Privacy Policy
Privacy Policy in accordance with GDPR — Last updated: March 2026
1. Data Controller
Keno Coco
Am Taubenschlag 5
41352 Korschenbroich, Germany
Email: contact@kenodev.com
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel processes your IP address to deliver the page. Data transfer to the USA is covered by EU Standard Contractual Clauses (SCCs). For more information, see Vercel's Privacy Policy.
3. Data We Collect
3.1 Discord OAuth
When you sign in via Discord, we receive your Discord user ID, username, avatar URL, and email address. This data is used to create and maintain your account. Legal basis: Art. 6(1)(b) GDPR (contract performance).
3.2 Usage Data
We track embed click events (click counts per partner) using our own internal analytics. No third-party analytics tools (e.g. Google Analytics) are used. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service).
3.3 Payment Data
Payments are processed by Stripe, Inc. We do not store your credit card details. Stripe processes your payment data in accordance with Stripe's Privacy Policy. Legal basis: Art. 6(1)(b) GDPR (contract performance).
4. Cookies
We use the following cookies, all of which are essential for the service to function:
- Session cookie — authentication session managed by BetterAuth
- sidebar:state — remembers whether the sidebar is expanded or collapsed
- webhook-cafe-active-company — stores your currently selected company
No marketing or tracking cookies are used. Legal basis: Art. 6(1)(f) GDPR (legitimate interest — essential cookies required for functionality).
5. Data Storage & Retention
Your data is stored in MongoDB (cloud-hosted). We retain your account data for as long as your account exists. When you delete your account, your personal data is deleted within 30 days.
6. Your Rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
To exercise these rights, contact us at contact@kenodev.com. You also have the right to lodge a complaint with a supervisory authority (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia).
7. Data Transfer to Third Countries
Some service providers (Vercel, Stripe) are based in the USA. Data transfers are secured through EU Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR.
8. Changes to This Policy
We may update this privacy policy from time to time. The latest version is always available at this URL. We will notify registered users of significant changes.