Privacy Policy

Last updated: 3 October 2026

1. Data Controller

The data controller is Massamba Diane, VAT IT05183680239, based in Italy. Email: [email protected]

2. Data Collected

We collect the following personal data: - Discord ID and Discord username (provided by the user at purchase) - Email address (provided by the user at purchase) - Payment data (managed directly by Stripe — we do not store card data) - Discord server ID (Guild ID) where the bot is activated - Bot usage data (commands executed, tournaments created) - Transaction data for paid tournaments: transaction identifier, amount, commission, team name, payment status and date; for individual registrations also the participant's Discord ID - Game results of tournament participants: in-game nickname, kills, placements and match statistics - Match result screenshots and evidence attached to reports: stored in a private archive (Supabase), visible only to the server staff through temporary links, deleted 30 days after the tournament ends or when it is deleted. The bot also attaches a copy of the photo in the tournament ticket or channel on Discord: that copy follows the life of the ticket or channel When a participant pays a tournament entry fee, card data and email address are entered on Stripe's payment page and collected directly by Stripe: NEMIX does not receive them and does not store them. Participants' in-game nicknames and results are displayed publicly in the standings on Discord and on nemixbot.com, including after the tournament has ended. For removal requests: [email protected]

3. Purpose of Processing

Data is processed for the following purposes: - Providing the NEMIX service (license management, bot activation) - Payment processing via Stripe - Sending service communications (welcome emails, renewals, expirations) - Preventing abuse of the free trial system - Tax and accounting obligations

4. Legal Basis

Processing is based on: - Contract performance (Art. 6(b) GDPR) — to provide the purchased service - Legal obligation (Art. 6(c) GDPR) — for tax compliance - Legitimate interest (Art. 6(f) GDPR) — to prevent fraud and abuse

5. Data Retention

Data is retained for the duration of the service and for subsequent tax obligations (10 years under Italian law). Data related to the free trial (to prevent abuse) is retained indefinitely in anonymized form. Transaction data for paid tournaments is retained together with the tournament data for as long as needed to manage the event, refunds and any disputes, and for subsequent tax obligations. Data retained by Stripe and by the tournament organizer follows their respective retention policies. Match result screenshots and report evidence are deleted 30 days after the tournament ends, or immediately if the tournament is deleted.

6. Third Party Sharing

Data may be shared with: - Stripe Payments Europe, Ltd. — for payment processing (Privacy Policy: stripe.com/privacy) - Supabase Inc. — for real-time database (Privacy Policy: supabase.com/privacy) - Discord Inc. — for OAuth authentication (Privacy Policy: discord.com/privacy) - OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C.) — automated processing of result images uploaded by organizers or teams (result-reading feature, available on higher plans) and support features. Images are transmitted solely for the requested processing and are not used by OpenAI to train its models. Any transfer to the United States is based on the EU–US Data Privacy Framework and Standard Contractual Clauses. (Privacy Policy: openai.com/policies/privacy-policy) - Resend (Resend, Inc.) — delivery of transactional and service emails (activation confirmations, license notifications, support communications). (Privacy Policy: resend.com/legal/privacy-policy) - Sentry (Functional Software, Inc.) — technical error monitoring to ensure service continuity; collected technical data is hosted on infrastructure located in the European Union (Germany). (Privacy Policy: sentry.io/privacy) - Cloudflare (Cloudflare, Inc.) — content delivery network (CDN), security and attack protection for the website and dashboard; processes IP addresses and technical connection data. (Privacy Policy: cloudflare.com/privacypolicy) - Hetzner Online GmbH — hosting of the server infrastructure, with data centers located in Germany (European Union). (Privacy Policy: hetzner.com/legal/privacy-policy) For paid tournaments only, the entry fee is destined to the Stripe account that the organizer connects to their own Discord server: the organizer receives the transaction and views it in their own Stripe dashboard. With respect to that transaction data the organizer acts as an independent data controller, under their own privacy notice. We do not sell or transfer your data to third parties for commercial purposes.

7. Your Rights

Under GDPR you have the right to: - Access your personal data - Rectify inaccurate data - Delete your data ("right to be forgotten") - Restrict processing - Data portability - Object to processing To exercise these rights write to: [email protected]

8. Cookies

The nemixbot.com website uses essential technical cookies for operation (session, language preference). We do not use profiling or third-party advertising cookies.

9. Security

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss or disclosure. Communications are encrypted via SSL/TLS.

10. Changes to Privacy Policy

We reserve the right to modify this Privacy Policy. Material changes will be communicated by email to registered users. The updated version will always be available on this page.

11. Player Area, public profiles and leaderboard

Since 2026, nemixbot.com offers every player a free Player Area. WHAT IS PUBLIC WITHOUT CONSENT. As per section 2, in-game nicknames and tournament results (kills, placements, statistics) are public in leaderboards — including the global NEMIX Leaderboard, which aggregates public tournament results by nickname and includes "Preseason" starting scores computed from tournament history. THE CLAIM IS THE CONSENT. Linking your Discord account to your nickname/Activision ID (with its aggregate statistics) happens ONLY with your explicit confirmation ("claim your profile"): the checkbox at claim time constitutes consent, recorded with date and time. You can revoke the link at any time from your profile: the profile unlinks and extended visibility is switched off. BROADCAST CONSENT (SEPARATE). Your photo and data appearing in organizers' broadcast graphics (stream cards) requires a further, separate consent, which you can switch on and off from your profile. It is off by default. CLANS. Clan pages are created and managed by their owners; joining a clan requires a verified identity and is visible on the clan's public page. REMOVAL. For complete removal of data linked to your profile: [email protected] or the NEMIX support server. Tournament results remain in the organizers' archives, with no link to your identity.

12. Contact

For any questions regarding the processing of your personal data: Email: [email protected]

© 2026 NEMIX TOURNAMENT — Massamba Diane P.IVA 05183680239