Privacy Policy

Version: July 2026

1. Controller

Kicks Department, owner Lion Frankenstein, Klingenstraße 24, 97256 Geroldshausen, Germany, email: info@kicksdepartment.de, phone: +49 152 23959238

2. Data processed and purposes

We process personal data to provide and bill the membership (Art. 6(1)(b) GDPR):

• Discord login (OAuth2): Discord user ID, username, email address and avatar – for sign-in and automatic role assignment on the server.
• Payment data: processed by Stripe; we do not store card or bank details ourselves, only Stripe customer and subscription references plus tier and subscription status.
• Email: your email address for welcome and transactional emails.
• Server logs (hosting): IP address, time and page accessed to ensure operation (Art. 6(1)(f) GDPR).

3. Recipients / processors

We use the following service providers, with data processing agreements (Art. 28 GDPR) in place where required:

• Stripe Payments Europe, Ltd. (Ireland) – payment processing and subscription management. Stripe may transfer data to the USA based on EU standard contractual clauses or the EU-US Data Privacy Framework.
• Discord Inc. (USA) – OAuth2 login and role management. Transfers based on standard contractual clauses or DPF.
• Supabase Inc. – database hosting (member data, EU region selectable).
• Resend (Plus Five Five, Inc., USA) – transactional emails.
• Vercel Inc. (USA) – website hosting.

4. Retention

Member data is stored for the duration of the membership and deleted afterwards, unless statutory retention obligations apply (e.g. up to 10 years for invoice data under German tax law).

5. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Contact info@kicksdepartment.de. You also have the right to lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA).

6. Cookies

We only use technically necessary cookies (session cookie for login). No advertising tracking takes place.