▸ Legal

Privacy.

SCDark is a fan project and collects as little data as possible. No ad tracking, no sharing with third parties for advertising.

1. Controller

The controller within the meaning of the GDPR is:
Martin Wilke
E-308, Paradesa Tropika, Persiaran Meranti, Bandar Sri Damansara, 52200 Kuala Lumpur, Malaysia
Email: scdark [at] notgoodenough [dot] cc

2. Hosting and server logs (reach measurement)

The site runs on our own server behind Cloudflare (reverse proxy/CDN). Cloudflare processes the requesting IP address to route traffic to our server.

In addition we record server-side per request: the requested path, the language served, the user agent, the referrer URL, the country of origin (via the Cloudflare header cf-ipcountry) and the IP address. This data serves the secure operation of the website, error analysis and a simple internal reach measurement.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in operation, security and reach measurement). Retention: 90 days, then automatic deletion.

3. Login via Discord (OAuth)

Login is exclusively via Discord (OAuth 2.0). Discord provides us with your Discord ID, display name, avatar image and email address, which we store for your account. We never ask for your Discord password.

The legal basis is the performance of the user relationship (Art. 6 (1) (b) GDPR). Discord Inc.'s privacy policy applies in addition.

4. Cookies

We only set technically necessary cookies:

  • Session cookie (Better Auth): keeps you signed in after login.
  • Language cookie (dv_locale): remembers your chosen language (1 year).
  • Consent cookie (dv_consent): stores your choice from the notice banner (180 days).

There are no advertising or third-party tracking cookies.

5. Stored account data

When you are signed in, we store the content you create: your logbook (handle, display name, avatar source, language, visibility). This data is linked to your account and processed to provide the features (Art. 6 (1) (b) GDPR).

6. No advertising, no third-party tracking

We use no ad networks, no profiling and no third-party analytics trackers for marketing purposes.

7. Your rights as a data subject

Under the GDPR you have the following rights:

  • Access (Art. 15 GDPR) to the data stored about you.
  • Data portability (Art. 20 GDPR): download your data as a JSON file at any time, in your logbook under “Data and privacy”. Logbook
  • Erasure (Art. 17 GDPR): you can irrevocably delete your account and all linked data yourself at any time, in your logbook under “Delete account”. Logbook
  • Rectification, restriction of processing and objection to processing based on legitimate interest.
  • The right to lodge a complaint with a data protection supervisory authority.

For requests regarding these rights, contact scdark [at] notgoodenough [dot] cc.

Last updated: September 2026