Files
OpenFrontIO/resources/privacy-policy.html
T
2026-05-11 12:55:19 +01:00

781 lines
29 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>OpenFront - Privacy Policy</title>
<style>
body {
font-family: Arial, sans-serif;
line-height: 1.6;
max-width: 800px;
margin: 0 auto;
padding: 20px;
color: #333;
}
h1 {
text-align: center;
color: #2c3e50;
margin-bottom: 30px;
padding-bottom: 10px;
border-bottom: 1px solid #eee;
}
h2 {
color: #2980b9;
margin-top: 30px;
border-bottom: 1px solid #eee;
padding-bottom: 5px;
}
h3 {
color: #34495e;
margin-top: 20px;
margin-bottom: 10px;
}
ul {
padding-left: 25px;
}
.updated-date {
text-align: center;
font-style: italic;
margin-bottom: 30px;
}
.contact {
margin-top: 40px;
padding: 15px;
background-color: #f9f9f9;
border-radius: 5px;
}
.footer {
margin-top: 50px;
padding-top: 20px;
border-top: 1px solid #eee;
text-align: center;
font-style: italic;
}
table {
border-collapse: collapse;
width: 100%;
margin: 15px 0;
}
th,
td {
border: 1px solid #ddd;
padding: 8px 12px;
text-align: left;
vertical-align: top;
}
th {
background-color: #f4f4f4;
color: #2980b9;
}
</style>
</head>
<body>
<h1>Privacy Policy</h1>
<p class="updated-date"><strong>Last Updated: 5/11/2026</strong></p>
<p>
This Privacy Policy explains how OpenFront ("we," "us," "our") collects,
uses, shares, and protects your personal information when you use our
Service. It also sets out your rights in relation to your personal
information and how to exercise them.
</p>
<p>
By using our Service, you agree to the collection and use of information
in accordance with this Privacy Policy. This Privacy Policy should be read
alongside our
<a href="terms-of-service.html">Terms of Service</a>.
</p>
<h2>1. Who We Are</h2>
<p>The data controller responsible for your personal information is:</p>
<p>
<strong>OpenFront LLC</strong><br />
c/o Northwest Registered Agent, Inc.<br />
2108 N Street, Suite N<br />
Sacramento, CA 95816, United States<br />
Email: <a href="mailto:legal@openfront.io">legal@openfront.io</a>
</p>
<p>
Day-to-day operational support and certain processing activities are
carried out on our behalf by Wicked Sick Limited (a company registered in
England and Wales, company number 11117702), acting as our service
provider.
</p>
<p>
If you are a resident of the European Economic Area or the United Kingdom,
you can also contact our designated representative in the relevant region
at <a href="mailto:legal@openfront.io">legal@openfront.io</a>.
</p>
<h2>2. Scope and Definitions</h2>
<p>
In this Privacy Policy, the following terms have the meanings given below:
</p>
<ul>
<li>
<strong>"Service"</strong> means our website at
<a href="https://openfront.io">https://openfront.io</a>, our game
clients (including those distributed via Steam, Crazy Games, and other
platforms), and our Discord bot.
</li>
<li>
<strong>"Personal Data"</strong> means any information relating to an
identified or identifiable individual.
</li>
<li>
<strong>"Player ID"</strong> means the unique, persistent identifier
assigned to each account on our Service.
</li>
<li>
<strong>"Usage Data"</strong> means data collected automatically when
you use the Service, such as IP address, device information, and match
telemetry.
</li>
<li>
<strong>"You"</strong> and <strong>"your"</strong> mean the individual
using the Service, or the legal entity on whose behalf such an
individual is using the Service.
</li>
</ul>
<h2>3. Information We Collect</h2>
<h3>3.1 Information you provide to us</h3>
<ul>
<li>
<strong>Discord account information.</strong> When you sign in via
Discord, we receive your Discord user ID, username, avatar, email
address, and information about Discord servers you are a member of, in
accordance with the permissions you grant via Discord.
</li>
<li>
<strong>Custom display names and cosmetic preferences.</strong> Names,
flags, patterns, or other identifiers you choose to set in the Service.
</li>
<li>
<strong>Support and appeals correspondence.</strong> The content of any
emails or messages you send to us, including bug reports, moderation
appeals, and questions about your account.
</li>
<li>
<strong>Payment information.</strong> If you purchase items from our
store, payment is processed by our payment processor (Stripe). We do not
store full card details on our own systems; we receive limited
transaction information such as order amount, currency, country of
billing, and a transaction reference.
</li>
</ul>
<h3>3.2 Information collected automatically</h3>
<ul>
<li>
<strong>Usage Data.</strong> IP address, browser type and version,
operating system, device identifiers, referring URL, pages or screens
viewed, time and date of access, and similar diagnostic data.
</li>
<li>
<strong>Game telemetry.</strong> Match results, statistics, ratings,
in-game actions, chat messages, cosmetic items used, errors and crash
reports, and similar gameplay data.
</li>
<li>
<strong>Moderation signals.</strong> Information generated by our
anti-cheat, anti-spam, and anti-abuse systems, including reports
submitted by other players and records of warnings or enforcement
actions taken against your account.
</li>
</ul>
<h3>3.3 Information from third parties</h3>
<ul>
<li>
<strong>Discord.</strong> As described above, when you authenticate via
Discord we receive certain information from your Discord account.
</li>
<li>
<strong>Steam, Crazy Games, and other distribution platforms.</strong>
When you access the Service via a third-party distribution platform, we
may receive limited information from that platform (such as a
platform-specific user identifier and aggregate engagement statistics)
in accordance with the platform's own terms.
</li>
<li>
<strong>Service providers.</strong> We may receive information from our
service providers (such as analytics or moderation tooling providers)
about your interactions with the Service.
</li>
</ul>
<h3>3.4 Cookies and similar technologies</h3>
<p>
We use cookies and similar tracking technologies on our website. The
categories we use are:
</p>
<ul>
<li>
<strong>Strictly necessary cookies.</strong> Required for
authentication, security, and the basic operation of the Service. You
cannot opt out of these cookies if you wish to use the Service.
</li>
<li>
<strong>Functional cookies.</strong> Remember choices you have made,
such as language and display preferences.
</li>
<li>
<strong>Analytics cookies.</strong> Help us understand how the Service
is used so we can improve it.
</li>
<li>
<strong>Advertising cookies.</strong> Set by our advertising partner
(see Section 5.5 below).
</li>
</ul>
<p>
Where required by law, we will request your consent before placing
non-essential cookies. You can change your preferences at any time using
the cookie controls on our website. You can also configure your browser to
refuse cookies, although this may limit the functionality of the Service.
</p>
<h2>4. How We Use Your Information and Our Legal Bases</h2>
<p>
If you are located in the European Economic Area, the United Kingdom, or
another jurisdiction that requires us to identify a legal basis for
processing your personal information, we rely on the legal bases set out
in the table below.
</p>
<table>
<thead>
<tr>
<th>Purpose</th>
<th>Legal basis</th>
</tr>
</thead>
<tbody>
<tr>
<td>
Providing and maintaining the Service, including authentication,
matchmaking, gameplay, and account management
</td>
<td>Performance of a contract (our Terms of Service)</td>
</tr>
<tr>
<td>
Operating leaderboards and publicly displaying Player IDs, display
names, and gameplay statistics
</td>
<td>
Performance of a contract; our legitimate interests in operating a
competitive multiplayer game
</td>
</tr>
<tr>
<td>
Retaining and displaying a history of recent display names to deter
ban evasion, name spoofing, and impersonation
</td>
<td>
Our legitimate interests in maintaining the integrity of the Service
and protecting our community
</td>
</tr>
<tr>
<td>
Detecting, investigating, and acting on cheating, abuse, and other
breaches of our Terms of Service
</td>
<td>
Our legitimate interests in maintaining a fair and safe environment
for all players; compliance with our legal obligations where
applicable
</td>
</tr>
<tr>
<td>Processing payments for purchases</td>
<td>Performance of a contract</td>
</tr>
<tr>
<td>
Responding to your support requests, appeals, and other
communications
</td>
<td>
Performance of a contract; our legitimate interests in supporting
our users
</td>
</tr>
<tr>
<td>
Sending optional marketing communications about new features,
events, and offers
</td>
<td>Your consent (which you can withdraw at any time)</td>
</tr>
<tr>
<td>Operating analytics and improving the Service</td>
<td>
Our legitimate interests in understanding how the Service is used;
your consent where required by applicable cookie law
</td>
</tr>
<tr>
<td>
Complying with legal obligations and responding to lawful requests
from authorities
</td>
<td>Compliance with a legal obligation</td>
</tr>
<tr>
<td>
Defending or asserting legal claims and protecting our rights and
property
</td>
<td>Our legitimate interests in protecting our business</td>
</tr>
</tbody>
</table>
<p>
Where we rely on legitimate interests, you have the right to object to
that processing (see Section 9).
</p>
<h2>5. Public Profiles, Leaderboards, and Sharing</h2>
<h3>5.1 Public profiles and leaderboards</h3>
<p>
Some features of the Service are public by design. As described in Section
7 of our Terms of Service, the following information may be displayed
publicly to other users and to non-users (including on the Website,
in-game, on Steam, on Crazy Games, in our Discord server, and on
third-party sites or applications that display OpenFront data):
</p>
<ul>
<li>Your Player ID</li>
<li>
A display name associated with your Player ID, which may be a custom
display name that you have set, your Discord username, or one or more of
the names you have most recently used in the Service
</li>
<li>
Your match history, statistics, ratings, leaderboard positions, and
cosmetic items in use
</li>
<li>Any clan, team, or community affiliations you have chosen to set</li>
</ul>
<p>
We retain and display a history of recent display names in order to deter
ban evasion, name spoofing, and impersonation, and to support fair play
enforcement. We rely on our legitimate interests as our legal basis for
this processing.
</p>
<p>
Your email address, Discord ID, IP address, payment information, and any
other identifying or contact information that you have not chosen to
display in-game are not made public through this feature.
</p>
<p>
If you would prefer that we display only your current name and not your
historical display names, please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. We will
assess such requests on a case-by-case basis and reserve the right to
decline where retention of historical names is necessary for moderation,
anti-evasion, or anti-impersonation purposes.
</p>
<h3>5.2 Discord</h3>
<p>
When you use our Discord bot, certain information is shared with Discord
as necessary for the bot's functionality. Discord's processing of your
information is governed by its own privacy policy.
</p>
<h3>5.3 Distribution platforms (Steam, Crazy Games, and others)</h3>
<p>
When you access the Service through a third-party distribution platform,
that platform may collect and process information about you in accordance
with its own privacy policy. We exchange limited information with these
platforms as needed to authenticate you, deliver the Service, and report
aggregate engagement statistics.
</p>
<h3>5.4 Payment processors</h3>
<p>
Payments for purchases made through our store are processed by Stripe,
Inc. ("Stripe"). Stripe acts as an independent data controller for payment
information you provide to it, in accordance with its own privacy policy.
We receive only limited transaction information from Stripe and do not
store full payment card details.
</p>
<h3>5.5 Advertising</h3>
<p>
Advertising on certain parts of our Service is managed by Playwire LLC
("Playwire"). Playwire and its partners may set cookies, web beacons, and
similar technologies on your device, and may collect information including
your IP address, device identifiers, browser information, and information
about your use of the Service, in order to deliver and measure
advertising. To learn more about the data Playwire collects and your
choices, please see
<a href="https://www.playwire.com/privacy-policy"
>Playwire's privacy policy</a
>. Where required by law, we will obtain your consent before allowing
Playwire to set non-essential cookies.
</p>
<h3>5.6 Other service providers</h3>
<p>
We use third-party service providers to help us operate the Service,
including hosting and infrastructure providers, analytics providers,
moderation tooling providers, email and communications providers, and
similar vendors. These providers process personal information on our
behalf and are contractually required to handle it in accordance with this
Privacy Policy and applicable law.
</p>
<h3>5.7 Legal and safety disclosures</h3>
<p>
We may disclose your personal information where we believe in good faith
that doing so is necessary to:
</p>
<ul>
<li>Comply with a legal obligation, court order, or lawful request</li>
<li>Enforce our Terms of Service or other agreements</li>
<li>Detect, prevent, or address fraud, security, or technical issues</li>
<li>
Protect the rights, property, or safety of OpenFront, our users, or
others
</li>
</ul>
<h3>5.8 Business transfers</h3>
<p>
If we are involved in a merger, acquisition, reorganisation, sale of
assets, financing, bankruptcy, or similar event, your personal information
may be transferred to the acquiring or successor party. We will provide
notice on this page before your personal information becomes subject to a
different privacy policy.
</p>
<h3>5.9 With your consent</h3>
<p>
We may share your personal information for any other purpose with your
consent.
</p>
<h2>6. Data Retention</h2>
<p>
We retain personal information only for as long as is necessary for the
purposes set out in this Privacy Policy, to comply with our legal
obligations, to resolve disputes, and to enforce our agreements. The
typical retention periods we apply are set out below; actual retention may
vary depending on the circumstances.
</p>
<table>
<thead>
<tr>
<th>Category of data</th>
<th>Typical retention period</th>
</tr>
</thead>
<tbody>
<tr>
<td>Account and profile information</td>
<td>For the life of your account, plus 12 months</td>
</tr>
<tr>
<td>Match history, statistics, and leaderboard data</td>
<td>
For the life of your account; may be retained indefinitely in
aggregated or anonymised form
</td>
</tr>
<tr>
<td>Historical display names</td>
<td>
Up to 12 months from the date the name was last used, unless a
longer period is required for moderation or enforcement
</td>
</tr>
<tr>
<td>
Moderation records (warnings, suspensions, ban appeals
correspondence)
</td>
<td>
Warnings: 24 months; suspensions and permanent bans: indefinitely
for the purpose of preventing evasion
</td>
</tr>
<tr>
<td>Support correspondence</td>
<td>24 months from last contact</td>
</tr>
<tr>
<td>Marketing consent records</td>
<td>For as long as your account is active, plus 24 months</td>
</tr>
<tr>
<td>Payment and tax records</td>
<td>As required by applicable tax law (typically 67 years)</td>
</tr>
<tr>
<td>Cookie consent records</td>
<td>12 months</td>
</tr>
<tr>
<td>Server logs and diagnostic data</td>
<td>
Up to 90 days, except where retained longer for security
investigations
</td>
</tr>
</tbody>
</table>
<h2>7. International Data Transfers</h2>
<p>
OpenFront LLC is based in the United States. Some of our service providers
are also based outside your country of residence. Your personal
information may therefore be transferred to, and processed in, countries
other than the country in which you are located, including countries that
may not provide the same level of data protection as your home country.
</p>
<p>
Where we transfer personal information of users in the United Kingdom or
the European Economic Area to countries that have not been designated as
providing an adequate level of protection, we rely on appropriate
safeguards as required by applicable law, including the European
Commission's Standard Contractual Clauses, the UK International Data
Transfer Agreement or Addendum, or another lawful transfer mechanism.
</p>
<p>
You can request further information about these safeguards by contacting
us at <a href="mailto:legal@openfront.io">legal@openfront.io</a>.
</p>
<h2>8. Security</h2>
<p>
We use commercially reasonable technical and organisational measures to
protect personal information from loss, misuse, and unauthorised access,
disclosure, alteration, and destruction. However, no method of
transmission over the internet or method of electronic storage is 100%
secure, and we cannot guarantee the absolute security of your information.
</p>
<p>
In the event of a personal data breach that is likely to result in a risk
to the rights and freedoms of affected individuals, we will notify the
relevant supervisory authority and, where required, affected individuals,
in accordance with applicable law.
</p>
<h2>9. Your Rights</h2>
<h3>9.1 Rights available to all users</h3>
<p>
You may contact us at any time at
<a href="mailto:support@openfront.io">support@openfront.io</a> to:
</p>
<ul>
<li>Request access to the personal information we hold about you</li>
<li>Request that we correct inaccurate or incomplete information</li>
<li>Request that we delete your account and associated information</li>
<li>Withdraw your consent where we rely on it as our legal basis</li>
</ul>
<p>
Please note that we may need to retain certain information where we have a
legal obligation or other lawful basis to do so (for example, to maintain
enforcement records to prevent ban evasion).
</p>
<h3>
9.2 Additional rights for users in the UK and the European Economic Area
</h3>
<p>
If you are located in the United Kingdom or the European Economic Area,
you have the following rights under the UK GDPR or EU GDPR (as
applicable):
</p>
<ul>
<li>
<strong>Right of access.</strong> To obtain a copy of the personal
information we hold about you.
</li>
<li>
<strong>Right to rectification.</strong> To have inaccurate information
corrected and incomplete information completed.
</li>
<li>
<strong>Right to erasure.</strong> To have your personal information
deleted in certain circumstances.
</li>
<li>
<strong>Right to restriction of processing.</strong> To request that we
limit how we use your information in certain circumstances.
</li>
<li>
<strong>Right to data portability.</strong> To receive your personal
information in a structured, commonly used, and machine-readable format,
and to have it transmitted to another controller, where technically
feasible.
</li>
<li>
<strong>Right to object.</strong> To object to our processing of your
personal information where we rely on legitimate interests, including
profiling for those purposes; and to object at any time to processing of
your personal information for direct marketing.
</li>
<li>
<strong>Right to withdraw consent.</strong> Where we rely on your
consent, you can withdraw that consent at any time without affecting the
lawfulness of processing before withdrawal.
</li>
<li>
<strong>Right to lodge a complaint.</strong> You have the right to lodge
a complaint with a data protection supervisory authority. In the UK this
is the Information Commissioner's Office (<a href="https://ico.org.uk"
>ico.org.uk</a
>); in the EU this is the supervisory authority in your country of
residence.
</li>
</ul>
<h3>9.3 Additional rights for California residents</h3>
<p>
If you are a California resident, you have the following rights under the
California Consumer Privacy Act, as amended by the California Privacy
Rights Act ("CCPA"):
</p>
<ul>
<li>
<strong>Right to know.</strong> To request information about the
categories and specific pieces of personal information we have collected
about you, the categories of sources, the purposes for collecting it,
and the categories of third parties with whom we share it.
</li>
<li>
<strong>Right to delete.</strong> To request that we delete personal
information we have collected from you, subject to certain exceptions.
</li>
<li>
<strong>Right to correct.</strong> To request that we correct inaccurate
personal information we hold about you.
</li>
<li>
<strong>Right to opt out of sale or sharing.</strong> We do not sell
your personal information for money. We may, however, share certain
information with our advertising partner (Playwire) in ways that could
be considered "sharing" for cross-context behavioural advertising under
the CCPA. You can opt out of this sharing using the cookie controls on
our website.
</li>
<li>
<strong>Right to limit use of sensitive personal information.</strong>
We do not use sensitive personal information for purposes that require
offering this right under the CCPA.
</li>
<li>
<strong>Right to non-discrimination.</strong> We will not discriminate
against you for exercising any of your rights under the CCPA.
</li>
</ul>
<p>
To exercise any of these rights, please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. We may
need to verify your identity before responding. You may also designate an
authorised agent to make a request on your behalf.
</p>
<h2>10. Automated Decision-Making</h2>
<p>
Some processes within the Service involve a degree of automated
decision-making, including:
</p>
<ul>
<li>
<strong>Anti-cheat and anti-abuse detection.</strong> We use automated
systems to identify suspected cheating, exploit use, spam, and other
breaches of our Terms of Service.
</li>
<li>
<strong>Matchmaking and rating.</strong> We use automated systems to
match players into games and to calculate ratings and leaderboard
positions.
</li>
<li>
<strong>Display name screening.</strong> We use automated systems to
screen display names against a list of prohibited terms.
</li>
</ul>
<p>
Decisions with significant consequences for you — in particular, permanent
account bans for serious or repeated breaches — are subject to human
review where you appeal an enforcement action in accordance with Section
6.9 of our Terms of Service. If you believe an enforcement action against
your account was the result of solely automated processing and you wish to
request human review, please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>.
</p>
<h2>11. Children's Privacy</h2>
<p>
You must be at least 13 years old to use our Service, or at least 16 years
old if you are a resident of the European Economic Area, the United
Kingdom, or another jurisdiction that requires a higher minimum age for
the processing of personal data, unless local law provides for a lower age
of digital consent.
</p>
<p>
We do not knowingly collect personal information from anyone below the
applicable minimum age. If you are a parent or guardian and you believe
that your child has provided us with personal information, please contact
us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. If we
become aware that we have collected personal information from a user below
the applicable minimum age, we will take reasonable steps to delete that
information and terminate the account.
</p>
<h2>12. Third-Party Links</h2>
<p>
Our Service may contain links to third-party websites and services that
are not operated by us. We are not responsible for the privacy practices
or content of those third parties. We encourage you to review the privacy
policy of every site and service you visit.
</p>
<h2>13. Changes to This Privacy Policy</h2>
<p>
We may update this Privacy Policy from time to time. If we make material
changes, we will provide reasonable notice, which may include posting a
notice on the Service, updating the "Last Updated" date at the top of this
Privacy Policy, or, where appropriate, contacting you by email. We
encourage you to review this Privacy Policy periodically.
</p>
<h2>14. Contact Us</h2>
<p class="contact">
If you have any questions about this Privacy Policy or wish to exercise
any of your rights, you can contact us at:
<br /><br />
General privacy enquiries:
<a href="mailto:support@openfront.io">support@openfront.io</a>
<br />
Legal enquiries:
<a href="mailto:legal@openfront.io">legal@openfront.io</a>
<br /><br />
OpenFront LLC<br />
c/o Northwest Registered Agent, Inc.<br />
2108 N Street, Suite N<br />
Sacramento, CA 95816, United States
</p>
<div class="footer">
<p>
By using our Service, you acknowledge that you have read and understood
this Privacy Policy.
</p>
</div>
</body>
</html>