Privacy Policy (EU/Germany)
Last updated: 2026-03-05
1. Controller (Art. 4(7) GDPR)
This service ("blau" / "bluejutzu") processes personal data to provide Discord account linking, authenticated sessions, and dashboard functionality.
2. Data we process
- Discord account identifiers (Discord ID, display name, avatar hash).
- OAuth tokens received from Discord (access token, refresh token, token metadata).
- Session data (session token in HTTP-only cookie, creation/expiry timestamps, last seen time, device metadata).
- Operational and security logs needed to run and protect the service.
3. Purposes and legal bases (Art. 6 GDPR)
- Account linking and authenticated access: Art. 6(1)(b) GDPR (contract performance).
- Security, abuse prevention, and service reliability: Art. 6(1)(f) GDPR (legitimate interest).
4. Session choices
- Session-only: cookie is not persisted and is cleared when the browser session ends.
- Keep signed in: cookie is persisted for up to 30 days on that browser.
- Neither option makes activity anonymous. Data remains tied to the active session and Discord account and may appear in service logs.
5. Storage periods
- Server-side session records: up to 30 days.
- Session-only cookies: removed by the browser when the browser session ends.
- Persistent "Keep signed in" cookies: up to 30 days or until logout.
- Discord OAuth tokens remain stored while account linking is active.
6. Recipients and international transfers
Data is processed by infrastructure providers and Discord where technically required. If data is transferred outside the EEA, transfers should be protected by an adequacy decision or Standard Contractual Clauses (SCCs), as required by GDPR.
7. Your rights
Under Arts. 15-22 GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests.
8. Complaint right
You have the right to lodge a complaint with a data protection supervisory authority, including in your EU member state of habitual residence, place of work, or alleged infringement.
Also see our Terms of Service.