Privacy Policy

Last updated October 14, 2026

1. Who we are

percs.lol is run by an individual based in Chicago, Illinois, USA. We are responsible for the personal information described here. You can reach us at legal@percs.lol.

2. What we collect

From Discord, when you log in

Your Discord user ID, username, display name, avatar, and email address. We don't receive your Discord password, messages, servers or friends list.

What you create

Your handle, your page design and everything on it (text, links, images and audio you upload), your unpublished draft, and account names you connect to elements, such as a Discord user ID, Discord server invite, Last.fm, GitHub, Twitch or Steam username, or a Spotify, SoundCloud or YouTube link. We also record when you agreed to these terms and which version.

Badges

Which badges we have given your account.

Technical information

Our hosting providers automatically log technical details when you use percs.lol, such as IP address, browser and device type, the pages requested, and the time. Our login provider also logs sign-in events. We use these logs to run and secure percs.lol.

What we don't collect

We don't collect payment information, precise location, contacts, or biometric information (we don't scan faces, voices or fingerprints). Before a photo uploads, the editor redraws it into a fresh file, which removes hidden photo data like GPS location and camera details. It also removes the hidden tags (like names and comments) from MP3 files. We don't use analytics or advertising trackers.

3. How we use it

• To create your account and log you in.
• To save your draft and publish your page.
• To show the elements that connect to other services (such as Discord, Last.fm, Spotify, SoundCloud, YouTube, GitHub, Twitch or Steam) when you add them.
• To keep percs.lol secure, prevent abuse and spam, and enforce our Terms and Content Rules.
• To answer your messages and requests.
• To comply with the law and respond to valid legal requests.

We don't sell or rent your personal information, we don't "share" it for cross-context behavioral advertising, we don't show ads, and we don't use your content to train AI models.

4. What is public

Everything on a published page is public: your handle, the page's content, your badges, and any live information your elements show (for example your Discord status, what you're listening to on Last.fm, whether you're live on Twitch, or what you're playing on Steam). Anyone can see, copy or share it, and search engines may index it. Your draft and your email address are not public.

5. Who we share it with

Service providers that run percs.lol for us

• Supabase: database, logins and file storage.
• Vercel: website hosting.
• Discord: logging in, and looking up public Discord profile names and avatars for Discord elements.

They process information only to provide their services to us.

Services our servers look things up from

To fill in some elements, our servers send the account name or link the page owner entered (never a visitor's information) to Discord (server name, icon and member counts for server invites), GitHub (public profiles), Twitch (channel and live status), Steam (public profile and current game) and YouTube (which channel a @handle belongs to).

Services pages connect to

When a page uses certain features, the visitor's browser connects directly to these services, which receive the visitor's IP address and may set their own cookies under their own privacy policies:

• Spotify, SoundCloud and YouTube (embedded players; YouTube videos use YouTube's privacy-enhanced mode), Last.fm (now playing), Lanyard (Discord status), and the image servers of Discord, GitHub, Twitch and Steam (avatars and icons).
• Google Fonts (fonts) and jsDelivr (code libraries), used across percs.lol.

When the law or safety requires it

We may share information if we believe it's required by law or a valid legal request, or needed to protect the rights, safety or property of our users, the public, or percs.lol. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), as U.S. law requires.

If percs.lol changes hands

If percs.lol is transferred to someone else, your information may be transferred with it, under this policy.

6. People viewing pages

You don't need an account to view a page. We don't track visitors or build profiles of them. Our hosting provider keeps standard technical logs, and the third-party services in section 5 may receive a visitor's IP address when a page uses them.

7. Cookies and browser storage

percs.lol uses your browser's local storage (not advertising cookies) only for things that make the site work: keeping you logged in, saving your draft and the files you add before they upload, and remembering editor preferences such as collapsed panels. Because this storage is strictly necessary, we don't show a cookie banner. Embedded Spotify, SoundCloud and YouTube players may set their own cookies.

8. How long we keep it

• Account information, your published page and uploads: until you delete them or your account.
• Your draft: until you delete your account.
• Technical and sign-in logs: kept by our providers for a limited time, usually days to weeks.
• Backups: deleted data can remain in backups for a limited period before it's overwritten.
• Records of rule violations, removals and legal requests: kept as long as reasonably needed to prevent abuse and meet legal obligations.

9. Your choices and rights

• Edit or unpublish your page at any time in the editor.
• Delete your account from your account page. This deletes your page, draft, uploaded files and badges.
• Ask us at legal@percs.lol for a copy of your information, to correct it, or to delete it. We'll respond within 30 days, and may need to confirm the request comes from your account.

Depending on where you live, you may have additional rights. In the EEA, UK and Switzerland, these include access, correction, deletion, restriction, portability, and objection, and the right to complain to your local data protection authority. Residents of California and other U.S. states with privacy laws may request to know, correct and delete their personal information. We will not treat you differently for using these rights. You may use an authorized agent; we may ask them to prove they're authorized. We don't sell or share personal information as those laws define it, so there is nothing to opt out of.

Illinois residents: percs.lol does not collect, capture, store or use biometric identifiers or biometric information.

10. Legal bases (EEA and UK)

We process personal information to provide the service you asked for (contract), for our legitimate interests in running a safe and working service (security, abuse prevention, enforcing our rules), to comply with legal obligations, and with your consent where we ask for it.

11. International transfers

percs.lol is run from the United States, and our providers may process data in the U.S. and other countries. Where required, our providers use safeguards such as the European Commission's Standard Contractual Clauses.

12. Children

percs.lol is for people 13 and older, and people under 18 need a parent or guardian's permission. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has an account, or you're a parent who wants your child's page removed, email legal@percs.lol and we will delete it.

13. Security

We use encrypted connections (HTTPS), database rules that only let each account change its own data, and keep secret keys out of the website code. No system is perfectly secure, so we can't guarantee security. If you find a vulnerability, please report it privately to legal@percs.lol.

14. Changes

We may update this policy. We'll change the date at the top, and make significant changes noticeable on percs.lol.

15. Contact

Privacy questions and requests: legal@percs.lol