Privacy Policy

We collect only the information needed to operate, secure, and moderate Aduria:

• Account and profile data. Clerk manages authentication and may process your email address, connected sign-in method, session information, and security data. Aduria stores your Clerk user ID and, where available, your username, display name, and avatar URL.
• Server listing data. When you submit a listing, we store the Discord server ID and name, invite code and URL, icon, description, categories, partnership requirements, member and online counts, moderation status, and synchronization timestamps.
• Community activity and reports. We store favorites, listing ownership, promotion records, and safety or legal reports. A report may contain its reason, details, related server, account ID when signed in, name and email when supplied, legal explanation, good-faith confirmation, reference number, decision reason, moderation status, and timestamps. Reports may be submitted without an account.
• Acceptance records. When a server is submitted, we record the applicable Terms version and acceptance time so we can document the rules governing the submission.
• Technical data. Aduria and its infrastructure providers may process IP address, request time, requested URL, browser or device information, and diagnostic logs for delivery, security, rate limiting, and troubleshooting. Aduria temporarily uses IP addresses in application memory to enforce short rate-limit windows.
• Discord API data. Aduria obtains public invite metadata from Discord, including server identity, icon, invite information, and approximate member and presence counts.

Aduria is a public directory. Approved listings may publicly display the server name, icon, description, categories, partnership requirements, member and online counts, invite link, verification or promotion status, and the listing owner's public username, display name, or avatar. Do not submit personal or confidential information that you do not want to make public.

We process personal data for the following purposes and legal bases under the GDPR:

• Performance of a contract and pre-contractual steps: creating and securing accounts, publishing and managing listings, saving favorites, and providing requested service features.
• Legitimate interests: moderating listings and reports, documenting moderation decisions and accepted terms, preventing spam and abuse, refreshing public Discord server statistics, maintaining service reliability, investigating errors, and protecting Aduria and its users.
• Legal obligations: responding to valid legal requests and complying with applicable law.

Aduria does not currently use personal data for automated decision-making that produces legal or similarly significant effects.

Clerk uses cookies or similar technologies that are necessary to authenticate users, maintain sessions, prevent fraud, and secure accounts. Aduria does not currently use advertising pixels, behavioral advertising, or non-essential analytics cookies. If this changes, this Policy and any required consent controls will be updated before those technologies are used.

We disclose data only where necessary to provide or protect the service:

• Clerk provides authentication, account management, and session security.
• Supabase provides the database and related backend infrastructure.
• Vercel hosts and delivers the website and may process technical request and security logs.
• Discord receives server invite identifiers through server-side API requests so Aduria can validate listings and update public server statistics. Aduria does not send your Clerk identity with those requests.

We may also disclose information where required by law, to protect the rights and safety of users or others, or in connection with a lawful reorganization or transfer of the service. We do not sell personal data.

Some providers or their subprocessors may process data outside the Czech Republic or European Economic Area, including in the United States. Where required, transfers are protected by an applicable adequacy decision, the EU–U.S. Data Privacy Framework, Standard Contractual Clauses, or another lawful safeguard made available by the relevant provider. Further information is available in the providers' privacy notices and data processing terms.

We retain personal data only for as long as needed for the purposes described above, to resolve disputes, protect the service, and meet legal obligations. The criteria depend on the type of data:

• Account-linked profile data is kept while your account is active. When Clerk notifies Aduria that an account was deleted, Aduria anonymizes the local profile, removes its favorites, and deactivates its listings for moderation review.
• Listings remain until deleted by their owner, removed by moderation, or no longer needed. Deactivated listings and related moderation records may be retained where necessary for safety, abuse prevention, disputes, or legal compliance.
• Safety and legal reports, contact details, and decision records are retained only as long as reasonably necessary to investigate the report, enforce platform rules, document decisions, prevent abuse, and handle related disputes or legal obligations. They may be anonymized when identifying data is no longer required.
• Short-lived rate-limit records expire with their applicable rate-limit window. Infrastructure and security logs are retained according to operational necessity and the relevant provider's retention practices.

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email privacy@aduria.eu. We may need to verify your identity before completing a request and will respond within the period required by applicable law.

You may also lodge a complaint with the Office for Personal Data Protection of the Czech Republic or another competent supervisory authority.

We use access controls, authenticated requests, database row-level security, moderation controls, rate limiting, and other reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

Aduria is not intended for children under 13. If the law where you live requires a higher minimum age to use an online service, that higher age applies. If you believe a child has provided personal data contrary to these requirements, contact us so we can investigate and take appropriate action.

Listings contain links to Discord and may contain information provided by third parties. Their services and privacy practices are governed by their own policies. Aduria is not responsible for the privacy practices of external websites or Discord communities.

We may update this Policy when the service, providers, or legal requirements change. The current version will always be published on this page with its latest revision date. If a change materially affects how we process personal data, we will provide an appropriate additional notice.

Questions or requests about this Policy or Aduria's handling of personal data can be sent to privacy@aduria.eu.