Privacy Policy

This Privacy Policy explains how DissKO collects, uses, and shares personal data when you use dissko.fun (the "Service"). DissKO is a brand operated by DissKO Team ("we", "us", "our"), which is responsible for your personal data under this policy. If you have questions, contact hello@dissko.fun.

Data we collect

Account data. When you sign in with Google, we receive your Google profile name, email address, and profile picture (avatar). We use these to create and identify your account. We do not receive your Google password.

Signup source. When you sign up, we record how you arrived, such as UTM campaign parameters and the referring website. This helps us understand which channels bring people to DissKO.

Battle inputs and generated content. We store the opinions you type, the topics and sides you pick, and the verses, vocals, and videos generated from them, along with AI judge scores and battle results.

Votes and reports. We record the votes you cast as a spectator and any reports you submit, linked to your account, so we can enforce one vote per account and review reported content.

Payment data. Purchases of credit packs are handled by our payment processor. We receive information such as the purchase amount, the pack, the status of the payment, and a transaction reference. We never see or store your full card number.

Technical data. We log IP addresses, browser and device information, and request timestamps. We use IP addresses to prevent abuse, such as spam accounts, vote manipulation, and attacks on the Service.

Analytics data. We use Vercel Analytics to measure page views and site performance. We also use PostHog for product analytics, such as which features are used and where people drop off. For visitors in the EU and UK, PostHog runs only after you give consent through our cookie banner.

Waitlist data. If you join the waitlist, we keep your email address and, if you share them, the topic, side and take you submitted, so we can tell you when battles open and set up your first battle.

Messages. If you email us, we keep the message and your contact details so we can respond.

How we use data

We use personal data to:

• create and run your account and battles;
• generate verses, vocals, and videos from your inputs;
• show public battles, replays, votes, and results;
• process purchases and keep your credit balance accurate;
• moderate content and handle reports;
• prevent fraud, abuse, and vote manipulation;
• understand and improve the Service;
• send service emails, such as purchase receipts or important account notices, and, where permitted, product updates you can opt out of;
• comply with legal obligations.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a safe and working service, your consent (for example, for analytics cookies where required), and legal obligations.

What is public

If a battle is public, the battle content, including your displayed name and avatar, your typed opinions, the generated verses and videos, and vote counts, can be seen by anyone visiting the arena or a replay. Do not put personal information in your battle inputs.

Who we share data with

We do not sell your personal data. We share it with service providers that process it on our behalf, under contracts that limit how they use it:

• Hosting providers that run the website and backend.
• Database providers that store account, battle, and vote records.
• Object storage and CDN providers that store and deliver generated videos and images.
• AI model providers that generate lyrics, vocals, and video, and that run content moderation. Your typed inputs and generated content are sent to these providers to produce and check each verse.
• Payment processor that handles checkout, payments, and refunds.
• Email provider (Brevo) that sends transactional and, where permitted, marketing emails.
• Analytics providers (Vercel Analytics and PostHog).
• Google, as the sign-in provider.

We may also disclose data when required by law, to protect the rights and safety of users or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your data.

Retention

We keep account data for as long as your account is active. Battle content is kept while the battle exists on the Service. Votes and reports are kept as long as the related battle exists, or longer if needed to investigate abuse. Payment records are kept as long as required for tax and accounting law. Technical logs are kept for a limited period for security and abuse prevention, then deleted or anonymized. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep it for legal reasons or to resolve disputes.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict certain processing, receive a copy in a portable format, and withdraw consent at any time. To make a request, including a request to delete your account and data, email hello@dissko.fun from the email address linked to your account. We may need to verify your identity before acting. You also have the right to complain to your local data protection authority.

Cookies

We use a small number of cookies and similar technologies:

• Session cookie: keeps you signed in. This is strictly necessary.
• Consent cookie: remembers your choice in the cookie banner. This is strictly necessary.
• Analytics cookies: used by PostHog to understand how the Service is used. For EU and UK visitors these are set only after consent. Vercel Analytics is designed to work without cookies.

You can change your cookie choice at any time through the site's cookie settings, and you can also clear cookies in your browser.

Children

DissKO is not for anyone under 18. We do not knowingly collect personal data from people under 18. If you believe someone under 18 has an account, contact hello@dissko.fun and we will delete it.

International transfers

Our service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses or equivalent mechanisms.

Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections and access controls. No system is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will change the "updated" date above, and for significant changes we will notify you on the site or by email.

Contact

DissKO is a brand operated by DissKO Team. For privacy questions or requests, email hello@dissko.fun.