Privacy policy

Data controller

The data controller is the editor of Vantus, identified in the legal notice. For any question, or to exercise your rights: contact@vantus.gg.

Data we process

Vantus deliberately processes a small amount of data:

• Discord identity: your Discord id, username and avatar URL, sent by Discord when you sign in. This is the only sign-in method: we neither create nor store any password.
• Game data you enter: your World of Warcraft character names, class, specialisations and game version.
• Organisation data: your guilds, your rank in each of them, your raid sign-ups and your actual attendance.
• Server technical logs: IP address, date and nature of the request, kept for security and troubleshooting.

What we do not process

We do not ask for your name, postal address, phone number or date of birth. We process no payment data: the service is free and involves no payment. We process no special-category data within the meaning of article 9 GDPR. We never sell, rent or trade any data.

Legal bases

Each processing activity rests on a specific legal basis:

• Performance of a contract (art. 6.1.b GDPR): Discord identity, characters, guilds and raids are necessary to provide the very service you asked for.
• Legitimate interest (art. 6.1.f GDPR): technical logs, to keep the service running and protect it from abuse.

Retention periods

Data is kept for as long as the purposes above require:

• Account and associated data: for as long as the account exists. Deleting your account is immediate and entirely in your hands (see below).
• Raid attendance history: kept by the guild after your account is deleted, but detached from your identity. Only the character name and its class remain, with no link to you or to Discord.
• Technical logs: 12 months at most.

Recipients

Your data is visible to members of the guilds you join, to the extent the service intends: your username, your shared characters and your raid attendance. That is the whole point of the tool.

Beyond that, data is accessible only to the editor and to OVH, acting as a processor. All data is stored in France. No transfer outside the European Union takes place.

Cookies and local storage

Vantus uses no advertising cookie, no audience-measurement tracker and no third-party analytics. You are therefore never shown a consent banner, and that is deliberate.

The only items stored on your device are strictly necessary to run the service and exempt from consent under article 82 of the French Data Protection Act:

• A session token kept in the browser (localStorage), which keeps you signed in from page to page.
• A technical session cookie, required to complete the Discord sign-in flow.

Your rights

Under the GDPR you have the following rights, which you can exercise at any time by writing to contact@vantus.gg:

• Access and portability: obtain a copy of your data.
• Rectification: most of your data can be edited directly in the app.
• Erasure: see the next section.
• Objection and restriction of processing.

Deleting your account

You can delete your account yourself, at any time, from Edit profile then Delete my account. Erasure is immediate: your Discord id, username and avatar are permanently erased, your characters are deleted and you leave every guild. Signing in with Discord again later creates a completely blank account.

If you own a guild, the app will first ask you to transfer its ownership to another member or to delete it: a guild, its raids and its members' rosters also concern other people, whose data cannot be destroyed on your request alone.

Minors

The service is not intended for people under 15. In France the digital age of consent is 15: below that age, signing up requires the joint consent of a parent or guardian. Discord separately requires a minimum age of 13 to hold an account.

Security

Traffic between your browser and the service is encrypted. Database access is restricted to the application server and is not exposed to the internet. As no payment data is processed, no payment secret is stored.

Complaints and changes

If you believe your data is not being processed lawfully, you may lodge a complaint with the CNIL (www.cnil.fr). This policy may change; the last-updated date appears at the top of this page, and any substantial change will be signalled in the app.