Privacy Policy

1. Introduction

Parley (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our Discord matchmaking bot and related services (collectively, the “Service”). Because our primary database infrastructure is hosted in the European Union (Amsterdam), we align our data practices with the principles of the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Discord Bot and Web Dashboard Authentication

To allow server administrators to manage Parley and users to view their profiles, we utilize Discord OAuth2 authentication. When you log into our web dashboard, we request strictly necessary scopes (identify and guilds). We collect and store your Discord User ID, username, avatar, and server memberships. We do not request, collect, or store your email address or passwords.

Before you are redirected to Discord, our sign-in page uses Cloudflare Turnstile to distinguish legitimate users from automated abuse. Turnstile may process technical interaction signals (such as your IP address, browser characteristics, and challenge responses) and transmit a one-time verification token to our servers. We validate that token with Cloudflare before starting OAuth. We do not use Turnstile for advertising or cross-site tracking. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in securing authentication and preventing abuse).

2.2 Telemetry, AI Matchmaking, and Third-Party Controllers

To power our matchmaking, bracket generation, and auto-balancing, we utilize an artificial intelligence model hosted via OVI.run. Our AI analyzes gameplay telemetry to evaluate skill levels and assign brackets.

Because Ubisoft does not provide direct public APIs for all necessary metrics, we transmit your provided gaming username to stats.cc, an independent third-party data controller. We use their closed API to retrieve your public Rainbow Six Siege statistics (e.g., Rank points, K/D ratio, win rates). We do not share your internal Parley match history or ELO with stats.cc.

Automated Profiling: Under the GDPR and the EU AI Act, our matchmaking constitutes automated profiling. Our AI model bases its decisions strictly on the performance telemetry retrieved from stats.cc and your internal Parley match history. It does not use demographic or sensitive personal data.

2.3 Cookies, Local Storage, and Edge Processing

When you interact with our bot or companion dashboard, requests are processed through Cloudflare Workers. During this routing, standard network data such as IP addresses, browser types, and interaction timestamps are temporarily processed at edge nodes for security, caching, and abuse prevention.

We use only the following cookies and browser storage on our website. We do not use third-party marketing, advertising, or analytics cookies.

• parley_discord_session (essential cookie): keeps you signed in to the web dashboard after Discord OAuth. HttpOnly, SameSite=Lax, duration aligned with the Discord access token (typically up to seven days). Legal basis: Art. 6(1)(b) GDPR (performance of the service you request).
• parley_discord_oauth_state (essential cookie): short-lived OAuth security token during sign-in (about ten minutes). Legal basis: Art. 6(1)(b) GDPR and legitimate interest in securing authentication (Art. 6(1)(f) GDPR).
• parley-theme (local storage, optional): remembers your light/dark theme preference if you choose “Accept all” on our cookie notice. Legal basis: Art. 6(1)(a) GDPR (consent). If you choose “Essential only,” we do not persist this preference.
• parley_cookie_consent (local storage): records your cookie notice choice so we do not ask again until our policy version changes. Legal basis: Art. 6(1)(f) GDPR (demonstrating compliance).

3. How We Use Your Information

We use your data exclusively to operate and improve Parley:

• Matchmaking: Processing gameplay telemetry through our AI model (hosted via OVI.run) and your internal Parley match history to evaluate skill levels, assign brackets, and generate balanced team distributions.
• Tournament Operations: Managing team rosters, bracket progression, and enforcing guild-specific matchmaking rules.
• Service Delivery: Sending automated match results and tournament announcements directly to your Discord channels.

4. Data Storage and Third-Party Sharing

Your persistent data is stored on heavily secured database infrastructure hosted by 24fire.de, located in Amsterdam, Netherlands. We do not sell your personal data. We share data only with the following entities to operate the Service:

• Cloudflare: For edge computing, DNS routing, DDoS protection, and Turnstile bot protection on our web sign-in page (infrastructure and security). See Cloudflare’s Privacy Policy.
• 24fire.de: For primary database hosting within the European Union (infrastructure).
• OVI.run: For processing matchmaking telemetry via our AI model (processor).
• Stats.cc: We transmit your gaming username to this independent data controller solely to retrieve your public gameplay statistics.

5. Data Retention and Anonymization

We retain your data for as long as you actively use Parley. Transient data expires automatically. If you request account deletion, we will purge your personal identifiers (Discord User ID, external platform usernames). However, to preserve the integrity of historical tournament brackets and guild match history, your past match performances will be retained but fully anonymized and decoupled from your identity.

6. Security

We implement rigorous technical measures to protect your data, relying on modern encryption in transit (TLS) and strict access controls to our Amsterdam servers. While we take every reasonable precaution to secure our database queries and API endpoints, no electronic transmission is completely infallible.

7. Age Requirements and Children’s Privacy

Parley relies on Discord’s authentication infrastructure. Under Discord’s Terms of Service and the GDPR, users in Germany must be at least 16 years old to use the platform. We do not knowingly collect data from anyone under the applicable age of digital consent. By authenticating with Parley via Discord OAuth2, you confirm you meet Discord’s minimum age requirements for your region. If we are notified that a user is under the required age, we will immediately delete their Parley profile data.

8. Your GDPR Rights

Because we operate in the EU and utilize automated profiling, you have the following rights regarding your personal data:

• Access & Portability: Request a readable copy of the player profile and OAuth2 data we hold.
• Rectification: Correct inaccurate Discord associations.
• Erasure: Request the anonymization of your data (“Right to be Forgotten”).
• Explainability: Because you are subject to automated matchmaking decisions by our AI, you have the right to request an explanation of how your bracket was determined or request human intervention if you believe the AI made a significant error.

To exercise any of these rights, please contact us via the instructions in our Legal Notice. We will process your request within 30 days.

9. Changes to This Policy

We may update this Privacy Policy as we alter our matchmaking algorithms or integrate new third-party data sources. Material changes to how we handle your telemetry or Discord data will be announced via our bot in your Discord server before taking effect.