Privacy Policy
Last updated: 23 October 2026
Preamble
This Privacy Policy informs users of the Icare Service about the collection, use, retention, and protection of their personal data. Icare SAS complies with the GDPR (EU Regulation 2016/679), applicable French law, and the recommendations of the CNIL (French Data Protection Authority).
The policy applies to all services offered by Icare: the Discord Bot, the website https://icare-bot.fr, the Dashboard, the APIs used, and Premium subscriptions.
1. Data Controller
Controller: Icare SAS
Registered office: 27 avenue de la Libération, 42400 Saint-Chamond, France
President: Emmanuel TROYARD
Email: contact@icare-bot.fr
Website: https://icare-bot.fr
2. Applicable Principles
Icare SAS applies the following principles: lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. Only data necessary for the operation of the Service is collected.
3. Data Collected
Depending on the features used, Icare may process:
3.1 Discord Data
- Discord ID (User ID)
- Username and display name
- Avatar (if provided by Discord)
- Account language (if available)
- IDs of authorised servers
- Roles necessary for the operation of commands (if accessible via the API)
Icare never collects your Discord password.
3.2 Bungie Data (upon voluntary linking)
- Bungie Membership ID and account IDs
- Gaming platform (Steam, PlayStation, Xbox, Epic Games, etc.)
- Bungie username
- Statistics and activity history accessible via the official API
The data retrieved depends on the permissions granted by the user.
3.3 Subscription Data
- Customer ID
- Chosen plan
- Subscription history, dates, and payment statuses
Bank details (card number, security code) are never stored by Icare SAS.
3.4 Technical Data
- IP address (when necessary)
- Browser type and operating system
- Connection date/time, logs
- Session IDs, error information
This data is used for security, diagnostics, and improving the Service.
4. Data Not Collected
Icare SAS does not collect: Discord/Bungie passwords, bank details, private Discord conversations, contents of private channels, microphone/camera access, personal contacts, or sensitive data unless there is explicit consent or a legal obligation to do so.
5. Purposes of Processing
The purposes include, but are not limited to:
- enabling the operation of the Bot and the Dashboard;
- authenticating and managing user accounts;
- managing subscriptions and payments;
- providing Premium features and game statistics;
- ensuring support and fraud prevention;
- securing and improving the Service;
- complying with legal obligations and requests from competent authorities.
No processing is carried out for purposes incompatible with these objectives.
6. Legal Bases
Processing is based on: the performance of a contract, legal obligations, the legitimate interests of Icare (security, combating fraud, service improvement) and, where necessary, the user's consent.
7. Data Recipients
Data may be accessed, strictly within the limits of their respective roles, by:
- authorised staff of Icare SAS;
- technical service providers and hosting companies (e.g., OVH);
- Stripe, for payment processing;
- Discord and Bungie, when the use of the Service involves their APIs;
- administrative or judicial authorities, if required by law.
Icare SAS does not sell users' personal data.
8. Retention Period
Data is kept for the duration necessary for the stated purposes or legal obligations. As a guide:
- User account: for the duration of the use of the Service;
- Bungie data: until the authorisation is revoked or the account is deleted;
- Subscription data: for the duration of the contract, then in accordance with legal obligations;
- Technical logs: duration adapted to security needs;
- Support tickets: the time necessary for processing, then archived if necessary.
At the end of these periods, data is deleted or anonymised unless there is a legal obligation to retain it.
9. Security
Icare SAS implements appropriate technical and organisational measures: encryption of communications, HTTPS/TLS, rights management according to the principle of least privilege, backups, logging, and regular updates. Despite these measures, absolute security does not exist; Icare is committed to continuously improving its level of security.
10. Cookies and Trackers
The website only uses strictly necessary cookies (language, sign-in) and cookie-free analytics (Umami, hosted by Icare). No advertising cookies or third-party trackers are set, so no consent banner is required. Details are on the Cookies and Analytics page.
11. Data Transfers Outside the EEA
When service providers located outside the European Economic Area are used, Icare SAS regulates these transfers in accordance with the GDPR (adequacy decision, standard contractual clauses, or other appropriate safeguards).
12. User Rights
In accordance with the GDPR, users have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent where applicable.
Exercising these rights is free of charge unless the request is manifestly unfounded or excessive.
13. Exercising Your Rights
Requests can be sent to:
Icare SAS
27 avenue de la Libération, 42400 Saint-Chamond, France
Email: contact@icare-bot.fr
Icare may request information to verify the identity of the applicant. Responses are provided within the timeframes stipulated by regulations.
14. Personal Data Breach
In the event of a breach likely to result in a risk to rights and freedoms, Icare SAS will implement appropriate measures and notify the competent supervisory authority and, where applicable, the data subjects, as required by law.
15. Links to Third-Party Services
The Service may contain links to or integrate features from third-party services (Discord, Bungie, Stripe). Icare SAS is not responsible for the practices of these services; users should consult their respective privacy policies.
16. Amendments to the Privacy Policy
Icare SAS may amend this policy to reflect legal, technical, or Service developments. The current version is the one published on https://icare-bot.fr. In the event of a substantial change, users will be informed by any appropriate means.
17. Complaints to the Supervisory Authority
If a user believes that their rights have not been respected, they may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) or the competent authority in their country.
18. Entry into Force
This Privacy Policy enters into force upon its publication on the official website and remains applicable until it is amended.
Appendix — Contact Details of the Data Controller
Icare SAS
27 avenue de la Libération, 42400 Saint-Chamond, France
President: Emmanuel TROYARD
Website: https://icare-bot.fr
Email: contact@icare-bot.fr