ULTRA VOTE / 10.11.2026

Privacy

Data we process

Accounts: public tag, email and verification status, password hash, linked provider IDs and optional MFA secrets stored encrypted. Service: server listings, favorites, votes, points ledger, campaigns, reports and moderation history. Security: session and anti-abuse identifiers, keyed network hashes, request-rate signals, a random device identifier kept in local storage and non-reversible browser signals (screen, time zone, language, canvas/WebGL, audio and font hashes). Raw IP addresses and raw fingerprint values are never stored in vote records. No advertising tracking or sale of personal data.

Purposes and recipients

We process data to provide the requested service and protect it against abuse (performance of the service and legitimate interests). Public listings, tags and aggregate statistics are visible to visitors. Authorized moderators access reports and security decisions. Hosting and email providers process necessary technical data. Google, Discord and Telegram receive requests only when you choose their sign-in; YouTube loads only after your agreement.

Retention

Sessions: 30 days. Email links: 15 minutes; MFA and OAuth challenges: 10 minutes. Network/browser vote identifiers, device signals and player identifiers: 90 days; server-status samples: 30 days. Security decisions: 90 days. Backups: 14 days. Account data is retained while the account exists; deletion removes or anonymizes personal data. Non-identifying vote totals and accounting records may remain. Moderation records are retained for handling disputes and abuse, subject to periodic review.

Your rights

Request access, correction, deletion, portability, restriction or objection by email. We aim to respond within one month. You may also complain to the French data-protection authority. hello@pexal.fun. CNIL