Loading Oh boi...
Become a minion today!
Home / Privacy Policy

Privacy Policy

Note: this policy operates under the Etaf principle of stewardship, Knowledge revealed, Fate respected, Source acknowledged, Flame applied only where consent permits.

1. Data Controller

The data controller for personal data processed through this platform is:

Ridoco
KVK: 95439609
BTW: NL005153257B49
De Nieuwe Erven 3, 5431 NV Cuijk, Netherlands
Phone: +31 6 49154776
Email: management@ridoco.com

2. Data We Collect

2.1 Account data

When you register or log in via Discord OAuth2, we receive and store:

  • Discord User ID, username, display name, avatar URL
  • Email address (if authorized)
  • OAuth2 access and refresh tokens (stored securely)

2.2 Platform-generated data

  • Profile data: Username, display name, avatar, banner, about me, status
  • Activity data: Activity points, rank, participation records
  • Currency: Essence of Hell (EoH) balance and transaction history
  • Linked accounts: Steam ID, Minecraft UUID, Patreon, and other linked services
  • Subscriptions: Subscription tier, provider, payment references
  • Content: Forum posts, comments, submissions you create

2.3 Automatically collected data

  • IP address (for security and rate limiting)
  • Browser User-Agent string
  • Essential cookies for session management

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Art. 6):

  • Contract performance (Art. 6(1)(b)): Account management, service delivery, currency transactions
  • Legitimate interest (Art. 6(1)(f)): Security, fraud prevention, service improvement
  • Consent (Art. 6(1)(a)): Non-essential cookies, marketing communications
  • Legal obligation (Art. 6(1)(c)): Tax records for purchases, lawful requests

4. How We Use Your Data

  • Authenticate and manage your account
  • Display your profile, content, and activity on the platform
  • Process currency transactions and maintain financial records
  • Deliver subscription benefits and rank rewards
  • Moderate content and enforce community rules
  • Send service-related notifications
  • Generate aggregate, anonymized analytics

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Payment processors (Stripe, PayPal, MultiSafePay): To process purchases. These act as independent data controllers.
  • Hosting providers: Servers are hosted within the EU/EEA under Data Processing Agreements.
  • Connected services: When you link accounts (Discord, Steam, Patreon), data is shared with those services per their privacy policies.
  • Law enforcement: When required by applicable law or valid legal process.

6. Data Retention

  • Account data: Retained while active. Deleted within 30 days of account deletion.
  • Transaction records: Retained for 7 years (Dutch tax law requirement).
  • Content: Retained while visible. Deleted content removed within 30 days.
  • Session cookies: Expire per session or after configured timeout.

7. Your Rights (GDPR Art. 15-22)

As an EU/EEA resident, you have the right to:

  • Access (Art. 15): Request a copy of your personal data
  • Rectification (Art. 16): Correct inaccurate data
  • Erasure (Art. 17): Request deletion ("right to be forgotten")
  • Restriction (Art. 18): Request restriction of processing
  • Portability (Art. 20): Receive your data in machine-readable format
  • Objection (Art. 21): Object to processing based on legitimate interest
  • Withdraw consent: Where processing is based on consent

To exercise these rights, please open a support ticket first. If unavailable, email management@ridoco.com (or privacy@doombringerz.com as a secondary). We respond within 30 days. You may also lodge a complaint with the Autoriteit Persoonsgegevens (AP) in the Netherlands.

8. International Data Transfers

Data is stored within the EEA. Transfers outside the EEA (e.g., via Discord APIs) are covered by Standard Contractual Clauses or adequacy decisions.

9. Data Security

  • Passwords stored as irreversible cryptographic hashes
  • All data in transit encrypted via TLS/HTTPS
  • Access restricted to authorized personnel
  • Session tokens stored in secure, httpOnly cookies

10. Children's Privacy

This platform is not directed at children under 13. We do not knowingly collect data from children under 13. Contact us if you believe a child has provided personal data.

11. Changes

We may update this policy. Material changes are communicated via the platform. Continued use after changes constitutes acceptance.

12. Contact

Ridoco
De Nieuwe Erven 3, 5431 NV Cuijk, Netherlands
KVK: 95439609 | BTW: NL005153257B49
Email: management@doombringerz.com
Phone: +31 6 49154776

Contact Me