Privacy policy
This privacy policy (the “Policy”) is intended to inform the people who use the services of Error Club of how their personal data is collected and processed.
It is drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the “GDPR”), French Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties (the “French Data Protection Act”) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. The rules on cookies and other trackers derive from Article 82 of the French Data Protection Act and, in Belgium, from the Belgian Law of 13 June 2005 on electronic communications.
1. Purpose and scope
Error Club is a VRChat community that organizes adults-only lap dance events.
The Policy applies to all processing of personal data carried out in connection with the following services (the “Services”):
- The public website errorclub.fr (the “Site”).
- The dashboard reserved for the team.
- The Error Club Discord bot and the API that connects these services to one another.
- The streaming server used by DJs and the team during events.
The Policy does not apply to the third-party services that you use with your own account (in particular Discord, VRChat, Patreon and Instagram), which are governed by their own privacy policies.
2. Definitions
For the purposes of the Policy, the following terms have the meaning given to them below:
- Personal data: any information relating to an identified or identifiable natural person, directly or indirectly, for example a Discord ID, an alias or an IP address.
- Processing: any operation performed on personal data, such as collection, recording, consultation, publication or erasure.
- Data controller: the person or body that determines the purposes and means of a processing operation.
- Processor: the service provider that processes personal data on behalf of the data controller.
- Member: any person who has joined the Error Club Discord server.
- Team: the members in charge of the administration, moderation and organization of events.
- You: any person whose personal data is processed in connection with the Services.
3. Data controller
The data controller is Error Club, an online community that is not incorporated as a company or an association, whose processing is decided on and carried out by its administration team.
For any question about the processing of your personal data, you can write to: [email protected].
The address above is the single point of contact for any request relating to your data.
4. Data collected, purposes and sources
Personal data is collected directly from you or, where specified, from Discord and VRChat. The categories of data processed depend on the Service used.
4.1 Visiting the Site
The Site requires neither the creation of an account nor the completion of a form. When you visit it, Error Club processes the following data:
- Technical connection data: IP address, date and time of the request, requested page and browser type (user agent). This data is necessary to deliver the pages and to protect the Site against abuse. It passes through Cloudflare before reaching our servers (Article 9).
- Display preferences: the language of the Site and your time zone, stored in cookies so that event times are displayed in your local time (Article 11).
- Age confirmation: the confirmation that you are 18 or older is stored in your browser’s session storage. It is not sent to our servers.
- Audience measurement: Error Club uses Rybbit, an open-source analytics tool hosted on its own servers (rybbit.errorclub.fr). Rybbit sets no cookie and keeps no identifier on your device. It collects the pages viewed, the sections of the Site displayed, the opening and downloading of photos, the language, the referring site, the device type, the screen size, the browser, the operating system and the country, inferred from the IP address. This data is used exclusively to produce traffic statistics. It is neither cross-referenced with other processing nor disclosed to third parties.
- Error tracking: if a page malfunctions, a technical report (error message, page concerned, browser, loading performance) is sent to our Sentry instance, hosted on our own servers. These reports are configured to contain neither an IP address nor a personal identifier.
- External links: links to Discord, VRChat, Instagram, Patreon or the artists’ social networks transmit no data until you click on them. The destination sites then apply their own privacy policies.
4.2 Joining the Discord server
When you join the Error Club Discord server, the bot records the profile data that Discord provides to it:
- Your Discord ID, your username, your display name, your nickname on the server and your avatar.
- Your join and leave dates on the server.
This data is processed to manage the community, in particular to assign roles, to recognize a member who returns to the server and to enforce the server rules.
4.3 Participating in events
- Sign-up: reserved for team members and dancers. Discord ID, display name, chosen role (dancer, DJ, MC, photographer, security, coordinator) and position on the waiting list, if any.
- Lineup: for people who perform, time slot and duration, and associated dancers and participants.
- Giveaways: entry, date of entry and, where applicable, the result of the draw.
This data is processed to organize events. Events, their lineup and their photos are then published on the Site under the conditions set out in Article 4.9.
4.4 Age verification
Access to the Discord server is reserved for adults. Each member verifies their age using one of the following two procedures:
- Verification via VRChat: you provide the link to your VRChat profile, then temporarily add a code to the bio of that profile. The bot then looks up your public profile through the VRChat API (name, bio, image, “18+” status attested by VRChat) in order to confirm that the profile belongs to you and that VRChat has verified your age. The verification is accepted automatically when these elements match.
- Verification by the team: you provide your VRChat profile and a team member reviews the request, then accepts or refuses it, stating the reasons for the decision.
The data processed is as follows: VRChat ID, verification code, status of the request (pending, accepted, refused), refusal reason, if any, dates of the request and history of your verifications.
A VRChat verification that has been started but not completed is automatically deleted after 24 hours. When the verification is accepted, you receive the verified member role, your nickname on the server is aligned with your VRChat name and a summary is sent to you by private message. A summary of the verification (VRChat profile, history) is posted in a private Discord channel, accessible only to the moderation team, where requests reviewed by the team are also posted for decision.
4.5 Linked VRChat account
After an accepted verification, Error Club keeps a link to your VRChat account comprising: ID, display name and history of previous names, profile image, trust level (“trust rank”) and VRChat age verification status.
This information, which is public on VRChat, is refreshed about once a week through the VRChat API. It allows the team to identify members during events, including after a name change, and to keep instances safe.
4.6 Applications
When you apply to join the team or to dance, Error Club records your application: Discord ID, type of application, role sought, motivation, experience, spoken languages, references, VRChat ID and the gender of your avatar. A private Discord channel is created to discuss your application with you.
This data is processed solely for the purpose of reviewing your application.
4.7 Using the dashboard
The dashboard is reserved for team members. Its use gives rise to the following processing:
- Authentication: sign-in is done through Discord (OAuth2 protocol). Only the
identify(ID, name and avatar) andguilds.members.read(roles on the Error Club server) permissions are requested, in order to verify that you belong to the team. Error Club has no access to your email address, your messages or your Discord password. - Team record: Discord ID, username, display name, avatar, roles within the team, status (active or inactive) and date of last sign-in.
- Session: two secure cookies keep you signed in (Article 11). On the server side, each session is associated with your IP address and your browser in order to detect abnormal usage. It expires after 24 hours.
- Optional public profile: poster, description, displayed role and links to your social networks. It is published on the Site only if it is marked as public, and you can ask for it to be removed at any time.
- Traceability: some actions are associated with their author, for example uploading a photo.
- Error tracking: when an error occurs, the report sent to our Sentry instance contains your team ID, your Discord ID, your roles and your IP address, so that the problem can be fixed. Passwords, tokens and cookies are automatically masked before sending.
- Session replay: when an error occurs, and for about one session in ten, Sentry records a replay of your navigation in the dashboard (clicks, pages viewed, layout) in order to reproduce bugs. All text is masked and images are blocked, and the content of network requests is not recorded.
The data viewed by the team through the dashboard (members, sign-ups, verifications, applications, lineup, photos, streaming) is the data described in the Policy. Each team member accesses it only within the limits of the rights attached to their role.
4.8 Streaming server
DJs and team members who broadcast during events have a streaming account. In this respect, Error Club processes:
- The account data: ID, password (hashed using the Argon2id algorithm, never stored in plain text), authorized broadcast path, date of last connection and last IP address.
- A connection log: IP address, approximate location (country, region, city, time zone, approximate coordinates) determined on our servers from a local database, without using a third-party service, protocol used, action, success or failure.
- IP addresses blocked following an abusive access attempt, with the reason and the duration of the block.
This data is processed exclusively to protect the streaming server against unauthorized access. The broadcasts themselves are not recorded on our servers.
4.9 Content published on the Site
The following information is published on the Site and may be indexed by search engines:
- Events: title, dates, image and lineup (alias, poster, description and links to the artists’ social networks).
- Event photos, taken in VRChat by the team’s photographers, which can be viewed and downloaded. The technical metadata of the files is removed when they are compressed.
- The team members’ public profiles.
If you appear in a photo or in a lineup and wish that content to be removed, you simply need to request it (Article 12).
4.10 Security and technical operation
- Request rate limiting: to prevent abuse, requests are temporarily counted per IP address. These counters are kept in memory for a few minutes.
- Automated task log: scheduled tasks (event reminders, synchronizations, cleanups) keep a record of their execution, which may mention the name of an event or of a member.
- API and bot error tracking: error reports may contain the IP address and the identifiers linked to the request concerned.
5. Legal bases for processing
Each processing operation relies on one of the legal bases provided for in Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| Providing the Site and protecting it against abuse | Legitimate interest in ensuring the operation and security of the Site (art. 6.1.f) |
| Remembering the language and time zone | Legitimate interest in displaying the Site in the chosen language and time (art. 6.1.f). Cookies exempt from consent because they are strictly necessary for the service requested |
| Audience measurement | Legitimate interest in understanding how the Site is used in order to improve it (art. 6.1.f) |
| Managing the community, event sign-ups, lineup and giveaways | Performance of the participation rules accepted by joining the server (art. 6.1.b) |
| Age verification and link to the VRChat account | Legitimate interest in protecting minors, in reserving content intended for adults to adults and in complying with the terms of use of Discord and VRChat (art. 6.1.f) |
| Reviewing applications | Pre-contractual measures taken at your request (art. 6.1.b) |
| Publishing a public team profile | Consent, which can be withdrawn at any time (art. 6.1.a) |
| Publishing events, their lineup and their photos | Legitimate interest in presenting the community’s activities (art. 6.1.f) |
| Access to the dashboard and securing sessions | Performance of the service provided to the team (art. 6.1.b) and legitimate interest in ensuring its security (art. 6.1.f) |
| Securing the streaming server | Legitimate interest in preventing unauthorized access (art. 6.1.f) |
| Detecting and fixing errors | Legitimate interest in ensuring the proper operation of the Services (art. 6.1.f) |
Where processing is based on the legitimate interest of Error Club, you may object to it under the conditions set out in Article 12.2.
6. Mandatory or optional nature of the data
- Visiting the Site: no data is requested from you. The technical connection data is essential for displaying the pages.
- Joining the Discord server: the profile data transmitted by Discord is necessary to manage your membership.
- Age verification: verification is a condition of access to the server. Failing it, access cannot be granted to you.
- Event sign-up and application: the data requested is necessary to process your sign-up or your application, which cannot be taken into account without it.
- Public team profile: its creation is optional.
- Dashboard and streaming server: signing in through Discord and the streaming account are essential to use these tools.
7. Retention periods
Personal data is kept for the following periods:
| Category of data | Retention period |
|---|---|
| Discord profile, event sign-ups, lineup and giveaways | For as long as you are on the server, then 3 years from your last departure |
| Age verifications and linked VRChat account | For as long as you are on the server, then 3 years from your last departure, to prevent an excluded member from returning by bypassing verification |
| Unfinished VRChat verification | 24 hours |
| Applications | For as long as you are on the server, then 3 years from your last departure |
| Messages posted by the bot in the team’s private channels (verification summaries, applications) | Period applicable to the corresponding data |
| Team record and public profile | For as long as you belong to the team. The public profile is removed as soon as you ask |
| Dashboard session | 24 hours |
| Streaming account | For as long as the account is active |
| Streaming server connection log | 12 months |
| IP addresses blocked on the streaming server | Until the block expires |
| Request counters per IP address | A few minutes |
| Automated task log | 90 days |
| Error reports (Sentry) | 90 days |
| Audience statistics (Rybbit) | 25 months at most |
| Technical server logs | 12 months at most |
| Published events, lineup and photos | As long as the events archive remains online, or until you request removal |
At the end of these periods, the data is deleted or anonymized. It may, however, be kept for longer where necessary for the establishment, exercise or defence of legal claims.
8. Recipients of the data
Personal data is accessible, within the limits of what is necessary for their duties:
- To the members of the Error Club team (administration, moderation, event organization), each according to the rights attached to their role.
- To the technical processors listed in Article 9, solely for the hosting and operation of the Services.
- To the public, for the information published on the Site only (events, lineup, photos, public team profiles).
- Where applicable, to the competent administrative or judicial authorities, upon request based on a legal obligation.
Error Club does not sell, rent or trade any personal data and does not use it for any advertising purpose.
9. Processors and hosting
Error Club uses the following processors, which process data on its behalf under their contractual data protection terms (Article 28 of the GDPR):
| Processor | Service | Data location |
|---|---|---|
| Hetzner Online GmbH (Germany) | Hosting of the servers: Site, dashboard, API, Discord bot, cache, streaming server, audience measurement (Rybbit) and error tracking (Sentry) | Germany (Falkenstein) |
| Cloudflare, Inc. (United States) | Domain name management (DNS) and security proxy: all traffic to errorclub.fr and its subdomains passes through Cloudflare, which sees the IP address and the pages requested | Global network, as close to the user as possible |
| MongoDB, Inc. (MongoDB Atlas) | Hosting of the main database | Paris, France (Amazon Web Services, eu-west-3 region) |
| OVH SAS (OVHcloud, France) | Image storage: event photos and posters | Gravelines, France |
The Services also rely on two third-party platforms that act as separate data controllers, under their own privacy policies:
- Discord Inc. (United States), the platform on which the community is hosted: the bot reads the server’s information there and posts messages.
- VRChat Inc. (United States), whose API is queried for age verification and for refreshing linked VRChat accounts.
10. Transfers of data outside the European Union
The data is hosted within the European Union. Some providers and platforms are, however, companies established in the United States (Cloudflare, MongoDB, Discord, VRChat), which may result in a transfer of data to, or access to it from, the United States.
These transfers are governed by the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework where the recipient is certified under it, or, failing that, by the standard contractual clauses adopted by the European Commission (Article 46 of the GDPR).
11. Cookies and other trackers
Error Club uses no advertising cookies and no cross-site tracking trackers. The cookies and local storage data below are strictly necessary to provide the Services you request or to secure them. They are therefore exempt from consent.
| Service | Purpose | Type | Duration |
|---|---|---|---|
| Site | Remembering the language of the Site | Cookie | 400 days |
| Site and dashboard | Remembering your time zone to display event times in your local time | Cookie | 1 year |
| Site | Remembering your age confirmation | Session storage | Until the tab is closed, 24 hours at most |
| Site | No longer displaying the reduced performance notice | Session storage | Until the tab is closed |
| Dashboard | Keeping you signed in | Cookies | 24 hours at most |
| Dashboard | Remembering the language of the dashboard | Cookie | 1 year |
| Dashboard | Remembering the state of the side menu | Cookie | 7 days |
| Dashboard | Remembering the alias and the watermark settings for photos | Local storage | Until you delete them |
| Dashboard | Resuming an interrupted photo upload | Local storage and IndexedDB | 24 hours |
Cloudflare may set technical security cookies in order to tell visitors apart from malicious bots. On the dashboard, when session replay is active, Sentry keeps a replay identifier in session storage until the tab is closed.
The audience measurement described in Article 4.1 sets no cookie and keeps no identifier on your device. It is limited to producing traffic statistics, without cross-referencing with other processing or tracking on other sites, and its data is kept for 25 months at most. You can object to it at any time by blocking the rybbit.errorclub.fr domain in your browser or by writing to us.
You can delete cookies at any time from your browser settings. The Site remains usable, but your language and time zone will no longer be remembered.
12. Your rights
12.1 Rights available to you
In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data:
- Right of access: obtaining confirmation that data concerning you is being processed and receiving a copy of it.
- Right to rectification: having inaccurate or incomplete data corrected.
- Right to erasure: obtaining the deletion of your data in the cases provided for in Article 17 of the GDPR.
- Right to restriction of processing: obtaining the temporary suspension of the use of your data.
- Right to data portability: receiving the data you have provided to us in a structured, commonly used and machine-readable format, and transmitting it to another data controller.
- Right to withdraw your consent at any time, for processing that is based on it (for example your public team profile), without affecting the lawfulness of the processing carried out before the withdrawal.
- Post-mortem directives: if you live in France, you can set directives regarding the retention, erasure and disclosure of your data after your death (Article 85 of the French Data Protection Act).
12.2 Right to object
You may object at any time, on grounds relating to your particular situation, to processing based on the legitimate interest of Error Club, in particular to the publication of a photo or a lineup in which you appear and to audience measurement. Error Club then stops the processing, unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims (Article 21 of the GDPR).
12.3 Exercising your rights
You can exercise these rights by writing to [email protected] or by opening a ticket on the Error Club Discord server. To make sure that the request really comes from you, we may ask you to confirm it from your Discord account.
You will receive a reply within one month of receipt of your request. This period may be extended by two months, taking into account the complexity or the number of requests. You will then be informed within one month. Exercising your rights is free of charge, unless the request is manifestly unfounded or excessive.
Erasing your age verification data results in the loss of your verified member status: a new verification will be required to access the server again.
13. Complaint to a supervisory authority
If you consider, after contacting us, that your rights are not being respected, you can lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Article 77 of the GDPR):
- In France: the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
- In Belgium: the Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
14. Minors
The Services are reserved for people aged 18 or older. The Site displays an age confirmation and the Discord server requires age verification.
Error Club does not knowingly collect data concerning minors. If it appears that a minor has provided personal data, that data is deleted and the minor’s access to the server is removed.
15. Publisher and host of the Site
The Site is published on a non-professional basis by the Error Club administration team. In accordance with French Law No. 2004-575 of 21 June 2004 on confidence in the digital economy, its publishers have provided their identification details to the host. Contact: [email protected].
The Site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, phone: +49 9831 505-0, www.hetzner.com.
16. Changes to the Policy
Error Club may amend the Policy, in particular when a service is added, a provider is changed or the regulations evolve. The date of the last update appears at the top of the page. Any substantial change is announced on the Error Club Discord server.
17. Contact
For any question about the Policy or the processing of your personal data: [email protected].