This is a translation. The French version is the only legally binding text.
This page explains what data Astralya processes, why, for how long, and how to exercise your rights. It describes how the site actually works and will be updated if that changes.
Data controller
Walyverse, sole proprietorship. Contact for any question about your data: [email protected].
What we process, and why
Reading the site: the site measures its traffic without cookies. For each page viewed, it records an anonymous fingerprint valid for the day (calculated from the IP address and the browser with a random salt destroyed the next day; the IP address itself is not kept), the page viewed and the site you came from, reduced to its domain name. Purpose: knowing which pages are read, in order to improve them; this data is neither combined with other data nor passed on to third parties. Legal basis: our legitimate interest in measuring the site's traffic. Retention: fingerprints are deleted after 30 days, and only anonymous totals are kept after that. To object, turn on "Do Not Track" or "Global Privacy Control" in your browser: your visits are then not counted. Your preferences (theme, language, username entered) stay in your browser (see the Cookies page). Like any web server, the host records the IP address and the page requested in its technical logs, for the security of the service.
Voting: your username, the voting site chosen and the time of the vote. To verify the vote with the voting site, your IP address is sent to it; we keep only an encrypted, irreversible fingerprint of it, which is used to enforce the delay between two votes. Legal basis: performance of the voting service you request.
Buying: the username receiving the order, the items, the amount and the status of the order. Payment is processed by Stripe, which receives your payment details and your email address for the receipt; we neither see nor store any bank details. Legal basis: performance of the sales contract, then our accounting obligations.
Linking your Discord account (optional): the ID, name and avatar of your Discord account, linked to your username, to display your roles and send you the vote reminders you have enabled. Legal basis: your consent, which can be withdrawn at any time with /discord unlink.
Receiving vote reminders (optional): when you turn on notifications on the Vote page, your browser gives us a subscription address with its notification service (Google, Mozilla, Apple or Microsoft) and two encryption keys. We keep them with your username, your language and the domain of the site used, to send you a message when a vote is available again. Legal basis: your consent, which can be withdrawn by turning the reminders off on the Vote page or by removing the permission in your browser; the subscription is then deleted.
Applying to join the team (optional): the ID and name of your Discord account, the username linked to it, the position chosen and your answers (introduction, availability, background, motivation). Purpose: reviewing your application and arranging an interview. Legal basis: pre-contractual steps taken at your request when you apply.
Playing: the game server records your username, your Minecraft ID, your progress and, for moderation, your messages and login IP addresses. Legal basis: performance of the game service and our legitimate interest in protecting it from abuse.
For how long
- Orders: 10 years, the period required by accounting obligations.
- Votes and rankings: as long as needed to display the server's history and rankings; the IP address fingerprint is deleted once the delay between two votes has elapsed.
- Discord link: until you remove it.
- Vote reminders: until you turn them off or the notification service reports the subscription as expired.
- Applications: 180 days after the decision.
- Game data: as long as the account is active; it may be deleted after a long period of inactivity, according to the rules announced in game.
- Host's technical logs: 12 months at most.
Who receives this data
Nobody buys it and we sell it to nobody. It is processed by our service providers, solely for their assigned task: OVH SAS and Hetzner Online GmbH (hosting), Stripe (payment), Discord (account linking, if you use it), your browser's notification service (Google, Mozilla, Apple or Microsoft, for vote reminders if you turn them on), and the voting sites you choose.
Your rights
You may request access to your data, its rectification, its erasure or the restriction of its processing, object to processing based on our legitimate interest and withdraw your consent. Write to [email protected] stating your username; we reply within one month. Some data must be kept despite an erasure request, for example orders for accounting purposes.
If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Minors
The site collects no data beyond what the requested service requires. A parent may exercise the rights of their minor child at the address above.