Privacy Policy
This Privacy Policy explains how the Pokal platform ("we", "us", "our") collects, uses and protects your personal data when you use our Discord bot, web dashboard and related services (the "Service"). Please read it together with our Terms of Service and Cookie Policy.
1. Introduction
We are committed to protecting your privacy and handling your data transparently and in accordance with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR) where it applies.
2. Who we are
The Pokal team is the controller responsible for the personal data processed through the Service. You can reach us using the contact details in the Contact section below.
3. Data we collect
Data you provide
- Discord account data received via OAuth — your Discord user ID, username, avatar and email address (where you grant access).
- Shop & product data — product listings, prices, stock, license keys, descriptions and settings you enter as a Seller.
- Order data — the products purchased, quantity, amount, discount codes and the payment method chosen.
- Communications — messages you send us for support.
Data collected automatically
- Technical data — IP address, browser type, device information and timestamps.
- Usage data — interactions with the dashboard and bot, and log data used for security and diagnostics.
- Cookies — session and preference cookies, as described in our Cookie Policy.
4. How we use your data
- to provide, operate and maintain the Service and authenticate you via Discord;
- to process orders, deliver digital products and handle plan subscriptions;
- to display analytics and manage your shop;
- to communicate with you about your account, orders and support requests;
- to detect, prevent and address fraud, abuse and security issues;
- to comply with legal obligations and enforce our Terms.
5. Legal bases
Where GDPR applies, we process personal data on the basis of: performance of a contract (to provide the Service you request); legitimate interests (to secure and improve the Service and prevent fraud); consent (for non-essential cookies and certain communications); and legal obligation (for tax and accounting).
6. Sharing & processors
We do not sell your personal data. We share it only with:
- Service providers that host our infrastructure and help us operate the Service (for example our cloud hosting provider);
- Payment processors that handle transactions (see below);
- Discord, to authenticate you and deliver bot functionality;
- Sellers, who receive the order information necessary to fulfil a purchase you make from them;
- authorities, where required by law or to protect our rights.
7. Payment data
Card and other payments are handled by third-party payment processors. We do not store full card numbers on our servers. For on-chain crypto payments, the wallet address and transaction hash are recorded to confirm the payment. Payment providers process your data under their own privacy policies.
8. Cookies
We use strictly necessary cookies to keep you signed in and to secure the Service, and — with your consent — optional cookies. See our Cookie Policy for details and how to manage them.
9. Data retention
We keep personal data only for as long as necessary to provide the Service, comply with our legal obligations (such as retaining transaction records for accounting), resolve disputes and enforce our agreements. When data is no longer needed we delete or anonymise it.
10. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International transfers
Your data may be processed in countries outside your own. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection, such as relying on appropriate safeguards recognised under applicable law.
12. Your rights
Depending on your location, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You may also lodge a complaint with your local data-protection authority. To exercise your rights, contact us using the details below.
13. Children
The Service is not directed to children under 18 (or the age of majority in your jurisdiction) and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us so we can remove it.
14. Changes
We may update this Privacy Policy from time to time. We will update the "Last updated" date and, where appropriate, provide additional notice of material changes.
15. Contact
For privacy questions or to exercise your rights, contact us through our support Discord server or by email at privacy@pokal.shop.