(b) GDPR). Invoice-relevant data is retained according to statutory retention duties (Art. 6(1)(c) GDPR).
7. Operation of Discord bots
When operating bots we process the Discord data needed for the configured features (e.g. server, channel and user IDs, configurations). Bot tokens are stored encrypted. We do not store support tickets.
8. Retention
We store data only as long as necessary for the respective purpose or as required by statutory retention periods. When you delete your account, data is deleted unless obligations prevent it.
9. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and may withdraw consent at any time. You may lodge a complaint with a data protection authority. Contact us via the email address in the Imprint.
10. External links
External sites (e.g. Discord) are the responsibility of their operators.