Privacy Policy

Last updated 27 September 2026

This site is operated by iposbots, staffordshire,ENG, the "controller" of the data described below. Questions about this policy or your data: iposbots@proton.me.

This covers only the website you're on now, the Discord login, dashboard, and Premium subscription. The bot itself collects separate data when it's actually running tournaments in your server (Ubisoft names, match results, and so on), covered by its own /privacy command in Discord, not this page.

What we collect, and why we're allowed to (our legal basis)

When you log in with Discord, we receive your Discord user ID, username, display name, and the list of servers you own or manage, used only to build your dashboard, greet you by name, and confirm you have real authority over the server you're activating Premium on or managing. This is kept only in your login session (stored in our database's session table so a restart doesn't log you out), never in any other record, and is deleted when the session ends. Legal basis: our legitimate interest in only showing you servers you actually have authority over, and in keeping the login working.

For a server that subscribes to Premium, we store: the server's Discord ID, its subscription tier, a Stripe customer ID and subscription ID, and the current billing period end date. That's the minimum needed to know which servers are paying and to tell the Discord bot a server's premium status when it asks. Legal basis: necessary to perform the subscription contract with you (billing you correctly, giving you the features you paid for).

If you write an "About your server" text for the public tournaments page, we store that text, your Discord user ID as the person who sent it, when it was sent, and our review decision. The approved text is shown publicly on that server's tournament pages until you remove it. Legal basis: our legitimate interest in running and moderating the public listings you chose to use.

If a host lists a tournament publicly, its public page on this site shows the tournament's name, format, platform, prize, buy-in and info text, how many teams have signed up, the start time, the server's name and icon, and an invite link to the server. It never shows player names, Discord IDs or Ubisoft names.

If you run tournaments from this website, the pages show you the same tournament data the bot already holds (teams, players, results and so on), fetched live from the bot each time. This site doesn't keep its own copy of it. To check you're allowed to do what you're asking, your Discord user ID is sent to the bot with each action, the same as when you use the bot's commands in Discord.

We never see or store your card details. Payment happens entirely on Stripe's own checkout page, we only ever get a customer/subscription reference back, never your card number, expiry, or CVC.

We don't use your data for any automated decision-making or profiling that has a legal or similarly significant effect on you.

Who we share it with

Discord (for login) and Stripe (for payment) each receive only what's necessary for their part to work, and each is independently responsible for their own handling of your data under their own privacy policies. The site also runs on service providers that process data only on our behalf: Render (website hosting), Supabase (database), and Resend (sends security emails to the site operator only, never to you). We don't sell data, and don't share it with anyone else.

Administrator access

The person who operates this service has a separate admin login (not tied to any Discord account) used to see which servers the bot is in and their subscription status, grant or remove free or promotional Premium, create discount codes, moderate public listings and "About your server" texts, and remove or block the bot from a server. Through this they can see the data described above (server IDs, names and subscription status, and the Discord user ID of whoever sent an About text), nothing more. Admin access needs a password plus a one-time code emailed to the operator for the login and for every sensitive action, has a limit on login attempts, and ends automatically when the browser is closed or after a short time unused.

How long we keep it

Login session data (your Discord ID, username, and the server list used to build your dashboard) is kept for up to 30 days of inactivity so you stay logged in between visits, or until you log out, whichever comes first, it's stored in our database rather than only in short-lived server memory, specifically so a normal restart of the site doesn't randomly sign you out. Subscription records for a server are kept for as long as it has an active or past subscription, since we need this for billing records and to resolve any dispute with Stripe. An "About your server" text, and the Discord user ID of whoever sent it, are kept until it's removed by the host or by us; our moderation decisions on listings are kept so a removed listing doesn't come straight back.

Your rights

Under UK GDPR you can ask what data we hold about a server you own or manage, ask us to correct it, ask us to delete it once there's no active subscription and no ongoing legal reason to keep it, or ask for a copy of it in a portable format. Email iposbots@proton.me to make a request. If you're unhappy with how we've handled your data, you can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), though we'd appreciate the chance to sort it out directly first.

Where your data is processed

We use Discord, Stripe, and a database and hosting provider to run this service, some of which may process or store data outside the UK/EEA. Where that happens, those providers are responsible for putting their own legal safeguards in place (such as the EU's Standard Contractual Clauses) for that transfer, this is standard for services built on Discord and Stripe regardless of where the operator is based.

Cookies

See our Cookies Policy.

Changes

We may update this policy as the service changes. Material changes will show here with an updated date.