This privacy policy informs you about the nature, scope and purpose of the processing of personal data within BeatHaven in accordance with the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1417950116106604604 (referred to below as "the Bot")https://create.beathaven.net/*) including the public status page, and the public upload, download and API endpoints operated for BeatHavenThe controller within the meaning of Art. 4 (7) GDPR is:
You can contact the controller at any time using the contact details above for questions regarding data protection or to exercise your rights as a data subject.
We process personal data only insofar as this is necessary to provide the features you request, to operate the Discord community, to protect the service against misuse and to keep it reliable. We do not sell personal data, do not use it for advertising and do not create advertising profiles.
A data protection officer is not appointed because the legal requirements for a mandatory appointment (Art. 37 GDPR, § 38 BDSG) are not met.
Depending on how you use the Bot, the website or the public API, we process the following data:
!rank, !leaderboard, !clear, !ticketsetup and !sendcolor) and automated moderation checks. The level system does not store message text in our own database./generate commandMaps are generated on one of our own generation servers. If a V3 map is generated on an additional generation server, the uploaded audio file, an optional cover image and the generation settings are transmitted from our main server to that server over an encrypted and authenticated connection, processed there and deleted immediately after the map has been returned. Generated files are delivered only to the Discord channel in which you started the generation and/or to your browser, depending on the delivery mode you select.
/usage and aggregated statistics shown through /statsWhen someone joins or leaves the BeatHaven Discord server, the Bot records the Discord user ID, username, the type of event (join or leave) and its time. For a leave, it additionally records when the member joined the server and how many maps the member had generated with BeatHaven until then. We use this only in aggregated form to understand how the community develops, for example whether members leave before or after creating their first map. It is not used to take decisions about individual members. In the same aggregated way, we combine the join events with the map generation statistics (Section 3.3) to calculate figures such as how many new and returning members create maps each week, how many new members create a map at all and how long this takes after joining.
The public status page only shows the availability of our services. It does not process any personal data beyond the technical access data listed above.
Providing the listed data is neither legally nor contractually required, but it is technically necessary to use individual features. If you do not provide the data, you will generally not be able to use the corresponding feature.
To provide the service we use the following providers and platforms. Data is only transferred to them to the extent necessary for the respective function.
BeatHaven, including the Bot, the website, the generation servers, temporary file storage and the database, runs on servers rented from Prepaid-Host, Christopher Sakel (sole proprietorship), Im Eichengrund 10, 37170 Uslar, Germany (https://prepaid-host.com/). The servers are located in a data centre in Frankfurt am Main, Germany. All data described in this policy that is processed on our infrastructure is therefore stored and processed on these servers. Prepaid-Host acts as our processor within the meaning of Art. 28 GDPR and processes the data only on our behalf and according to our instructions. The connections between our servers are encrypted and authenticated.
Legal basis: Art. 6 (1) (b) GDPR for requested features and Art. 6 (1) (f) GDPR for secure and reliable operation. Further information: https://prepaid-host.com/de/datenschutz.
The Bot is operated on the Discord platform provided by Discord, Inc., 444 De Haro Street, Suite 200, San Francisco, California 94107, USA (for users in the EU/EEA, services are provided by Discord Netherlands B.V.). When you interact with the Bot, Discord processes communication data, account data, server data, commands, messages, attachments and delivered files. Generated maps, support tickets, moderation actions and Bot replies are also processed and stored by Discord.
Legal basis: Art. 6 (1) (b) GDPR for requested Bot features and Art. 6 (1) (f) GDPR for moderation and server operation. Further information: https://discord.com/privacy.
Public HTTP traffic to create.beathaven.net is routed through Cloudflare reverse proxies (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) before reaching our servers. Cloudflare provides DNS, proxying, TLS termination, DDoS protection and security filtering. In this role Cloudflare may process IP addresses, request metadata, headers, requested URLs, response metadata, security events and, where technically necessary for the proxy and security service, transmitted content such as uploaded or downloaded files. Traffic between our own servers is not routed through Cloudflare.
We also use Cloudflare Turnstile on MP3 upload pages and Vulnus ZIP upload pages to protect one-time upload sessions against automated abuse. Turnstile may process client-side security signals such as IP address, TLS fingerprint, user agent header, sitekey, associated origin and challenge result data. The challenge may be invisible, non-interactive or visible depending on Cloudflare's risk assessment.
Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in secure, reliable and performant operation of the service and prevention of automated misuse of upload endpoints. Further information: https://www.cloudflare.com/policies/privacy/, https://www.cloudflare.com/cloudflare-customer-dpa/ and https://www.cloudflare.com/turnstile-privacy-policy/.
When you submit a YouTube URL via the /generate YouTube option, the YouTube generation feature or /yt-download, our server or auxiliary converter endpoint contacts YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA) to retrieve public video information and, where requested, download and convert the audio to MP3. The request is made from our server infrastructure, not by your browser, so your IP address is not transmitted to YouTube for this step. The submitted URL, video title and duration and the resulting audio data are processed on our infrastructure.
Legal basis: Art. 6 (1) (b) GDPR. Further information: https://policies.google.com/privacy. You are responsible for ensuring that you have the necessary rights to download and convert the content you submit (see Terms of Service).
/rhythia-leaderboard and /rhythia-stats)For leaderboard and statistics commands, the Bot retrieves publicly available data from the Rhythia API (https://production.rhythia.com). These requests are made by our server, not by you directly; no personal data of the requesting Discord user is transmitted to Rhythia for these commands.
Legal basis: Art. 6 (1) (f) GDPR.
Our own servers are located in Germany. Discord, Cloudflare and Google are companies based in the USA or belong to groups based in the USA, so personal data may be processed in the USA when you use the corresponding features. For the USA, the European Commission has adopted an adequacy decision for companies certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Where a recipient is not certified, the transfer is based on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR) agreed with the respective provider.
The website does not use cookies for advertising, analytics or cross-site tracking. The upload page stores the following preferences in your browser so that it remembers your choices:
beathavenDelivery - your selected delivery mode (Discord, browser download or both), stored for up to 180 daysbeathavenV31DisabledPatterns, beathavenV32DisabledPatterns and beathavenV33DisabledPatterns - the V3.1/V3.2/V3.3 patterns you switched off, stored for up to 180 daysThese cookies are only read by our upload page and are not shared with third parties. Session IDs are also part of upload and download URLs to authorise a specific upload or download. Cloudflare Turnstile may process browser and challenge signals on upload pages solely for bot detection and abuse prevention, not for advertising. You can delete cookies at any time in your browser settings.
Under the GDPR you have the following rights with regard to personal data concerning you:
To exercise these rights, please contact us at [email protected]. Please include enough information for us to identify the relevant data, for example your Discord user ID and, if relevant, a session ID or the approximate time of use. We answer requests without undue delay and in any event within one month (Art. 12 (3) GDPR).
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).
We use appropriate technical and organisational measures (Art. 32 GDPR) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. These include TLS encryption of the website, encrypted and authenticated connections between our servers, firewalls that only allow the connections required for operation, administrative access restricted to a private VPN, session validation and one-time upload sessions, Cloudflare Turnstile bot protection for upload pages, file size and duration limits, temporary storage of uploaded files and access restrictions for internal APIs.
We do not use automated decision-making within the meaning of Art. 22 GDPR that produces legal effects or similarly significant effects. Some operational and moderation features act automatically, such as rate limits, invalid-session rejection, file validation and short Discord timeouts for prohibited language. You can contact us if you believe an automated action was incorrect.
BeatHaven is used through Discord and is therefore subject to Discord's minimum age requirements. We do not knowingly collect personal data from persons who are not allowed to use Discord. If you believe that such data has been processed, please contact us so that we can delete it.
We may amend this privacy policy to comply with current legal requirements or to reflect changes to our service. The version published on this page at the time of your visit or use applies.