Premature Commitment
Legal

Privacy Policy

How we use the minimum amount of personal data needed to organise tournaments and keep the club running.

1. Who is responsible for your data?

The data controller is Yannick “daiweixin” Delwiche, Belgium.

For questions or privacy requests, contact a Premature Commitment administrator through the club’s Discord server.

2. What data do we process?

Discord profile data

When you select “Log in with Discord,” Discord authenticates you through OAuth. We request the identify and connections permissions. We receive your Discord user ID, display name or username, avatar URL, and linked-account names made available by Discord.

We use verified Epic Games and PlayStation connections to let you choose a preferred player display name. The available linked-account choices are kept in your encrypted session; your profile stores only the name and source you select. Tournament registrations link your user profile to a tournament and do not duplicate the display name. We do not request your Discord email address, server list, or permission to act on your behalf.

Tournament data

When you register or participate, we process your chosen display name and its source, registration, team and match assignments, byes, scores, results, standings, wins, points, goal difference, and related timestamps.

Session and technical data

We use an encrypted session cookie and temporary security cookies to keep you signed in and protect the Discord login flow. Our hosting infrastructure may also process limited technical data, such as IP address, request time, browser information and security events.

3. Why do we process it?

  • To authenticate members and maintain login sessions.
  • To manage tournament registrations and withdrawals.
  • To generate schedules, record results and calculate standings.
  • To display participants, fixtures and results.
  • To announce rounds, cancellations and winners through Discord.
  • To administer, secure and prevent abuse of the Website.
  • To respond to requests and comply with applicable law.

4. Legal bases

We process data where necessary to provide the account and tournament features you request. We also rely on our legitimate interests in organising club activities, maintaining fair tournament records and protecting the Website. We process data to meet legal obligations where applicable.

5. Who can see or receive the data?

Website visitors

Tournament pages are public. Your display name, participation, match assignments, results and standings may be visible to anyone visiting the Website. Your Discord ID is not deliberately displayed.

The Discord community

Tournament announcements may include display names, match assignments, byes, scores and standings. Their visibility depends on the destination Discord channel’s permissions.

Administrators and providers

Authorised club administrators can manage member profiles, registrations, schedules and results. We use Discord for authentication and announcements, and Hostinger International Ltd. for VPS hosting on a server in Europe.

We do not sell personal data or use it for targeted advertising.

6. International transfers

Discord and certain infrastructure providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses, the EU–US Data Privacy Framework, or another lawful safeguard. Discord explains its safeguards in its Privacy Policy.

7. Retention

  • Login session cookies normally expire after 30 days unless you log out sooner.
  • Temporary OAuth security cookies expire after login or within approximately 15 minutes.
  • Infrastructure and security logs are retained for 7 days.
  • Profiles and tournament data are retained while needed to operate the club and preserve tournament records.
  • Daily database backups are automatically removed after 7 days.

If you request deletion, identifying profile data will be deleted or anonymised unless retention is legally required. Past results may be anonymised where removing the complete record would affect other participants’ results. Deleted information may remain in rotating backups until they expire.

8. Your rights

Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent where processing relies on consent.

Contact a Premature Commitment administrator through the club’s Discord server to exercise a right. We may verify your identity through your connected Discord account.

You may lodge a complaint with the Belgian Data Protection Authority.

9. Security

We use HTTPS, restricted administrator access, encrypted authentication cookies, isolated application and database containers, rotating backups and infrastructure access controls. No online service can guarantee absolute security, so please protect your Discord account and report suspected unauthorised access.

10. Changes and contact

We may update this Policy when the Website or its data practices change. Material changes will be communicated through the Website or club Discord where appropriate.

Questions and requests can be sent to a Premature Commitment administrator through the club’s Discord server.