Privacy Policy

1. Information We Collect

When you sign in with Discord on our website, with your consent we receive from your Discord account your user ID, username, avatar and banner, the list of servers you are in and, for the Predage servers (Predage Community, PredCord and Masterclass), your nickname, roles, join date and any timeout. From the server list we keep only the total number; the Predage server data stays in your session and is shown to staff when you send an application or an appeal. When you submit a staff application or a ban appeal, we also store the answers you provide in the form.

We count visits without cookies and without storing your IP address: for each page you open we record the page, the time, the website you came from, the type of device and the browser, together with an anonymous code made from your IP address and browser with a random value that changes every day, so you can't be recognised from one day to the next. These records are deleted after 13 months, and browsers that send "Do Not Track" or "Global Privacy Control" are not counted. We also use Umami, a cookie-free analytics tool that only shows aggregated data. When you sign in with Discord we also record the date and time of the sign-in with your Discord ID, for up to 13 months, to count sign-ins and active users.

When you order from the Merch, our Discord bot asks for your email, first and last name, phone number and shipping address (street, postcode, city, country). We use them only to handle and ship your order and to contact you about it: only the Predage staff in charge of orders can see them. Payments are handled by PayPal, Revolut or Satispay: we never see or store your card or account details. Unpaid orders are deleted automatically after 7 days (30 days while a payment is being checked); paid orders are kept to handle shipping, returns and legal obligations.

2. How We Use Your Information

We use this information to:

• Sign you in and keep you signed in on the website and dashboard;
• Show you the correct sections of the dashboard based on your roles;
• Review staff applications and ban appeals;
• Keep moderation records, such as bans and warnings, for the servers you're part of.

3. Discord Authentication

Signing in on Predage's website uses Discord's official OAuth2 login. We never see or store your Discord password. Discord only shares with us the information you approve during the sign-in process.

4. Cookies And Sessions

We use a single essential cookie to keep you signed in between page visits. This cookie is required for the website and dashboard to function correctly and is not used for advertising or tracking purposes.

5. Data Retention

We keep staff application answers, ban appeal answers, and moderation records for as long as needed to run the PredCord and Predage Community servers properly, or until a staff member removes them. The optional email address follows its own 7-day rule described in section 6.

6. Optional Email Address

When you open a Masterclass ticket on our website, you can choose to enter an email address. Providing it is optional and is not necessary to use the service normally: you can leave the field empty and everything works the same.

• Why we offer it: so that our team can contact you by email about your purchase, if you prefer that to Discord. We do not use it for anything else.
• How long we keep it: if you provide it, your email is stored for a maximum of 7 days.
• Automatic deletion: after 7 days the email is automatically deleted from our systems. The deletion also applies to the copy kept in the ticket transcript, and the email is never written to logs or Discord messages.
• Who can process it: only the providers we use to run the service, namely our hosting provider (Hostinger) and our database provider (MongoDB). It is visible only to authorized staff members and is not shared with anyone else. Before saving it, we only check the domain of the address through a DNS lookup to verify that it can receive email.
• Marketing: we do not use your email for marketing or newsletters. If we ever wanted to, it would be handled as a separate purpose with its own explicit consent, and entering the email in a ticket would never count as consent.
• Your choice: the legal basis is your consent, which you give by entering the email. You can ask the staff team to delete it earlier at any time.

7. Merch Orders

When you buy from the Merch page, the payment takes place on Stripe's checkout page. To process and ship your order, we receive from Stripe and keep the following information:

• Order details: your name, email address, shipping address, phone number if you provide it, the products and sizes you ordered and the amount paid. We never receive your full card details.
• Why we use it: to fulfil and ship your order, handle returns, refunds and warranty requests, and keep the accounting records required by law. The legal basis is the performance of the purchase contract and our legal obligations.
• Who receives it: Stripe, which processes the payment as an independent data controller under its own privacy policy (stripe.com/privacy); the courier that delivers your order; and [FULFILMENT PROVIDER], if it prints or ships the products for us.
• Transfers outside the EU: Stripe and some of these providers may process data outside the European Economic Area, including in the United States, with the safeguards required by the GDPR (such as Standard Contractual Clauses or the EU-US Data Privacy Framework).
• How long we keep it: invoices and accounting records are kept for 10 years, as required by Italian law. Shipping details not needed for accounting are deleted once the withdrawal and warranty periods have ended.
• Cookies: the checkout page is run by Stripe, which may use its own cookies there for security and fraud prevention, as described in its own policy. Our website does not add advertising or tracking cookies.

8. Sharing Of Information

We do not sell your information. Data collected through the dashboard is only visible to authorized staff members with the correct permissions, and is never shared with third parties outside of what's required to operate our Discord servers.

9. Your Rights

You can ask us to review or delete the information we hold about you, such as a past application or appeal, by contacting the staff team. Some information, such as moderation history, may be kept for the safety of the community even after a request.

Under the GDPR you also have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. For merch orders, write to porceddduuu@gmail.com. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the authority of your country.

10. Changes To This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page along with an updated "Last updated" date.

11. Contact

If you have any questions about this Privacy Policy, you can reach out to the staff team on the Predage Community Discord server.

The data controller for merch orders is [SELLER NAME], [ADDRESS]. Email: