This Privacy Policy describes how MemeCurrencyBot, Project Obsidian Anti-Cheat, and related systems (collectively, the "Service") process information within the r/memeexchangecommunism ecosystem.
1. Data Controller
For the purposes of the UK GDPR, EU General Data Protection Regulation (GDPR), and applicable data protection legislation, the operator of the Service acts as the data controller for data processed within this ecosystem.
2. Categories of Data Processed
- Reddit usernames and publicly available profile information
- Post, comment, and engagement metrics
- Internal currency balances and transaction records
- Security, integrity, and enforcement logs
- Behavioural and transactional metadata necessary for fraud prevention
3. Lawful Basis for Processing (UK & EU GDPR)
Processing is carried out under one or more of the following lawful bases:
- Legitimate Interests (Article 6(1)(f)) – operating, securing, and protecting the community economy
- Performance of a service requested by users
- Compliance with legal obligations where applicable
- User consent where legally required
The legitimate interests pursued include fraud detection, abuse prevention, system integrity, enforcement of community rules, and protection of participants. These interests are balanced against user rights and freedoms.
4. Anti-Abuse Monitoring (Project Obsidian)
Project Obsidian Anti-Cheat performs automated and manual analysis of system interactions, transaction patterns, engagement behaviour, and related metadata to detect abuse, manipulation, automation misuse, or rule violations.
Such monitoring is strictly necessary to maintain system security, prevent fraud, protect users, and preserve fairness within the internal economy.
Relevant information may be stored for auditing, investigation, evidentiary purposes, and human review. Automated decisions may result in balance adjustments, warnings, temporary restrictions, or permanent bans where justified.
Users may request review of significant automated decisions.
5. Data Retention
Data is retained only for as long as reasonably necessary to:
- Maintain operational integrity
- Investigate and resolve disputes
- Enforce rules and security measures
- Comply with applicable legal obligations
Retention periods may vary depending on the nature and sensitivity of the data and legal requirements.
6. International Transfers
Data may be processed in jurisdictions outside the UK or European Economic Area. Where required, appropriate safeguards are implemented, including contractual protections or recognised adequacy mechanisms.
7. Your Rights (UK & EU Residents)
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
8. California Privacy Rights (CCPA / CPRA)
California residents may have the right to request:
- Disclosure of categories and specific pieces of personal information collected
- Deletion of personal information
- Correction of inaccurate information
- Limitation of use of sensitive personal information (where applicable)
- Opt-out of sale or sharing of personal information
The Service does not sell or share personal information for monetary or cross-context behavioural advertising purposes.
9. Data Security
Appropriate technical and organisational measures are implemented to safeguard data against unauthorised access, alteration, disclosure, or destruction. However, no system can guarantee absolute security.
10. Third-Party Platforms
The Service operates in conjunction with Reddit. Data accessed via Reddit remains subject to Reddit’s own privacy policies and terms of service.
11. Changes to This Policy
This Privacy Policy may be updated periodically. Continued use of the Service constitutes acceptance of the revised terms.
12. Contact
For data protection requests or inquiries: rep.memeexchangecommunism@gmail.com