privacy policy
last updated: May 8, 2025
who we are
Kova is a portfolio platform for aimers. This policy explains what personal data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and other applicable laws.
For questions or data requests, contact us at: pyvnovlr@gmail.com
what data we collect
- Discord account data— when you sign in with Discord, we receive your Discord username, avatar, and email address from Discord's OAuth service. We do not receive your Discord password.
- Profile content — information you voluntarily add to your Kova profile: display name, bio, social links, peripheral setups, showcase items, videos, and aimgroup memberships.
- Uploaded images — profile pictures and other images you upload, stored on Cloudflare R2.
- Usage data — basic analytics such as profile view counts. We do not use third-party tracking or advertising cookies.
- Session data — a strictly necessary session cookie to keep you signed in. No tracking cookies are used.
why we collect it
- To provide the service — your account data is required to create and manage your profile. Legal basis: contract (Article 6(1)(b) GDPR).
- To display your public profile — profile content you add is shown publicly on your Kova page. Legal basis: consent (you choose what to publish).
- Analytics— view counts help you understand your profile's reach. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
data sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with:
- Cloudflare R2 — stores uploaded images. Cloudflare acts as a data processor under our instructions.
- Discord— OAuth provider for sign-in. Subject to Discord's own privacy policy.
- Our hosting provider — processes requests in order to serve the platform.
data retention
Your data is retained for as long as your account exists. If you delete your account, all associated personal data — including profile content and uploaded images — is permanently deleted within 30 days.
your rights (GDPR)
If you are located in the EU/EEA, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data directly in your dashboard, or by contacting us.
- Erasure — delete your account at any time from your dashboard settings. This permanently removes all your data.
- Portability — request your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
To exercise any right, email us at pyvnovlr@gmail.com. We will respond within 30 days.
cookies
We use one strictly necessary cookie to maintain your session. No advertising or analytics cookies are set. You cannot opt out of the session cookie without losing the ability to sign in.
changes to this policy
We may update this policy as the platform evolves. Material changes will be announced on our Discord or via the platform. Continued use after changes constitutes acceptance.