Skip to content
VEYRA

Legal

Privacy

What this website collects, why, and for how long. Written to match what the site actually does.

Template notice: the controller identity and contact details in brackets must be completed before publication. The processing descriptions below reflect the current implementation.

Controller

[Legal name and address of the controller]
Email: [data protection contact email]

Hosting and server logs

The site is hosted on Vercel. When you visit, the hosting provider processes technical data needed to deliver the site — IP address, request time, requested URL, referrer, and user-agent string. This is necessary to operate the service and to keep it secure (Art. 6 (1)(f) GDPR). Log data is retained only for a short period by the provider and is not combined with other sources by us.

No analytics or tracking

This site uses no analytics, no advertising, and no cross-site tracking. Fonts are served from the site’s own domain, so viewing a page makes no request to third-party font or CDN services. No cookies are set for visitors browsing the public pages.

Contact form

If you use the contact form, the name, email address, chosen topic, and message you submit are transmitted to a delivery endpoint configured by the operator (for example a team messaging webhook) so we can read and reply. The legal basis is your request to be contacted and our legitimate interest in handling enquiries (Art. 6 (1)(b) and (f) GDPR). We keep enquiry correspondence only as long as needed to deal with it and any follow-up.

Staff Portal

The Staff Portal at /staff is for internal personnel only and is not available for public registration. Sign-in uses Discord OAuth; linked-identity verification uses Roblox OAuth. For people who sign in, we process:

  • the stable Discord user ID and username returned by Discord;
  • the stable Roblox user ID and username returned by Roblox, once an account is linked;
  • a session cookie (HTTP-only, SameSite=Lax, cryptographically signed) that keeps you signed in, plus a short-lived cookie holding the OAuth state and code-verifier during sign-in.

The legal basis is the performance of the internal working relationship and our legitimate interest in securing access (Art. 6 (1)(b) and (f) GDPR). Access is limited to accounts on an internal allowlist; sessions expire and can be ended by signing out.

Third parties

Signing in contacts Discord and Roblox under their own privacy policies. Deployment and delivery involve Vercel and, if configured, the operator’s messaging provider. We do not sell personal data.

Your rights

Subject to the conditions in the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may also lodge a complaint with a supervisory authority. To exercise any right, contact us at the address above.

Changes

If the site’s data handling changes, this page will be updated to match.