Privacy

Visiting the site

Reading the site needs no account. There are no ads, no analytics and no tracking cookies. The pages are hosted on GitHub Pages, the fonts come from Google Fonts, and a YouTube video loads from YouTube's privacy-enhanced player only when you press play. Those services see your network address when your browser fetches from them, as any website does.

Members on the Fylki pages

Each Fylki page lists the people who have that Fylki's role on the Völsung Discord server, with the name they go by there and their Discord picture. The list is read from Discord about once an hour, so it follows roles being given or taken away. The pictures are copied to this site, so viewing a page does not contact Discord. If you would rather not be listed, tell an officer and you will be left out.

Signing in as a member

Members can sign in with Discord. Discord then tells the clan's sign-in service your Discord user ID, your name and picture, and the roles you have on the Völsung Discord server. Only people with the Völsung Clansman role get in. For them we keep:

• your Discord user ID, the name you go by on our server and a link to your picture,
• when you first and last signed in, and when your role was last confirmed,
• for each browser you are signed in on, a record of the session: a one-way hash of its cookie and when it ends.

We never see your password or email address. We do not keep your list of roles or the access token Discord gives us; the token is cancelled as soon as your role is checked. People without the role are turned away and nothing about them is kept.

Cookies

• __Host-vsc_session keeps you signed in for 30 days. Only the sign-in service can read it; scripts on the pages cannot.
• vsc_signed_in only tells the pages that someone is signed in, so they can show your name. It holds no personal data.
• __Host-vsc_login lasts ten minutes during a sign-in and makes sure the answer from Discord belongs to your visit.

These are needed for signing in to work, so the site does not ask for consent to them.

Where and how long

The sign-in service runs on Cloudflare, and its database is held in the European Union. To stop abuse it counts sign-in attempts per network address, stored only as a hash and deleted within the hour.

• A session ends when you log out, or after 30 days.
• If you leave the clan or lose the Völsung Clansman role, you lose access within the hour and your account is deleted 4 months later.
• You can delete your data yourself at any time on your account page.
• Deleted data can stay in the database's automatic recovery history for up to 30 days before it is gone for good.

Why, and your rights

We keep this data to let members of the clan sign in and to show who belongs to each Fylki, which is the clan's legitimate interest in running its community (GDPR Article 6(1)(f)). You can ask an officer what we hold about you, have it corrected (change your name on Discord and sign in again) or deleted, and object to its use. You can also complain to your national data protection authority.