This policy explains what personal data MK8DX Times collects, why, and what your rights are, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
Hennetin Hugo, 12 rue des Chardonnerets, 77181 Courtry, France — contact: contact@mk8dxtimes.com.
2. Data we collect
When you submit a time (all provided by you):
- player name and country (your world region, e.g. Europe, is deduced from your country);
- track, engine class and time;
- your proof: a link or an uploaded image/video — note that a proof may contain your in-game name, your voice or your image if you include them;
- an optional comment;
- your Discord user ID and username, when you confirm the submission with
/verif; - the date of submission, and the review result (approved/rejected, moderator name, optional reason).
Technical data: your IP address is used temporarily, in memory only, to limit the number of submissions (anti-spam). It is never written to our database and is forgotten within 10 minutes. Our hosting provider may keep standard server logs for security purposes.
We do not ask for your email address or real name, and we do not use any analytics or advertising tools.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Reviewing your submission and publishing it on the leaderboards | Performance of the service you request by accepting the Terms of Use (Art. 6(1)(b) GDPR) |
| Checking that you own your player name (Discord verification) and sending you notifications by Discord direct message (review status, overtaken in a top 10) | Performance of the service you request (Art. 6(1)(b) GDPR) and our legitimate interest in preventing impersonation (Art. 6(1)(f) GDPR) |
| Preventing spam and abuse | Our legitimate interest in keeping the Site working (Art. 6(1)(f) GDPR) |
| Answering your requests | Our legitimate interest / legal obligations |
4. What is public
Once a time is approved, the following are publicly visible on the Site: player name, country and world region, times, rankings, points and proof (link or file). Rejected and pending submissions are never public. The link between your player name and your Discord account is not displayed on the Site; it is only visible to the moderators.
5. Who receives your data
- Moderators: each submission is sent, with the Discord account that confirmed it, to a private channel of our Discord server, where volunteer moderators review it. Our Discord bot also sends you direct messages: your verification code, confirmation that your time is waiting for review, the result of the review, and a notice when someone overtakes or ties you in the top 10 of a track. Discord is operated by Discord Inc. (United States); data transferred to it is covered by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. See Discord's privacy policy.
- Our hosting provider: Dyjix SAS, which stores the Site and its database.
Your data is never sold or used for advertising.
6. Retention
- Approved times: kept as long as they are displayed on the leaderboard, or until you ask for their deletion.
- Rejected submissions: automatically deleted, including any uploaded file, 30 days after the review.
- Pending submissions: kept until they are reviewed. Submissions that are never confirmed on Discord are deleted, including any uploaded file, after 24 hours.
- Verification codes: valid for 10 minutes, then deleted.
- Link between your player name and your Discord account: kept as long as your player profile exists.
- The Discord review message may remain in the moderators' private channel; it is deleted on request.
7. Cookies and local storage
The Site does not use cookies or trackers. It uses your browser's local storage, only on your device, to remember your player name and country (to pre-fill the form). You can clear it at any time from your browser settings. Fonts and flags are hosted on our own server: no third-party service is contacted while you browse, except external proof links you choose to open.
8. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise them — for example to change your player name or remove all your times — contact contact@mk8dxtimes.com, indicating your player name. As we have no accounts, we may ask you to prove that you own the player name, for example by contacting us from the Discord account linked to it. We answer within one month.
You also have the right to lodge a complaint with a supervisory authority, such as the CNIL in France (cnil.fr) or the authority of your country of residence.
9. Security
We take reasonable measures to protect your data (restricted access to the server and database, moderation limited to authorised Discord members). No system is perfectly secure, however.
10. Children
If you are under the age of digital consent in your country (15 in France), please ask a parent or legal guardian before submitting a time. A parent can ask us to delete a child's data at any time.
11. Changes
We may update this policy. The date of the last update is shown at the top of this page.