This policy explains what personal data MKWorld Strat collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. The data controller is the publisher of MKWorld Strat (see the Legal Notice), reachable at mkworld.strat@gmail.com.
Data we collect
- Account data, received from your chosen sign-in provider (Google or Discord) when you log in: your name or username, email address, avatar image, and the provider account identifier.
- Content you submit: the YouTube links, track and shortcut details, descriptions, reports, and favorites you create.
- Technical data: standard server logs (including IP address) generated by our host for security and operation.
With your explicit consent, we also collect privacy-friendly usage analytics (see below). We use no advertising trackers, and we never sell or share your data for marketing.
Why we use it and on what legal basis
- To provide your account and the service — performance of a contract.
- To publish, moderate, and attribute submitted content, and to keep the site secure — our legitimate interest in running a functional, community-moderated database.
- To comply with legal obligations where applicable — legal obligation.
How long we keep it
We keep your account data for as long as your account exists. If you ask us to erase your account, we delete your personal account fields and anonymize the content you contributed (removing the link to you) so the community database stays intact. Server logs are retained for a limited period by our host for security purposes.
Who we share it with
We use the following processors to operate the service. They act on our behalf and may process data outside the EU under appropriate safeguards:
- Neon — PostgreSQL database hosting (account and content storage).
- Google (Google OAuth) — Sign-in via Google account.
- Discord (Discord OAuth) — Sign-in via Discord account.
- Google / YouTube — Embedded video playback and thumbnails.
- Umami (EU Cloud) — Privacy-friendly, cookieless website analytics — only if you opt in.
Embedded YouTube videos
Videos are embedded using YouTube's privacy-enhanced mode (youtube-nocookie.com), which avoids setting tracking cookies until you start playback. Video thumbnails are loaded from Google's servers, which means your IP address is transmitted to Google when a page with a video loads. Once you press play, Google may set cookies and process data under its own policy.
Cookies and analytics
We use a strictly necessary cookie to keep you signed in, plus a local preference for your light/dark theme. These are essential or functional and require no consent.
Separately, we offer optional analytics through Umami, a privacy-friendly, cookieless tool hosted in the EU. It helps us understand overall site usage; it sets no cookies, does not track you across other sites, and collects no advertising data. Analytics run only if you press "Accept" on the consent banner shown on your first visit. If you decline, no analytics are loaded. Your choice is stored locally in your browser; to change it, clear your browser storage for this site and the banner will appear again.
Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. To exercise any of these, email us at mkworld.strat@gmail.com; we will respond within 30 days. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).
Children
MKWorld Strat is not intended for anyone under 15 years old, and we do not knowingly collect their data. If you believe a minor has provided us data, contact us and we will delete it.