Privacy Policy

The data controller within the meaning of the GDPR is Rico M. (see our Imprint for contact details). For privacy-related questions, reach us at [email protected].

If you are a member verifying in a Discord server:

• Discord ID, username, and avatar
• The Discord server you are verifying in
• IP address, approximate location, and VPN status (only if the server owner has enabled this)
• Discord OAuth2 access and refresh tokens (not your Discord password)

You can view which servers hold your data, unauthorize them, or request deletion of your data at any time via Manage My Data.

If you have an account with us (server owner):

• Username and email address
• Password (stored hashed, never in plaintext)
• Payment data, processed by our payment processor Komerza. We do not have access to it ourselves. See Komerza's privacy policy.

We process personal data on the following legal bases under Art. 6(1) GDPR:

• Contract performance (b): to provide the verification and backup service and to manage your account.
• Legitimate interest (f): for fraud and abuse prevention (e.g. anti-VPN, alt-account detection, blacklisting) and to secure our services.
• Consent (a): where a server owner enables optional features such as IP logging that go beyond what is technically required for verification.
• Legal obligation (c): for example to meet tax and commercial-law retention requirements.

We only share your data where necessary to perform the contract (e.g. with our hosting provider and payment processor Komerza as data processors), where legally required, or in connection with a business sale, merger, or similar transaction. We do not sell your data.

We keep personal data only as long as necessary for the purposes described above, or as required by statutory retention periods (e.g. commercial and tax law). Once the purpose no longer applies, data is deleted or anonymized unless a legal retention obligation applies.

If you request deletion of your verification data via Manage My Data, your IP address, email, location, and device information are deleted. Your Discord ID and country are retained for security and abuse-prevention purposes (legitimate interest, Art. 6(1)(f) GDPR).

We use technically necessary cookies and local storage to keep you signed in (e.g. for the dashboard login and the Discord login on "Manage My Data"). These are required to provide the service under § 25(2) TTDSG / Art. 6(1)(b) GDPR and do not require separate consent. We do not use tracking or marketing cookies.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Complete security of data transmitted over the internet cannot be guaranteed.

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interest (Art. 21 GDPR)
• Right to withdraw consent with future effect (Art. 7(3) GDPR)

To exercise these rights, please use Manage My Data or contact us by email at [email protected].

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.

We will update this privacy notice whenever changes to our data processing make it necessary. The current version is always available on this page.