Privacy policy

Kova is the portfolio platform for aimers. The controller under the GDPR is pyvno (address in the imprint). For privacy questions or data requests, email [email protected].

• Your account: your Discord ID, username, avatar and email address, from Discord when you sign in (the only sign-in method). We never see your Discord password. Sign-ins to the kova companion desktop app create a normal session on your account.
• What you add: your profile (display name, bio, country, pronouns, birthday, theme, links and socials, gear, settings, showcase, videos, music, games) and everything you post: reviews, forum posts and votes, comments, vouches, follows, projects, marketplace listings, coaching listings, requests, sessions and ratings, aimgroup applications and answers, tournament and giveaway entries, rank-check videos, reports and appeals. If you report without an account, we keep the email you give us only to tell you the outcome.
• Uploaded files: images, decals, an optional profile music track and KovaaK's files you share, stored on Cloudflare R2.
• Connected game accounts: your KovaaK's username and the Steam ID behind it, found through your Discord account so you can only connect your own. We use them to read your public scores, playtime and benchmark ranks. If a tournament uses Aim Lab, the host can enter your Aim Lab username to read your scores for that event.
• kova companion: if you use the desktop app, it sends your live in-game setup (sensitivity, DPI and similar settings) and your challenge runs, which feed your stream overlay and team challenges.
• Usage: profile view counts, the kind of source a visit came from (a category like "Discord", never the full address), and server logs for security and uptime. No third-party analytics, ads or tracking.
• One cookie: a strictly necessary cookie keeps you signed in. There are no other cookies.

• To run kova: your account and the features you use (Article 6(1)(b) GDPR, contract).
• To publish what you choose: your profile and posts are public because you put them there, and you can change or remove them at any time (Article 6(1)(a), consent).
• To keep kova safe and useful: moderation, abuse prevention, ban-evasion checks, server logs and view counts (Article 6(1)(f), legitimate interest).

We never sell your data or share it for marketing. It goes only to:

• Hosting: IONOS SE (Germany) runs the server, database and backups on machines in Germany. Cloudflare delivers the site, caches public pages and stores uploads, so it handles visitors' IP addresses. Both act as our processors.
• Services you connect, each sent only what the feature needs: Discord (sign-in and connected servers), KovaaK's and EVXL (scores and ranks, by Discord ID, username and Steam ID), Aim Lab (tournament scores), Twitch (live status), last.fm (listening activity), Steam (checking a profile link in an application), Spotify, TIDAL and SoundCloud (playlist titles and covers), and YouTube (rank-check videos).
• Loaded by your browser, which shows that provider your IP address: Discord avatars, Twitch stream previews, Spotify and TIDAL covers, link icons from DuckDuckGo, X thumbnails and avatars (via unavatar.io), Twitch and Medal clip players when a clip is on screen, YouTube's player only once you press play, and the background-removal model from Hugging Face and jsDelivr if you use it (your image never leaves your device).

Kova runs in Germany. Some of these providers are outside the EU, mainly in the US; those transfers rely on the EU-US Data Privacy Framework or the Commission's Standard Contractual Clauses (Article 46 GDPR).

Your profile, aimgroup and tournament pages, marketplace listings, forum posts, comments and vouches are public, including to search engines. Your email, reports, notification settings and account settings are not.

An aimgroup owner can connect a Discord server and add our bot. In that server the bot can read the member list and roles (including people without a kova account) to send notifications and keep roles in sync. It posts what the owner turns on into the channels they pick: your profile link, personal bests, rank-ups, birthday, live streams, applications, giveaways, tournament results and leaderboards. With role mirroring on, whoever controls the server's roles can change your role in that aimgroup, and the other way round. The bot may also DM you about applications and tournaments you are in.

As long as your account exists. Deleting your account from the dashboard permanently removes your data within 30 days. Two things stay, both to stop a deleted account being used to start over: the Discord ID of a banned account, and your username, which stays reserved. Server logs are rotated after 30 days.

You can access, correct, delete and export your data (Dashboard, user menu, "export your data" gives you a JSON copy), object to processing based on legitimate interest, withdraw consent by removing what you published, and complain to a data protection authority. For anything else, email [email protected]. We answer within 30 days.

Kova is not for anyone under 13, or under your country's digital age of consent if that is higher. If you think a child has signed up, tell us and we will remove the account.

We will update this page as kova changes and announce material changes on the platform or in our Discord.