Privacy Policy

1. Who we are

The TDEU Broadcast Control Panel is an operator tool for Tekken tournament broadcasts. The data controller for processing described in this policy is the panel's operator. Contact for any privacy matter: jet@awhisper.org.

2. What we access

When you sign in with Discord, we request the identify and guilds.members.read scopes and access only:

• your Discord user ID, username, display name, and avatar;
• your membership and roles in the configured guild.

3. How we use it

This data is used solely to sign you in to the TDEU Broadcast Control Panel and to determine your access level (operator/admin) from your guild membership, role IDs, or a developer override.

Legal basis: processing is necessary for the legitimate interests of the controller (Article 6(1)(f) GDPR) — restricting a broadcast-critical tool to authorized operators. We do not rely on consent for this processing and do not use your data for marketing.

4. Cookies

The panel uses exactly one cookie: a strictly necessary session cookie set by our API domain (api.awhisper.org) that keeps you signed in. It expires after 7 days, is marked HttpOnly and Secure, and is never used for tracking. We set no third-party cookies and run no analytics. Because the cookie is strictly necessary for sign-in, no consent is required; this notice is disclosure.

5. What we do not collect

We do not read your messages or direct messages, do not scan other servers, and do not run a bot or slash commands. We do not copy your Discord data into our database — it is held only in a temporary login session.

6. Sharing and storage

We do not sell, rent, or share your Discord data. It is processed by Discord, Inc. (United States) as the OAuth provider, and by our hosting providers to operate the service. The panel and its API are hosted in the European Union (Northflank, EU west region); DNS resolution is provided by Cloudflare.

7. Retention

Your Discord identity is kept only for the duration of your session (the session cookie expires after 7 days) or until you log out.

8. Your rights (GDPR)

You have the right to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability (Articles 15–21 GDPR). You can also revoke the app's access at any time in Discord (Settings → Authorized Apps) and log out of the panel.

You have the right to lodge a complaint with the data protection supervisory authority of your EU member state if you believe processing infringes the GDPR.

9. Changes

We may update this policy from time to time. Material changes will be reflected in the effective date above.

10. Contact

jet@awhisper.org