Privacy Policy

1. Overview

UserPFP ("we," "our," or "us") operates this website (the "Site"). We are committed to protecting your privacy. This policy explains what data, if any, is processed when you visit this Site and your rights in relation to it.

This policy applies globally including, but not limited to, visitors in the European Union (GDPR), the United Kingdom (UK GDPR), the United States (CCPA/CPRA), Canada (PIPEDA), Australia (Privacy Act 1988), Brazil (LGPD), and South Korea (PIPA).

2. Data We Do Not Collect

We do not collect, store, or process any of the following from website visitors:

• Names, email addresses, or contact information
• IP addresses (there is no server-side application logging)
• Cookies set by this website
• Analytics or usage data
• Device or browser fingerprints
• Payment information
• Location data

We have no user accounts or registration system.

3. Third-Party Services

Our website loads resources from external services. Some are operated by the UserPFP team (first-party); others are independent third parties. When your browser makes requests to these services, those providers may receive technical data such as your IP address according to their own privacy policies.

Google Fonts

We use Google Fonts to display Inter and Roboto Mono typefaces. Requests are made to fonts.googleapis.com and fonts.gstatic.com. Your IP address may be processed by Google. See Google's Privacy Policy.

Discord CDN

Avatar images, emojis, and decoration assets are loaded from cdn.discordapp.com. See Discord's Privacy Policy.

Lanyard API

The Staff page uses the Lanyard API (lanyard.equicord.org) to display real-time Discord presence data. Staff members have voluntarily connected their accounts to this service. The API returns only data users have explicitly opted to share.

UserPFP API (USRBG)

The USRBG API (usrbg.is-hardly.online) is operated by the UserPFP team. It stores animated profile pictures submitted by users through the UserPFP Discord server request process. Submitted files are stored under the user's Discord user ID as the filename (e.g., {userid}.gif). By submitting content to this API, users voluntarily consent to their animated avatar being publicly served via this service. Users may request deletion of their submitted content at any time through our Discord server or GitHub.

Decor API

Avatar decoration data is fetched from decor.fieryflames.dev. This service provides user-submitted decoration assets.

Equicord Badges API

Badge data is fetched from badges.equicord.org to display community badges on staff profiles.

GitHub

Static data files are loaded from raw.githubusercontent.com. See GitHub's Privacy Statement.

4. Staff Page & Discord Data

The Staff page displays publicly accessible Discord data for UserPFP team members, including display names, usernames, avatars, and online/activity status. This data is sourced from public APIs that the respective individuals have explicitly opted into.

The legal basis for processing this data under GDPR is legitimate interest (Art. 6(1)(f)) — displaying publicly opted-in data about team members to inform visitors about the project contributors. Staff members may request removal of their data at any time (see Section 6).

5. Cookies

This website does not set any cookies. Third-party services (specifically Google Fonts) may set their own cookies in accordance with their respective policies. As of 2022, Google has confirmed that Google Fonts does not use cookies for tracking purposes.

If you use a browser extension that blocks third-party requests, this site will still function correctly as the fonts will fall back to system fonts.

6. Your Rights

Depending on your jurisdiction, you may have rights regarding personal data. Since we collect no visitor data, these rights primarily apply to staff members whose public Discord data is displayed.

EU / EEA Residents (GDPR — Regulation (EU) 2016/679)

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

UK Residents (UK GDPR)

The same rights as EU GDPR apply under the UK GDPR and the Data Protection Act 2018.

California Residents (CCPA / CPRA)

• Right to know about personal information collected or disclosed
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt-out of the sale or sharing of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

Canada (PIPEDA)

You have the right to access and correct your personal information held by us.

Australia (Privacy Act 1988)

You have the right to access and correct personal information held about you under the Australian Privacy Principles.

Brazil (LGPD — Lei Geral de Proteção de Dados)

You have rights to confirmation, access, correction, anonymisation, deletion, and portability of your data under the LGPD.

South Korea (PIPA)

You have the right to access, correct, delete, and suspend processing of your personal information under the Personal Information Protection Act.

7. Data Retention

We do not store any data. Staff display data is fetched live from third-party APIs on each page load and is not cached on any server operated by us.

8. International Transfers

As a website served via GitHub Pages, requests may be processed on servers located in the United States. Third-party services (Google, Discord, GitHub) may process data internationally in accordance with their own policies and applicable transfer mechanisms (e.g., Standard Contractual Clauses for EU data).

9. Children's Privacy

This website is not directed to individuals under the age of 13 (or the minimum age applicable in your jurisdiction under national law, which may be higher). Discord itself requires users to be at least 13 years old. We do not knowingly collect data from minors. If you believe a minor's data has been processed inappropriately, please contact us.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. The "Last updated" date at the top will be revised. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact & Data Requests

For any privacy-related requests — including requests by staff members to have their data removed from the Staff page — please contact us through:

• Discord Server: discord.gg/userpfp-1129784704267210844
• GitHub Issues: github.com/Yeetov/usrpfpwebsite/issues

We will respond to verifiable requests within 30 days (or within the timeframe required by applicable law).