Introduction
ITV is a volunteer-run gaming community centered around Minecraft Hypixel Housing. This Privacy Policy explains what information we collect when you use ITV's Services — including our Discord servers, website, Discord bots, and related community infrastructure — how we use that information, and what choices you have.
We take your privacy seriously. We collect only what we reasonably need to operate the community, and we do not sell your personal information.
This policy uses the word "Services" to refer collectively to ITV's Discord servers, website, bots, ticketing system, and any other community infrastructure we operate.
1. Information We Collect
1.1 Information You Provide Directly
When you interact with the Services, you may provide us with information directly, including:
- Application submissions: Responses you submit when applying for roles, positions, or community programs.
- Support tickets: Questions, reports, or requests you submit through our ticketing system.
- Bug reports: Technical issue reports you file with us.
- Appeals: Appeals you submit regarding moderation decisions.
- Other community forms: Any other information you submit voluntarily through ITV's platforms.
1.2 Account and Identity Information
When you log in to the ITV website using Discord OAuth (sign in with Discord), we receive certain information from Discord, which may include:
- Your Discord user ID
- Your Discord username and display name
- Your Discord avatar (profile picture)
- Your email address, if requested and authorized by you during the OAuth flow
We use this information solely to create and manage your account on the ITV website and to associate your submissions and records with your identity.
1.3 Automatically Collected Information
When you access the ITV website, our servers and infrastructure may automatically collect certain technical information, including:
- IP addresses: Your internet protocol address at the time of access.
- Browser and device information: Your browser type, operating system, and general device category.
- Access logs: Pages visited, features used, timestamps, and referring URLs.
- Usage analytics: Aggregate and individual data about how the website is used, which may be collected directly by us or through third-party analytics tools.
1.4 Cookies and Similar Technologies
The ITV website uses a small number of cookies that are strictly necessary to provide the website and keep it secure. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. Because the cookies we set are technically required to operate the Service you have requested, under Art. 6(1)(f) GDPR and § 25(2) TTDSG they do not require prior consent, and we therefore do not display a cookie consent banner.
The cookies we use are:
| Cookie | Purpose | Duration |
|---|---|---|
itv-session / __Host-itv-session | Keeps you logged in after authenticating with Discord. Essential for accessing your account. | Up to 7 days |
oauth-state | Security token that protects the Discord login flow against cross-site request forgery (CSRF). | ~10 minutes (temporary) |
csrf token | Protects form and state-changing requests against CSRF attacks. | Session |
All of these cookies are HttpOnly and (in production) Secure with SameSite restrictions, meaning they cannot be read by client-side scripts and are only sent over encrypted connections. You can delete cookies at any time through your browser settings, but doing so will log you out and may prevent the website from functioning correctly.
1.5 Bot and Discord Server Data
Our Discord bots, operating within ITV's Discord servers, may process or log:
- Message content and metadata, to the extent necessary to execute bot commands or enforce community rules.
- User IDs and usernames, for the purposes of moderation, ticketing, and community features.
- Moderation actions, warnings, and related records associated with your Discord account.
- Ticket contents and support communications.
ITV bots do not continuously log or archive all messages in our servers. Data is processed as needed to provide the bot's functions and, where retained, is stored to support moderation and support operations.
1.6 Moderation Records
ITV maintains moderation records which may include:
- Warnings, mutes, bans, and other moderation actions taken against your account.
- Reports submitted about your account or by your account.
- Communications related to appeals and dispute resolution.
2. How We Use Your Information
ITV uses the information we collect to:
- Operate and maintain the Services, including authenticating your account, running bot features, and managing community infrastructure.
- Process your submissions, including applications, support tickets, bug reports, and appeals.
- Moderate the community and enforce our Terms of Service and Community Rules.
- Maintain safety and security, including identifying, investigating, and addressing abuse, unauthorized access, or other harmful activity.
- Communicate with you about your account, tickets, applications, or moderation matters.
- Improve the Services, using analytics and usage data to understand how the community uses our platforms.
- Maintain records for continuity of moderation and staff operations.
We do not use your information for advertising. We do not sell, rent, or trade your personal information to any third party for commercial purposes.
3. How We Share Your Information
ITV does not sell personal information. We may share information in the following limited circumstances:
3.1 Within ITV Staff
Community staff with appropriate roles and responsibilities may access your information as needed to perform their duties — for example, reviewing a support ticket, processing an application, or handling a moderation case.
3.2 Third-Party Service Providers
ITV uses third-party services to host and operate the website, bots, and infrastructure. These providers may have technical access to data stored on their systems. We use providers that offer reasonable data protection practices, but we cannot guarantee the practices of third-party services. Key third-party services include:
- Discord: Our primary platform for community interaction and account authentication. Discord's Privacy Policy governs data processed through Discord directly.
- Website and bot hosting providers: Cloud hosting services used to run the website, database, and bot infrastructure.
- Analytics tools: None currently.
3.3 Legal Requirements
ITV may disclose information if we believe in good faith that doing so is necessary to comply with applicable law, respond to valid legal process, or protect the safety of our users or the public.
3.4 Community Safety
In rare circumstances, ITV may share moderation records or relevant information with the operators of connected platforms (such as Hypixel or other community servers) where we believe doing so is necessary to protect users from harm.
4. Discord Authentication
The ITV website uses Discord OAuth 2.0 to allow users to log in. When you authenticate using Discord:
- You are directed to Discord's authorization page, where you can review and approve the permissions ITV is requesting.
- ITV receives only the information you authorize in the Discord OAuth consent flow.
- ITV does not receive or store your Discord password.
- You can revoke ITV's access to your Discord account at any time through your Discord account settings under Authorized Apps.
Revoking OAuth access will prevent future logins via Discord but will not automatically delete data already stored by ITV.
5. Data Retention
ITV retains data for as long as it is reasonably necessary for the purposes for which it was collected:
- Account data (Discord user ID, username, display name) is retained while you have an active account or association with our Services. You may request deletion; see Section 6.
- Application and submission data is retained for as long as relevant to community operations, typically for the duration of your membership.
- Moderation records are retained indefinitely to support ongoing community safety and to inform future moderation decisions. Serious violations may be retained permanently.
- Support ticket contents are retained for up to 12 months after resolution and may be retained longer if related to an active matter.
- Access logs and IP addresses are retained for up to 90 days for security purposes.
- Analytics data may be retained in aggregate form indefinitely; individually identifiable analytics data is retained only as long as operationally necessary.
When data is no longer needed, we delete or anonymize it using reasonable methods.
6. Your Rights and Choices
We respect your ability to understand and control your information. Depending on your location and applicable law, you may have certain rights regarding your personal data. Regardless of legal requirements, ITV will make reasonable efforts to honor the following requests:
- Access: You may request to know what information ITV holds about you.
- Correction: You may request that inaccurate information be corrected.
- Deletion: You may request that we delete your personal data. Note that we may retain certain data where we have legitimate operational reasons to do so (for example, moderation records for active bans, or information required for legal compliance).
- Data export: Where feasible, you may request a copy of data you have submitted to us.
To exercise any of these rights, please contact us using the information in Section 11. We will respond to requests within a reasonable time. We may need to verify your identity before fulfilling a request.
Please note: ITV is a small volunteer-run community with limited administrative resources. We will act in good faith to address your requests but may not be able to respond to every request as promptly as a larger organization.
For users in the European Union / EEA (GDPR): In addition to the rights above, you have the right to object to or restrict certain processing, the right to data portability, and the right to withdraw consent at any time where processing is based on consent. The legal bases on which we process your data are: performance of a service you request (Art. 6(1)(b) GDPR, e.g. account login), our legitimate interests in operating and securing the community (Art. 6(1)(f) GDPR, e.g. moderation, security logging), and, where applicable, your consent (Art. 6(1)(a) GDPR). You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been handled unlawfully.
7. Security
ITV takes reasonable steps to protect your information from unauthorized access, loss, misuse, or disclosure. These measures include:
- Restricting access to personal data to staff members who need it to perform their duties.
- Using third-party hosting providers with their own security practices.
- Storing authentication credentials using Discord OAuth (we do not store passwords).
However, no system is perfectly secure. ITV cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by a breach of security. If you believe there has been a security incident involving your information, please contact us promptly.
8. Children and Minors
ITV's community includes members who may be under 18. We do not knowingly collect personal information from children under 13 beyond what is incidentally received through Discord authentication (governed by Discord's own policies).
If you are a parent or guardian and believe your child under 13 has provided personal information to ITV beyond the scope of Discord's own protections, please contact us and we will make reasonable efforts to address the situation.
We encourage parents and guardians to review their child's use of online communities and to set appropriate guidelines.
9. Third-Party Services
Our Services interact with third-party platforms whose data practices are governed by their own privacy policies. We encourage you to review the privacy policies of the following services where relevant to your use:
- Discord: https://discord.com/privacy
- Hypixel: https://hypixel.net/privacy (if applicable)
ITV is not responsible for the privacy practices of third-party services.
10. Changes to This Policy
ITV may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on the website and/or announce the update in our Discord server, and update the "Last Updated" date at the top of this document.
Your continued use of the Services after changes are posted means you accept the updated policy. If you do not agree to changes, please stop using the Services and contact us if you wish to request data deletion.
11. Contact Information
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact ITV at:
- Email: levi@itv-cord.org
- Discord: ichmagzotac
- Website: itv-cord.org