Privacy policy

1. Controller

Michel Greif

Friolzheimer Str. 83, 71287 Weissach, Germany

E-mail: mikethem4chine@gmail.com

2. Account and sign-in

For an account we process your e-mail address, your display name and — if you sign in with Discord — your Discord user id and the profile picture stored there. The legal basis is Art. 6 (1) (b) GDPR (performance of the user contract). Authentication runs through Supabase (Supabase Inc.) as a processor.

Your session lives in two technically necessary cookies (pl_at, pl_rt) that no script in the browser can read. They serve the sign-in state only — no tracking, no consent required (§ 25 (2) no. 2 TDDDG).

3. Game data from pred.gg

When you link your Predecessor profile or a tournament result is submitted, we fetch data from the pred.gg interface and store it: player id, in-game name, region, and for evaluated matches the participants, the heroes played, the roles and the result. The in-game name is an online identifier and therefore personal data.

The legal basis is Art. 6 (1) (b) GDPR for linked accounts and Art. 6 (1) (f) GDPR (legitimate interest in traceable, verifiable tournament results) for the other participants of an evaluated match. That data is already publicly available on pred.gg.

4. Public content

Display name, team and organization membership and the results of public tournaments are visible publicly by design. Your e-mail address and Discord id are not.

5. Hosting and logs

When you open the site the server processes technically necessary connection data (IP address, time, requested address) to deliver and secure operations, Art. 6 (1) (f) GDPR.

Launch notification

Signing up on the front page for a message at launch leaves us an e-mail address and the chosen language. We send a confirmation mail first; only the click on the link in it turns the address into a subscription (double opt-in). Without that click we send nothing further and the address is deleted after 30 days at the latest. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) no. 3 UWG); the confirmation is also our record of it. Every mail carries an unsubscribe link that takes effect immediately — after that the address is only kept on a suppression list so nobody adds it again by accident. There are no marketing mails, no sharing, and no analysis of your behaviour.

Sending is handled by Mailjet (Mailjet SAS, part of the Sinch group, France) as a processor under Art. 28 GDPR. Mailjet receives your e-mail address, the content of the message and technical delivery data such as the time and the delivery status; the servers are in the EU. This covers every mail this platform sends — confirmations, invitations and notifications as well as the single message at launch. We use no open or click tracking: there are no tracking pixels and no rewritten links in our mail.

Uploaded pictures

Crests, banners, profile pictures and the trophies and avatar frames organisers create for their tournament are held on our own storage and delivered only through our server. The legal basis is the performance of the user relationship (Art. 6(1)(b) GDPR). Removing a picture removes the file.

Pictures that become visible to others are checked automatically for obviously unacceptable content before they are shown. For this we transmit the image file to Google's Gemini API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); transfer to the USA is possible and covered by the EU-US Data Privacy Framework. Only the image is sent, never anything about the person who uploaded it. The result is a marker such as „allowed“, „uncertain“ or „refused“, stored alongside the picture; in case of doubt a person on our team decides. The legal basis is our legitimate interest in keeping unlawful or offensive pictures off this platform (Art. 6(1)(f) GDPR). If the check cannot be reached, the picture is not released automatically but put in front of a person.

6. Advertising

When advertising is switched on, it is served by Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A Google script is loaded and your IP address is transmitted to Google; cookies or similar identifiers are only stored on or read from your device after you consent. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), which you give, change or withdraw in Google’s consent dialog. Transfer to the USA is possible, covered by the EU-US Data Privacy Framework. Details: policies.google.com/technologies/ads. Sponsorships we sell ourselves are plain images from our own server and put nothing on your device. Supporters see no advertising at all.

7. Fonts

The fonts used (Chakra Petch, Barlow, JetBrains Mono) are stored on our own server and delivered from there. There is no connection to Google Fonts or any other third party, and no data is transmitted to third parties in the process.

8. Links to Patreon

The site links to our Patreon page. Your browser only connects to Patreon once you click that link; from that moment Patreon’s privacy policy applies. Whether and how you support us there reaches us only as a flag that an account is a supporter — we neither process nor store payment data.

9. Retention

We delete account data when you delete your account. Results of finished competitions remain as part of the tournament history; you can release your link to them at any time under “My profile”.

10. Your rights

Access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests (Art. 15–21 GDPR) — informally, to the address named above. You also have the right to lodge a complaint with a data protection supervisory authority.

11. Minors

You have to be at least 16 years old for an account. If you are younger you need the consent of your legal guardians (Art. 8 GDPR).