Privacy Policy

This Privacy Policy explains how UNIKHORNE (Matthias) (“we”, “us”) processes personal data when you use UNIKHORNE Bot on Discord and the public web suite at warera.unikhorne.dev (together, the “Services”).

1. Data controller

Matthias Kirchner
Spitzwegstr. 19
24539 Neumünster
Germany
Email: matnickir@gmail.com
Website: warera.unikhorne.dev
Legal notice: unikhorne.dev/impressum

For questions about this policy or to exercise your rights, contact us at the email above.

2. UNIKHORNE Bot (Discord)

When you interact with UNIKHORNE Bot on Discord, we may process:

• Discord user ID: a numeric identifier assigned by Discord (not your username or email).
• Discord server (guild) ID and channel IDs: when server admins configure alerts or the bot posts notifications.
• Subscription preferences: e.g. bounty/auction DM opt-in and thresholds (/subscribe, /unsubscribe), one-shot market price alerts (/market alert; deleted when they fire or via /market unalert), and battle watches (/battle watch-country/watch; removed via /battle unwatch or automatically when a battle ends).
• Player alert settings: if you use /alerts watch, we store your Discord user ID linked to a public WarEra profile ID/username you provide, plus alert toggles and the last known bar/debuff snapshot used to avoid duplicate notifications.
• Influence votes: if you use /influence_vote, we store your Discord user ID, the country voted on, and your vote (+1 / −1).
• Technical logs: our server may log Discord user IDs, guild IDs, command names, and error messages for operation and abuse prevention.

We do not request or store your Discord password, email address, private messages, or message content from channels.

3. warera.unikhorne.dev (website)

The public website does not require login. We may process:

• Server and access logs: IP address, browser type, requested URL, and timestamp (standard web server logs via nginx).
• Anonymous session heartbeat: a random session ID in your browser to estimate concurrent visitors (/api/heartbeat); not linked to a Discord or WarEra account.
• Influence votes (web): if you vote in the Influence view, an anonymous browser-generated voter ID may be stored (separate from Discord votes).
• Taunt submissions: if you use Taunt, the text you submit and optional display name may be stored and shown publicly.
• Presence list: the counter in the header shows how many browsers are on the site. It is off by default and anonymous. Only if you tick Show me in this list and type a name is that name sent with the regular heartbeat and shown publicly to other visitors. It is held in memory on the server for as long as you are here (about two minutes after your last beat) and never written to the database; untick the box, or close the tab, and it is gone. The name is separate from the profile you watch in Profile & Alerts, which never leaves your browser.
• TopMod appreciation: if you use the appreciation buttons on /topmod, a random browser cookie is set and only its hash is stored to prevent duplicate clicks, plus a short-lived per-IP daily counter for abuse prevention. No account, no personal profile.

Analytics (selected pages only)

Some pages may use Umami (self-hosted at umami.unikhorne.dev) for privacy-oriented, cookieless analytics. Umami does not use third-party advertising cookies. Page views and referrers may be recorded without personal profiles.

4. WarEra game data

To provide stats, maps, and alerts, we fetch public WarEra game data from the WarEra API (via api2.warera.io and/or gateway.warerastats.io). This includes country, battle, auction, bounty, and player profile information that is already public in the game.

We do not send your Discord user ID or Discord username to WarEra. When you link a WarEra profile for player alerts, only the WarEra user ID/username you provide is used for lookups.

Cached game data may be stored in our database (SQLite) to improve performance. Retention varies by data type (e.g. auction/bounty records up to ~90 days).

The TopMod appreciation wall (/topmod) lists WarEra staff using public in-game profile data (username, country, role). Anyone on the wall can receive anonymous likes and reactions. Staff who want off the wall entirely can ask us to remove their profile via Discord or the contact below; appreciation data is deleted when a profile is removed.

5. Purposes and legal bases (GDPR)

• Providing the Services: responding to slash commands, sending alerts you requested, displaying public stats (Art. 6(1)(b) contract / Art. 6(1)(f) legitimate interest).
• Subscriptions and alerts: only with your opt-in via Discord commands (Art. 6(1)(a) consent; withdraw via /unsubscribe or /alerts unwatch).
• Security and stability: logs, rate limiting, abuse prevention (Art. 6(1)(f) legitimate interest).
• Community influence votes: aggregating crowd-sourced signals (Art. 6(1)(f) legitimate interest).

6. Who we share data with

• Discord: required to operate the bot (interactions, DMs, channel posts). See Discord Privacy Policy.
• WarEra / warerastats API: public game data lookups only; no Discord identifiers.
• Hetzner Online GmbH: VPS hosting in Germany.
• AI providers (Taunt only): if you submit a Taunt, your prompt may be sent to configured AI APIs (e.g. Groq, Google Gemini) to generate a response. Do not submit personal data in Taunt prompts.

We do not sell your personal data.

7. Retention

• DM subscriptions: until you /unsubscribe.
• Player alerts: until you /alerts unwatch or replace the watch.
• Influence votes: stored until overwritten by a new vote or deleted on request.
• Server alert configuration: until removed by admins or the bot leaves the server.
• Database backups: nightly, retained ~14 days on the server.
• Web server logs: rotated per server policy (typically weeks).

8. Your rights

If you are in the EU/EEA (or another jurisdiction with similar rights), you may have the right to:

• access, rectify, or erase your data;
• restrict or object to processing;
• data portability (where applicable);
• withdraw consent (for subscriptions/alerts);
• lodge a complaint with your local data protection authority.

To request deletion of Discord-linked data, email matnickir@gmail.com with your Discord user ID (Developer Mode → right-click your name → Copy User ID). You can also remove DM subscriptions yourself with /unsubscribe all.

9. Children

The Services are not directed at children under 16. Discord requires users to meet Discord’s minimum age. We do not knowingly collect data from children.

10. Security

Data is stored on a secured VPS. Access is limited to the operator. No system is 100% secure; use the Services at your own discretion.

11. Changes

We may update this policy. The “Last updated” date at the top will change. Continued use after changes constitutes acceptance of the updated policy.