Privacy policy & cookies

Who is responsible

The data controller is the publisher of vrchat.dance (see the legal notice). Contact: [email protected].

What we collect, and why

• Your account: username, display name, your Discord id and username (sign-in with Discord), and the list of Discord servers you are in (Discord "guilds" permission). The server list is only used to suggest the clubs you belong to and to let owners claim their club. We never receive your Discord email or password. Basis: performance of the service you signed up for.
• Your profile (dancers): poster, bio, style, clubs, VRChat profile link and its verification, social links, donation link, reported dances. This is public on purpose. Basis: your choice to publish it.
• Your activity: follows (clubs and dancers), favorite club, reports you send (never shown to the person reported). Basis: performance of the service.
• Recruiting messages: whether you are looking for a club (dancers) or recruiting (clubs), with your note, and the applications, invitations and messages between a dancer and a club. A conversation is only visible to the dancer and to the managers of the club. Basis: performance of the service.
• Statistics: to count club page views and clicks, a visitor is recognized for one day by a one-way hash of their IP address and browser. The IP address itself is not stored. Basis: legitimate interest (showing clubs their audience).
• Discord bot: on the vrchat.dance Discord server, the bot reads the member list to give the roles that match the site accounts, and logs members joining and leaving. Basis: legitimate interest.
• Technical logs: errors and server logs, kept a short time for security. Basis: legitimate interest.
• Language: at each visit, the server reads your browser's language and looks up the country of your IP address, to show the Russian version to Russian speakers and visitors from Russia. Nothing is stored. Basis: legitimate interest.

No advertising tracker, no data sold, no profiling.

Who receives it

Only the publisher and the technical providers that run the site: the host, Cloudflare (network and protection) and Discord (sign-in and bot). Discord and Cloudflare can process data outside the European Union, under the safeguards of the EU-US Data Privacy Framework or standard contractual clauses.

How long

• Account and profile: until you delete them or ask us to.
• Reported dances: shown for their date, kept with the profile.
• Statistics: daily counts only; the visitor hash changes every day.
• Reports: as long as needed to handle them and keep a moderation history.
• Recruiting messages: until the dancer's account or the club is deleted.

Cookies

The site only uses cookies needed for it to work, so no consent banner is required:

• vrc_session: keeps you logged in;
• vrc_age: remembers that you confirmed being 18+ (1 year);
• vrc_cache: remembers that your browser already emptied its cache of the site after an update (1 year);
• vrc_tz and vrc_tz_pick: your time zone (from your device, or the one you picked), to show club times in your local time (1 year);
• vrc_lang: the language you picked at the bottom of the page (1 year);
• vrc_discord_oauth, vrc_discord_signup: temporary, during sign-in with Discord.

The browser also remembers that you have seen the intro animation, for the current session.

Your rights

You can access, correct, export or delete your data, and object to or limit its use. Most of it can be changed directly in My account, where you can also delete your account. For anything else, write to [email protected] (or contact an admin on the vrchat.dance Discord). If you think your rights are not respected, you can complain to the CNIL (www.cnil.fr) or to the data protection authority of your country.