Privacy policy

Data controller

The processing described here is carried out by the publisher of the service, identified below.

What is collected

Account: email address, username, interface language and a password hash (argon2id — the plain password is never stored). Security: encrypted two-factor secret, recovery code hashes, registered security keys.

Sessions: creation date, last activity, IP address and user agent of every connected device. Discord, if you link an account: identifier, username, display name, avatar copied onto our servers, granted scopes and encrypted tokens. An audit log keeps sensitive events (sign-ins, password changes, revocations, Discord linking and unlinking).

Why

To run the service: authenticate you, show your servers, configure the bot, and send the emails your account needs.

To keep it secure: detect abusive access attempts, limit repeated tries, let you see and close your sessions, and trace sensitive actions.

Retention

A session expires automatically; email verification and password reset links are single-use and expire within hours. Account data is kept for as long as the account exists.

Deleting the account deletes the associated data, including Discord tokens and the copied avatar.

Sharing

No data is sold or handed over for advertising. The only third parties involved are Discord, when you link your account, and the website's host.

Your browser loads no external resource: fonts, icons and avatars are served by the site itself, which rules out third-party tracking.

Cookies

Kingsy uses no advertising or analytics cookie. Only strictly necessary cookies are set:

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data.

Most are exercised directly from “My account” (changing username, email address or password, signing out devices, unlinking Discord). For anything else, write to no-reply@kingsy.fr.

Security

Passwords are hashed with argon2id; two-factor secrets and Discord tokens are encrypted with AES-256-GCM. Sessions live on the server and their cookie is out of reach of JavaScript.

The site applies a strict content security policy, protects every sensitive action against request forgery and throttles repeated attempts.

Contact us

For any question about your data, write to no-reply@kingsy.fr.

Publisher

The publisher's identity details are not filled in yet.