Privacy policy

Which personal data we handle for your membership, why, who else handles it, how long we keep it and your rights.

Last updated 25 October 2026

Who is responsible

The business below is the controller of the personal data described here. Email us with any question about your data.

Seller: Not filled in yet
Organisation number: Not filled in yet
Address: Not filled in yet
Email: Not filled in yet

What we store

your Discord user ID, username and language
your plan, your membership status and when it started, was paused or ended
your Stripe customer and subscription IDs, so payments can be matched to your Discord account
while you pay, for at most 24 hours: the Discord permission that lets us add you to the server, stored encrypted
when you log in to Fenrir Autocheckout: your Discord name, username, ID and the time
when you log in to your membership page: one cookie on join.fenrircatch.se with your Discord ID and username, which keeps you logged in and is used for nothing else

Payments, joins, pauses, cancellations, removals and Autocheckout logins are posted with these details in private Discord channels that only the server's admins can see. We do not store your card details, postal address or email address; Stripe handles those. You need to give us this data to be a member.

Bot-run profile page

When a runner sends you a drop link, the page builds your FenrirAIO profile file on your own device. Your name, address, email, phone and card details are never sent to us; you send the file to your runner yourself. The page only asks our server for the drop's name, note, deadline, whether it is open and its profile limit; that request is not logged. The card fields tell your browser not to save what you type in them. Your browser remembers how many profiles you have downloaded for the drop, so the limit holds; that count stays in your browser.

Who else handles it

Stripe takes the payment and handles your card, name, email address, billing address and receipts, under its own privacy policy.
Discord runs the server and the login, under its own privacy policy.
Cloudflare runs our membership service and its database, and keeps technical logs of visits to the join pages, which can include your IP address, for a few days.

They may handle data in the USA, under the EU–US Data Privacy Framework or the EU's standard contractual clauses.

Why we may use it

To give you the membership you paid for: this is needed to fulfil our agreement with you.
To keep accounting records of payments, which Swedish accounting law (bokföringslagen) requires.
To stop abuse, such as a membership being shared: our legitimate interest in protecting the service.

How long we keep it

Membership data: while you are a member and for 12 months after it ends.
The list of members saved when membership opened: 90 days after the OG offer ends.
The Discord permission used to add you: until you are added, and 24 hours at most.
Payment records in Stripe: 7 years, as accounting law requires.
Messages in the private admin channels: 12 months.
The membership page's login cookie: one hour, or until you log out.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, limit or object to how we use it, and get it in a format you can take elsewhere. Email us to use your rights. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).