Legal

Privacy Policy

1. Controller

Bill Lietz

Grafenstr. 22

24768 Rendsburg

Deutschland

2. General information

This web backend manages the Discord bot FGC Roll. Personal data is processed only where needed for login, server administration, bot functions, technical security or support. No analytics or marketing tracking services are used.

3. Hosting and server logs

The web backend is hosted by PawHost. When the site is accessed, the host may process technical access data in server logs, including IP address, date and time, requested file, referrer, browser type and operating system. Processing is required for secure and stable operation and is based on Article 6(1)(f) GDPR.

4. SSL/TLS encryption

The web backend uses SSL/TLS encryption to protect transmitted content as far as possible.

5. Discord login

Discord login uses the OAuth permissions identify and guilds. This processes the Discord ID, user name, display name, avatar and Discord servers on which the logged-in user is recognised as an owner, administrator or as having Manage Guild permission.

6. Bot data and server administration

Depending on use, the bot processes Discord server IDs, channel IDs, role IDs, user IDs, group and guild names, automated messages, schedules, module status, feature settings, premium status and technical status data such as installation status, last bot report and last sync time.

7. Cookies and sessions

The backend may use technically necessary session cookies so that Discord login, form protection and internal administration functions work properly. No tracking or marketing cookies are used. The legal basis is Article 6(1)(f) GDPR.

8. Contact form and Discord forum

When you use the contact form, the data you provide, such as name, email address, server information, subject and message, is processed to handle your request. To prevent abuse and enable technical assignment, the sender IP address is also included in the internal forum entry. If you are logged in with Discord, Discord ID, username, display name and the number of manageable servers are also added as request context.

The request is sent to an internal Discord forum by Discord webhook, where authorised team members can handle it. The legal basis is Article 6(1)(b) GDPR where the request relates to using or setting up the service; otherwise it is Article 6(1)(f) GDPR.

9. Form protection, CSRF and reCAPTCHA

Forms are protected by technically necessary CSRF tokens, session checks, a honeypot field and a simple rate limit. If enabled, Google reCAPTCHA is used to prevent abuse. Technical data such as IP address, browser information and usage behaviour may be transferred to Google. The legal basis is Article 6(1)(f) GDPR.

10. Storage locations

The web backend at https://dcbot.freiegamingcommunity.de stores OAuth, server, licence, module, feature and audit data. The running Discord bot stores runtime data in MariaDB on the bot server. The bot token is not stored in the web backend.

11. External platform: Discord

Discord is technically involved as the platform provider. Discord's privacy policy also applies when using Discord login, inviting the bot or interacting with bot functions.

12. Terms of use

The terms of use also apply to the backend and Discord bot.

13. Data sharing

Personal data is actively shared only where necessary for operation, support or abuse prevention. Discord as the platform provider, the web backend host and, where spam protection is enabled, Google reCAPTCHA are technically involved.

14. Deletion

Server and user data can be deleted on request where no technical or legal retention reason prevents this. When the bot is removed, stored server data can be cleaned up or deactivated. Audit logs are cleared automatically on a regular basis; the default retention period is 180 days unless a shorter or longer legally required period applies.

15. Your rights

Subject to the statutory requirements, you have rights to access, rectification, erasure, restriction of processing, data portability and objection under Articles 15 to 21 GDPR. You also have the right to complain to a data protection supervisory authority.

16. Supervisory authority

Unabhaengiges Landeszentrum fuer Datenschutz Schleswig-Holstein (ULD)
Holstenstr. 98
24103 Kiel
www.datenschutzzentrum.de

17. Version

This privacy policy is dated 6 July 2026.