Privacy Policy

1. Data controller

The Prono Worlds website and its Discord bot are published by Vincent Pepin (ThePepS), a private individual, on a non-commercial basis. He is the controller of your personal data. Contact: rrthepeps@gmail.com or a direct message to ThePepS on Discord.

2. Data we process

• Discord login: Discord ID, username and display name, avatar, list of the Discord servers you share with the bot (server ID and name), Discord access tokens (kept only inside your encrypted session cookie). We do not request your email address.
• Game: your match predictions, special (pick'em) votes, scores and statistics.
• Discord bot: the commands and predictions you send through the bot, and the channel settings chosen by server administrators.
• Technical logs: Discord ID and username on login, server errors.
• Usage statistics, only if you accept them: page views, logins, clicks on some buttons and votes, linked to your Discord ID and username.

3. Purposes and legal bases

• Running the service (login, predictions, score computation, leaderboards): performance of a contract, i.e. the Terms of Service (Art. 6(1)(b) GDPR).
• Security and maintenance (logs, abuse prevention): legitimate interest (Art. 6(1)(f) GDPR).
• Audience measurement linked to your account (PostHog): consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Gérer les cookies” (manage cookies) at the bottom of the page, without any impact on your use of the site.

4. What other players can see

Your username, Discord avatar and scores are visible to other players in the site's leaderboards and in the Discord servers where you play. On the website, your predictions are only shown to others as aggregated statistics per match.

5. Recipients and processors

Your data is never sold or used for advertising. It is processed by:

• OVH SAS: hosting of the website, the bot and the database (France).
• Discord Inc.: authentication and bot operation (United States).
• PostHog: audience measurement, only with your consent (hosted in the European Union).

6. Transfers outside the European Union

Data exchanged with Discord is processed in the United States. Discord Inc. is certified under the EU–US Data Privacy Framework, recognised by the European Commission as providing an adequate level of protection.

7. Retention periods

• Account, predictions and scores: until you request deletion (contact us, see the section on your rights).
• List of your Discord servers: refreshed on each login.
• Session cookie: 7 days.
• Technical logs: kept as long as needed for security and debugging; no automatic purge is in place at this time.
• Usage statistics: kept until you request deletion; withdrawing your consent stops any further collection.
• Your choice regarding statistics: 6 months, after which you will be asked again.

8. Cookies and trackers

• Session cookie: strictly necessary for login (7 days). It does not require consent.
• Two technical login cookies (protection against forged requests and memory of the return page): strictly necessary, kept for the browser session.
• Browser local storage: remembers your choice regarding statistics (6 months).
• PostHog technical flag (browser local storage): remembers your choice, with no personal data.
• PostHog trackers: audience measurement, set only if you accept, and removed if you withdraw your consent.

9. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, email rrthepeps@gmail.com or contact ThePepS on Discord. You will receive an answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.

10. Changes

This policy may change. The last update date is shown at the top of the page. See also the legal notice and the Terms of Service.