Privacy policy

PLACEHOLDER – review and replace before publication, ideally with qualified legal advice.

Controller

[Enter name, address and contact details of the controller per Art. 4 No. 7 GDPR]

Hosting

This website and the Cordavix platform are hosted with [enter hosting provider]. Technically necessary connection data is processed in the process.

Server Logs

When you access the website, technical access data (e.g. IP address, timestamp, requested page) is stored for a limited period to ensure operation and for error analysis.

Registration

During registration, email address, username and a hashed password are stored to provide you with an account.

User Account

The user account stores account settings, security-relevant events (e.g. sign-ins) and preferences.

Discord OAuth2

When you link your Discord account, we process the basic data Discord provides via OAuth2 (e.g. Discord ID, username) within the scope of the permissions you grant.

Discord Bots

To operate your Discord server, the bot instance processes the server, channel and message data required for the respective feature according to the modules you enabled.

Stored Discord Data

Only the Discord data required to operate the booked features (e.g. server ID, roles, configuration values) is permanently stored.

Bot Tokens

Your own bot tokens are stored exclusively encrypted (AES-256-GCM) and are not accessible to anyone except the bot runtime environment.

Payment Provider Stripe

Payments are processed via the payment provider Stripe. Payment data (e.g. card data) is processed exclusively by Stripe under its own privacy policy.

Invoices

Invoice data is retained beyond the account lifetime to fulfill statutory retention obligations.

Email Delivery

Transactional emails (e.g. confirmations, security notices) are sent via [enter email service provider].

Support Requests

Information from contact and support requests is stored to process your request and removed after completion per our retention periods.

Cookies

We use technically necessary cookies as well as – with your consent – preference, analytics and marketing cookies. See the Cookie Policy for details.

Sessions

Sign-in uses a secure, signed session cookie; the associated session is managed server-side and can be revoked at any time.

Newsletter

Newsletter delivery only starts after confirmation via double opt-in. You can unsubscribe at any time via the link in every email.

Giveaways

When participating in platform giveaways, the data required to run the giveaway and determine winners is processed.

Coupons

When redeeming coupon or discount codes, the data required for attribution (e.g. account, code, redemption time) is stored.

Affiliate System

When participating in the affiliate program, the data required to attribute referrals and commissions is processed.

Data Retention

Data is only stored for as long as necessary for the respective purpose or to fulfill statutory retention obligations.

Data Deletion

After a deletion request, your account is deleted or anonymized once a revocation period has passed; invoice data subject to statutory retention remains stored separately.

Data Export

You can request an export of your personal data via your account.

Your Rights

You have the rights to access, rectification, erasure, restriction of processing, data portability and objection under Art. 15–21 GDPR.

Contact

For privacy questions, contact [enter privacy contact].

Changes

This privacy policy may be updated when data processing changes. The version published at the time of your visit applies.