Privacy Policy (GDPR)

Last updated: August 5, 2026

This policy describes how Patreon VRChat Bridge collects and processes your personal data, in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data controller

The data controller is the publisher of this site (Olskor & FurnaceDragon), reachable at: [CONTACT EMAIL].

2. Data collected

2.1 Data from Patreon (authentication)

When logging in via Patreon, the following data is retrieved:

• Patreon identifier (technical, not visible)
• Patreon username
• Patreon email address
• Subscription tier and membership status

This data is obtained via the official Patreon API after your explicit consent during the OAuth login.

2.2 Voluntarily provided data

• VRChat username: entered by you via the dedicated form, so that you can be recognized as a VIP within VRChat.

2.3 Technical data (visitors)

• IP address: recorded on each call to the public API (/api/vrchat/users) to measure the service's audience.

3. Purposes of processing

• Patreon subscription verification: confirm that you are indeed a VIP subscriber in order to grant you the corresponding status in VRChat.
• Patreon ↔ VRChat link: associate your VRChat username with your Patreon account.
• Audience measurement: count unique visitors on the public API (traffic statistics).

4. Legal basis

• Consent (Art. 6 §1 a): for the retrieval of Patreon data via OAuth and the entry of the VRChat username.
• Legitimate interest (Art. 6 §1 f): for audience measurement limited to the IP address and for securing the service.

5. Recipients of the data

The data is only accessible to the publishers (Olskor & FurnaceDragon). It is neither sold, transferred nor rented to third parties.

Certain data is however transmitted to Patreon (authentication) and to VRChat indirectly via the public API which exposes the VRChat usernames of VIP members — this is the very purpose of the service.

6. Retention period

Data	Retention period
Patreon account (ID, username, email, tier)	As long as the service is active, until a deletion request
VRChat username	As long as the account is active, until a deletion request
IP address (visitors)	6 months maximum, then automatic deletion
Connection logs / Patreon token	Current session

Visits older than 6 months are automatically purged by a scheduled task on the server.

7. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): request the deletion of your data.
• Objection: object to the processing.
• Portability: receive your data in a structured format.
• Restriction: request a temporary suspension of the processing.

To exercise these rights, please write to [CONTACT EMAIL] stating your Patreon username. We will reply within one month at the latest.

You may also lodge a complaint with the competent supervisory authority: the CNIL (www.cnil.fr/fr/plaintes).

8. Cookies

The site uses a single technical session cookie (pseudonymous session) strictly necessary for authentication (maintaining the login). No tracking, advertising or third-party cookie is used.

9. Security

Data is stored on a self-hosted personal server. Access to the service is protected by HTTPS via Traefik. The Patreon access token is only kept in session and is not persisted in the database.

10. Changes to this policy

This policy may be updated at any time. The "Last updated" date at the top of the page indicates the applicable version.