Privacy

No third-party ad tracking

There are no cross-site ad trackers, behavioural cookies, or fingerprinting scripts on wsio. Link clicks are counted first-party and forward visitors straight to the destination.

What we process

• Profile content — username, display name, bio, avatar, theme, Discord ID and settings, links, custom icons, backgrounds, music, and highlight media you upload.
• Account — your email address, hashed password, role, session version, and account timestamps. Email changes store the unconfirmed new address until you confirm it, and creating an account records which terms revision you accepted and when.
• First-party profile analytics — individual page-view and link-click events store a timestamp, IP address, user agent, and reduced referrer or campaign source. Your page editor displays aggregate counts from those events.
• Optional site analytics and performance measurements — processed by Vercel only after you accept analytics in the privacy banner.
• Profile likes — a one-way hash derived from the signed-in account and profile prevents duplicate likes. The like record does not contain the account ID or raw IP address.
• Profile reports — visitor-submitted flags store the reason, details, IP address, and user agent. Reports are anonymous: they are not linked to an account.

Cookies and local storage

One essential HTTP-only cookie keeps you signed in. Your theme and analytics-consent choices are stored locally in your browser. Choosing Essential only prevents Vercel Analytics and Speed Insights from loading.

• session cookie — sign-in session. HTTP-only, Secure, SameSite=None, expires 24 hours after sign-in.
• wsio_cookie_consent_choice (local storage) — your analytics choice and the date you made it.
• wsio-theme (local storage) — your light or dark interface preference.
• wsio-claimed-username (session storage) — a username you started claiming, cleared when the tab closes.

Your account controls

• Edit — profile content, links, media, and password from your page editor at any time.
• Change email — from Account settings with your current password; the new address takes effect only after you confirm it.
• Download your data — from Account settings as a JSON file with your account, profile content, badges, likes you gave, and aggregate statistics.
• Delete your account — from Account settings with your current password. This erases your profile, uploads, statistics, likes, reports against your page, and the account itself. It cannot be undone.
• Withdraw analytics consent — choose Essential only below or in the privacy banner at any time. First-party page-view and link-click counts cannot be disabled separately while your page is public; deleting your account removes them.

Your rights under LGPD and GDPR

You have the right to confirm processing and access your data, correct incomplete or outdated data, request anonymization or deletion, take your data elsewhere in a portable format, and withdraw consent. The controls above cover each of these: download for access and portability, page editing for correction, deletion for erasure, and the analytics preference for consent withdrawal. Reports you submit are anonymous and cannot be linked back to you.

Controller and contact

wsio is operated as a personal project. For privacy questions not covered by the self-service controls above, reply to any email you received from us and we will respond.