Privacy policy

Who is responsible

The publisher of when?, a private individual (see the legal notice). Contact: the link at the bottom of this page.

What is stored

Your Discord account: its identifier, your display name and your avatar. No e-mail address, no password, none of your Discord messages.

What you do on the site: the events you create (title, description, link of the image), your availability, your votes, whether you are coming, your recurring busy times, your typical weeks and the link of your calendar if you give one.

Your settings: language, timezone, the kinds of private message you accept.

To show whom you can invite, the bot reads the member list and the roles of the servers it was added to. That list is not stored: only the people actually invited are.

If you were invited without ever coming to the site

Someone who shares a Discord server with you invited you to an event. when? then stored your Discord identifier, display name and avatar, taken from that server, to show you as invited and to let the bot write to you. The link under each message of the bot stops them all in one click, without logging in. To be erased, use the contact link.

Why, and on what basis

To run the service you ask for when you log in or create an event. For the people invited and for the messages of the bot: the legitimate interest of the members of a same Discord server in organising an event together. You can object at any time.

Who receives it

Discord Inc. (United States): the login, the private messages of the bot and the events created on your server go through Discord, under its own privacy policy.

The host, Rackoryn (https://rackoryn.com), whose servers are in Germany.

Nobody else: no advertising, no audience measurement, nothing sold or shared.

The image of an event is loaded from the address its creator gave: your browser contacts that site, which sees your IP address.

How long

An event is deleted 6 months after its date, or after the end of its date range when no date was set, with the availability and the votes given in it. An account is deleted 12 months after its last login, once it is in no event any more. A login session lasts 30 days.

If you stopped all the messages of the bot, your Discord identifier is kept so that your refusal is remembered.

Cookies

Four cookies, all needed for the site to work, none for tracking: session (keeps you logged in, 30 days), oauth (the time of the Discord login, 10 minutes), theme and lang (your choices of appearance and language, one year). They need no consent banner.

Your rights

Access and portability: “Download my data” in the settings. Erasure: “Delete my account” in the settings. Objection: the link under each message of the bot, or the settings. Rectification: your name and avatar follow your Discord account at each login. For anything else, use the contact link: you get an answer within a month.

You can also complain to your data protection authority, in France the CNIL (cnil.fr).