Privacy Policy
This privacy policy explains how personal data is processed when you visit crownie.lol, book coaching, receive transactional emails, connect Discord or use embedded video content.
Last updated: 19 June 2026
The controller determines the purposes and means of processing personal data for this website and the connected booking workflow.
This policy applies to the public website at crownie.lol, the backend API used by the website, the coaching booking workflow, transactional booking emails, optional Discord account connection and the password-protected admin area.
External services such as Stripe, Discord, YouTube/Google and Resend also process data under their own privacy policies when their services are used.
When the website or API is accessed, technical data such as IP address, time of access, requested URL, referrer, browser or device information, HTTP status and similar log data may be processed by the server and hosting infrastructure.
For coaching bookings we process data needed to verify and manage the booking, including Stripe checkout session IDs, payment intent IDs, payment link IDs, Stripe customer IDs, price and product IDs, amount, currency, payment status, booking source, booking code, customer email and customer name where provided by Stripe or entered through an admin workflow.
To send booking confirmations and operational messages we process recipient email addresses, booking codes, message content, delivery status, send timestamps and delivery error information where applicable.
If you choose to connect Discord after checkout, we process the OAuth state needed for the connection and the Discord profile data returned by Discord, including Discord user ID, username, global display name, avatar hash, avatar URL and connection timestamp.
The website displays educational video content. Video metadata is loaded through the backend. Thumbnails and embedded playback may load from YouTube or Google domains, including youtube-nocookie.com for embedded playback where possible.
The admin area stores an admin API token in browser sessionStorage after login. The visual frontend may store non-tracking WebGL or quality preferences in sessionStorage. These values are functional and are not used for advertising or analytics.
We process technical access data to deliver the website, keep the service available, diagnose errors and protect the website and API against misuse. The legal basis is our legitimate interest in secure and reliable operation under Art. 6(1)(f) GDPR.
We process booking and payment-related data to verify paid bookings, generate booking codes, provide coaching and handle customer communication. The legal basis is contract performance or pre-contractual steps under Art. 6(1)(b) GDPR.
We may retain and process payment, invoice, booking and transaction records where required for tax, accounting, consumer protection or other legal obligations. The legal basis is Art. 6(1)(c) GDPR.
We use email data to send booking confirmations, tests and operational messages connected to coaching. The legal basis is contract performance under Art. 6(1)(b) GDPR and our legitimate interest in reliable customer communication under Art. 6(1)(f) GDPR.
Discord connection is user-initiated and used to attach the correct Discord account to a paid coaching booking. The legal basis is contract performance under Art. 6(1)(b) GDPR and, where required, your voluntary consent under Art. 6(1)(a) GDPR.
We show YouTube content to provide educational materials and previews. The legal basis for displaying this content is our legitimate interest in presenting relevant coaching and educational content under Art. 6(1)(f) GDPR.
We only share personal data where this is necessary for website operation, booking fulfillment, payment processing, email delivery, optional Discord connection, legal compliance or enforcement of rights.
Hosting infrastructure for the website, API and database in the EU.
Payment checkout, payment verification, fraud prevention and webhook processing for coaching bookings.
Transactional email delivery for booking confirmations and operational emails.
Optional OAuth account connection after checkout if you choose to connect your Discord account.
Video metadata, thumbnails and embedded video playback for educational content.
Tax advisors, legal advisors, courts or authorities may receive data where required by law or necessary to establish, exercise or defend legal claims.
The website is hosted on Hetzner infrastructure in the EU. Some external providers, including Stripe, Resend, Discord and Google/YouTube, may process data outside the European Economic Area depending on the service and account configuration.
Where data is transferred to third countries, we rely on appropriate safeguards provided by the respective service provider, such as EU Standard Contractual Clauses, adequacy decisions, Data Privacy Framework participation where applicable, or other safeguards required by data protection law.
We do not use our own analytics cookies, tag managers, advertising pixels or profiling tools on the website.
The website may use browser sessionStorage for functional purposes, such as graphics quality or WebGL fallback preferences. The password-protected admin area stores an admin API token in sessionStorage after login. SessionStorage is stored locally in your browser and is normally cleared when the browser session ends or when you clear it manually.
External services such as Stripe, Discord and YouTube/Google may set their own cookies or use similar technologies when you open their checkout, connect Discord or load/play embedded video content. Their own privacy and cookie policies apply to those services.
Subject to the conditions of the GDPR, you have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Art. 22 GDPR.
We may update this privacy policy when the website, booking flow, service providers or legal requirements change. The current version is published on this page.