1. Who controls your data
The data controller's verified registered name, KvK number and address will appear here before public activation. Those details are intentionally not inferred in this draft.
2. Information we process
Depending on how you use the service, this may include your Discord user and server identifiers, display name, avatar, application answers, club roles, session responses, configured voice participation intervals, club settings and security audit records. Public forms use a keyed pseudonymous connection fingerprint for short abuse-prevention windows; the raw network address is not stored.
We do not request your Discord password. We do not need Discord's Message Content permission and do not ingest ordinary server conversations.
3. Why we use it
We use this information to authenticate members, operate applications and sessions, enforce club access, calculate qualified participation, prevent abuse, provide support and maintain a reliable audit trail. Our legal bases are performing the service you request, legitimate operational and security interests, and consent where applicable.
4. Club administrators
A club's authorized staff can view information relevant to that club. Clubs Manager separates club data and does not allow one club to access another club's records. Club staff decide who receives club roles and how applications are evaluated.
5. Service providers and transfers
We use vetted infrastructure providers for hosting, authentication, database operations, email delivery and Discord connectivity. They process information only to provide their services to us. Where data moves outside the European Economic Area, we use an appropriate legal transfer mechanism.
6. Retention and deletion
Operational records are kept only as long as needed for the club service, security or legal obligations. Removing a club suspends access immediately and begins a 30-day recovery period before permanent deletion, unless retention is legally required.
7. Your choices
Your squad membership stays private by default. A public player profile appears only after you opt in and your club separately approves publication; you can withdraw that consent at any time and the profile is hidden immediately.
You may request access, correction, export, restriction or deletion of your information. You may also object to certain processing. Use the private request route, or the authenticated account route when signed in. We verify identity before releasing or deleting data.
8. Security and changes
We use access controls, tenant isolation, encrypted transport, scoped credentials and operational logging. No service can promise absolute security. Material policy changes will be dated here and communicated through the service when appropriate.