Privacy policy

The operator must complete this policy. The technical facts below describe what this website does today and can be used as input; they are not a complete privacy policy.

Controller

[Name and contact details of the controller and, if appointed, the data protection officer]

What the website processes (technical description)

• Account data sent to the game backend when you register or sign in: username, password (stored by the backend only as an argon2id hash), display name and chosen faction.
• Game profile data shown on your account page: rank, experience, career statistics, loadout, sanctions and appeals.
• Cookies that are strictly necessary for sign-in and security: an access token (about 15 minutes), a refresh token (up to 30 days), a CSRF token, a session hint, and – only for suspended accounts – a 30-minute appeal token. There are no analytics, advertising or third-party tracking cookies.
• Server logs: the game backend logs requests with a request id and uses client IP addresses for rate limiting. Authorization headers and cookies are redacted in its logs.
• No third-party requests: fonts and images are served from this site.

Legal basis, retention and recipients

[Legal basis for each processing purpose, retention periods, hosting provider and other recipients]

Your rights

[Rights of data subjects and how to exercise them, competent supervisory authority]

Note: account deletion and data export are not yet available in the account area; requests currently have to be handled by the operator [contact address].