Files
OpenFrontIO/resources/privacy-policy.html
T
2026-05-11 12:12:07 +01:00

790 lines
29 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>OpenFront - Privacy Policy</title>
<style>
body {
font-family: Arial, sans-serif;
line-height: 1.6;
max-width: 800px;
margin: 0 auto;
padding: 20px;
color: #333;
}
h1 {
text-align: center;
color: #2c3e50;
margin-bottom: 30px;
padding-bottom: 10px;
border-bottom: 1px solid #eee;
}
h2 {
color: #2980b9;
margin-top: 30px;
border-bottom: 1px solid #eee;
padding-bottom: 5px;
}
h3 {
color: #34495e;
margin-top: 20px;
margin-bottom: 10px;
}
ul {
padding-left: 25px;
}
.updated-date {
text-align: center;
font-style: italic;
margin-bottom: 30px;
}
.contact {
margin-top: 40px;
padding: 15px;
background-color: #f9f9f9;
border-radius: 5px;
}
.footer {
margin-top: 50px;
padding-top: 20px;
border-top: 1px solid #eee;
text-align: center;
font-style: italic;
}
table {
border-collapse: collapse;
width: 100%;
margin: 15px 0;
}
th, td {
border: 1px solid #ddd;
padding: 8px 12px;
text-align: left;
vertical-align: top;
}
th {
background-color: #f4f4f4;
color: #2980b9;
}
</style>
</head>
<body>
<h1>Privacy Policy</h1>
<p class="updated-date"><strong>Last Updated: 5/11/2026</strong></p>
<p>
This Privacy Policy explains how OpenFront ("we," "us," "our") collects,
uses, shares, and protects your personal information when you use our
Service. It also sets out your rights in relation to your personal
information and how to exercise them.
</p>
<p>
By using our Service, you agree to the collection and use of information
in accordance with this Privacy Policy. This Privacy Policy should be
read alongside our
<a href="terms-of-service.html">Terms of Service</a>.
</p>
<h2>1. Who We Are</h2>
<p>
The data controller responsible for your personal information is:
</p>
<p>
<strong>OpenFront LLC</strong><br />
c/o Northwest Registered Agent, Inc.<br />
2108 N Street, Suite N<br />
Sacramento, CA 95816, United States<br />
Email: <a href="mailto:legal@openfront.io">legal@openfront.io</a>
</p>
<p>
Day-to-day operational support and certain processing activities are
carried out on our behalf by Wicked Sick Limited (a company registered
in England and Wales, company number 11117702), acting as our service
provider.
</p>
<p>
If you are a resident of the European Economic Area or the United
Kingdom, you can also contact our designated representative in the
relevant region at <a href="mailto:legal@openfront.io">legal@openfront.io</a>.
</p>
<h2>2. Scope and Definitions</h2>
<p>
In this Privacy Policy, the following terms have the meanings given
below:
</p>
<ul>
<li>
<strong>"Service"</strong> means our website at
<a href="https://openfront.io">https://openfront.io</a>, our game
clients (including those distributed via Steam, Crazy Games, and
other platforms), and our Discord bot.
</li>
<li>
<strong>"Personal Data"</strong> means any information relating to an
identified or identifiable individual.
</li>
<li>
<strong>"Player ID"</strong> means the unique, persistent identifier
assigned to each account on our Service.
</li>
<li>
<strong>"Usage Data"</strong> means data collected automatically when
you use the Service, such as IP address, device information, and
match telemetry.
</li>
<li>
<strong>"You"</strong> and <strong>"your"</strong> mean the
individual using the Service, or the legal entity on whose behalf
such an individual is using the Service.
</li>
</ul>
<h2>3. Information We Collect</h2>
<h3>3.1 Information you provide to us</h3>
<ul>
<li>
<strong>Discord account information.</strong> When you sign in via
Discord, we receive your Discord user ID, username, avatar, email
address, and information about Discord servers you are a member of,
in accordance with the permissions you grant via Discord.
</li>
<li>
<strong>Custom display names and cosmetic preferences.</strong> Names,
flags, patterns, or other identifiers you choose to set in the
Service.
</li>
<li>
<strong>Support and appeals correspondence.</strong> The content of
any emails or messages you send to us, including bug reports,
moderation appeals, and questions about your account.
</li>
<li>
<strong>Payment information.</strong> If you purchase items from our
store, payment is processed by our payment processor (Stripe). We do
not store full card details on our own systems; we receive limited
transaction information such as order amount, currency, country of
billing, and a transaction reference.
</li>
</ul>
<h3>3.2 Information collected automatically</h3>
<ul>
<li>
<strong>Usage Data.</strong> IP address, browser type and version,
operating system, device identifiers, referring URL, pages or screens
viewed, time and date of access, and similar diagnostic data.
</li>
<li>
<strong>Game telemetry.</strong> Match results, statistics, ratings,
in-game actions, chat messages, cosmetic items used, errors and
crash reports, and similar gameplay data.
</li>
<li>
<strong>Moderation signals.</strong> Information generated by our
anti-cheat, anti-spam, and anti-abuse systems, including reports
submitted by other players and records of warnings or enforcement
actions taken against your account.
</li>
</ul>
<h3>3.3 Information from third parties</h3>
<ul>
<li>
<strong>Discord.</strong> As described above, when you authenticate
via Discord we receive certain information from your Discord
account.
</li>
<li>
<strong>Steam, Crazy Games, and other distribution platforms.</strong>
When you access the Service via a third-party distribution platform,
we may receive limited information from that platform (such as a
platform-specific user identifier and aggregate engagement
statistics) in accordance with the platform's own terms.
</li>
<li>
<strong>Service providers.</strong> We may receive information from
our service providers (such as analytics or moderation tooling
providers) about your interactions with the Service.
</li>
</ul>
<h3>3.4 Cookies and similar technologies</h3>
<p>
We use cookies and similar tracking technologies on our website. The
categories we use are:
</p>
<ul>
<li>
<strong>Strictly necessary cookies.</strong> Required for
authentication, security, and the basic operation of the Service.
You cannot opt out of these cookies if you wish to use the Service.
</li>
<li>
<strong>Functional cookies.</strong> Remember choices you have made,
such as language and display preferences.
</li>
<li>
<strong>Analytics cookies.</strong> Help us understand how the
Service is used so we can improve it.
</li>
<li>
<strong>Advertising cookies.</strong> Set by our advertising partner
(see Section 5.5 below).
</li>
</ul>
<p>
Where required by law, we will request your consent before placing
non-essential cookies. You can change your preferences at any time
using the cookie controls on our website. You can also configure your
browser to refuse cookies, although this may limit the functionality
of the Service.
</p>
<h2>4. How We Use Your Information and Our Legal Bases</h2>
<p>
If you are located in the European Economic Area, the United Kingdom,
or another jurisdiction that requires us to identify a legal basis for
processing your personal information, we rely on the legal bases set
out in the table below.
</p>
<table>
<thead>
<tr>
<th>Purpose</th>
<th>Legal basis</th>
</tr>
</thead>
<tbody>
<tr>
<td>
Providing and maintaining the Service, including authentication,
matchmaking, gameplay, and account management
</td>
<td>Performance of a contract (our Terms of Service)</td>
</tr>
<tr>
<td>
Operating leaderboards and publicly displaying Player IDs,
display names, and gameplay statistics
</td>
<td>
Performance of a contract; our legitimate interests in operating
a competitive multiplayer game
</td>
</tr>
<tr>
<td>
Retaining and displaying a history of recent display names to
deter ban evasion, name spoofing, and impersonation
</td>
<td>
Our legitimate interests in maintaining the integrity of the
Service and protecting our community
</td>
</tr>
<tr>
<td>
Detecting, investigating, and acting on cheating, abuse, and
other breaches of our Terms of Service
</td>
<td>
Our legitimate interests in maintaining a fair and safe
environment for all players; compliance with our legal
obligations where applicable
</td>
</tr>
<tr>
<td>Processing payments for purchases</td>
<td>Performance of a contract</td>
</tr>
<tr>
<td>
Responding to your support requests, appeals, and other
communications
</td>
<td>
Performance of a contract; our legitimate interests in
supporting our users
</td>
</tr>
<tr>
<td>
Sending optional marketing communications about new features,
events, and offers
</td>
<td>Your consent (which you can withdraw at any time)</td>
</tr>
<tr>
<td>Operating analytics and improving the Service</td>
<td>
Our legitimate interests in understanding how the Service is
used; your consent where required by applicable cookie law
</td>
</tr>
<tr>
<td>
Complying with legal obligations and responding to lawful
requests from authorities
</td>
<td>Compliance with a legal obligation</td>
</tr>
<tr>
<td>
Defending or asserting legal claims and protecting our rights
and property
</td>
<td>Our legitimate interests in protecting our business</td>
</tr>
</tbody>
</table>
<p>
Where we rely on legitimate interests, you have the right to object to
that processing (see Section 9).
</p>
<h2>5. Public Profiles, Leaderboards, and Sharing</h2>
<h3>5.1 Public profiles and leaderboards</h3>
<p>
Some features of the Service are public by design. As described in
Section 7 of our Terms of Service, the following information may be
displayed publicly to other users and to non-users (including on the
Website, in-game, on Steam, on Crazy Games, in our Discord server, and
on third-party sites or applications that display OpenFront data):
</p>
<ul>
<li>Your Player ID</li>
<li>
A display name associated with your Player ID, which may be a custom
display name that you have set, your Discord username, or one or
more of the names you have most recently used in the Service
</li>
<li>
Your match history, statistics, ratings, leaderboard positions, and
cosmetic items in use
</li>
<li>
Any clan, team, or community affiliations you have chosen to set
</li>
</ul>
<p>
We retain and display a history of recent display names in order to
deter ban evasion, name spoofing, and impersonation, and to support
fair play enforcement. We rely on our legitimate interests as our
legal basis for this processing.
</p>
<p>
Your email address, Discord ID, IP address, payment information, and
any other identifying or contact information that you have not chosen
to display in-game are not made public through this feature.
</p>
<p>
If you would prefer that we display only your current name and not
your historical display names, please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. We will
assess such requests on a case-by-case basis and reserve the right to
decline where retention of historical names is necessary for
moderation, anti-evasion, or anti-impersonation purposes.
</p>
<h3>5.2 Discord</h3>
<p>
When you use our Discord bot, certain information is shared with
Discord as necessary for the bot's functionality. Discord's processing
of your information is governed by its own privacy policy.
</p>
<h3>5.3 Distribution platforms (Steam, Crazy Games, and others)</h3>
<p>
When you access the Service through a third-party distribution
platform, that platform may collect and process information about you
in accordance with its own privacy policy. We exchange limited
information with these platforms as needed to authenticate you, deliver
the Service, and report aggregate engagement statistics.
</p>
<h3>5.4 Payment processors</h3>
<p>
Payments for purchases made through our store are processed by Stripe,
Inc. ("Stripe"). Stripe acts as an independent data controller for
payment information you provide to it, in accordance with its own
privacy policy. We receive only limited transaction information from
Stripe and do not store full payment card details.
</p>
<h3>5.5 Advertising</h3>
<p>
Advertising on certain parts of our Service is managed by Playwire LLC
("Playwire"). Playwire and its partners may set cookies, web beacons,
and similar technologies on your device, and may collect information
including your IP address, device identifiers, browser information,
and information about your use of the Service, in order to deliver
and measure advertising. To learn more about the data Playwire
collects and your choices, please see
<a href="https://www.playwire.com/privacy-policy">Playwire's privacy policy</a>.
Where required by law, we will obtain your consent before allowing
Playwire to set non-essential cookies.
</p>
<h3>5.6 Other service providers</h3>
<p>
We use third-party service providers to help us operate the Service,
including hosting and infrastructure providers, analytics providers,
moderation tooling providers, email and communications providers, and
similar vendors. These providers process personal information on our
behalf and are contractually required to handle it in accordance with
this Privacy Policy and applicable law.
</p>
<h3>5.7 Legal and safety disclosures</h3>
<p>
We may disclose your personal information where we believe in good
faith that doing so is necessary to:
</p>
<ul>
<li>Comply with a legal obligation, court order, or lawful request</li>
<li>Enforce our Terms of Service or other agreements</li>
<li>
Detect, prevent, or address fraud, security, or technical issues
</li>
<li>
Protect the rights, property, or safety of OpenFront, our users, or
others
</li>
</ul>
<h3>5.8 Business transfers</h3>
<p>
If we are involved in a merger, acquisition, reorganisation, sale of
assets, financing, bankruptcy, or similar event, your personal
information may be transferred to the acquiring or successor party. We
will provide notice on this page before your personal information
becomes subject to a different privacy policy.
</p>
<h3>5.9 With your consent</h3>
<p>
We may share your personal information for any other purpose with your
consent.
</p>
<h2>6. Data Retention</h2>
<p>
We retain personal information only for as long as is necessary for
the purposes set out in this Privacy Policy, to comply with our legal
obligations, to resolve disputes, and to enforce our agreements. The
typical retention periods we apply are set out below; actual retention
may vary depending on the circumstances.
</p>
<table>
<thead>
<tr>
<th>Category of data</th>
<th>Typical retention period</th>
</tr>
</thead>
<tbody>
<tr>
<td>Account and profile information</td>
<td>For the life of your account, plus 12 months</td>
</tr>
<tr>
<td>Match history, statistics, and leaderboard data</td>
<td>
For the life of your account; may be retained indefinitely in
aggregated or anonymised form
</td>
</tr>
<tr>
<td>Historical display names</td>
<td>
Up to 12 months from the date the name was last used, unless a
longer period is required for moderation or enforcement
</td>
</tr>
<tr>
<td>
Moderation records (warnings, suspensions, ban appeals
correspondence)
</td>
<td>
Warnings: 24 months; suspensions and permanent bans: indefinitely
for the purpose of preventing evasion
</td>
</tr>
<tr>
<td>Support correspondence</td>
<td>24 months from last contact</td>
</tr>
<tr>
<td>Marketing consent records</td>
<td>For as long as your account is active, plus 24 months</td>
</tr>
<tr>
<td>Payment and tax records</td>
<td>As required by applicable tax law (typically 67 years)</td>
</tr>
<tr>
<td>Cookie consent records</td>
<td>12 months</td>
</tr>
<tr>
<td>Server logs and diagnostic data</td>
<td>Up to 90 days, except where retained longer for security investigations</td>
</tr>
</tbody>
</table>
<h2>7. International Data Transfers</h2>
<p>
OpenFront LLC is based in the United States. Some of our service
providers are also based outside your country of residence. Your
personal information may therefore be transferred to, and processed
in, countries other than the country in which you are located,
including countries that may not provide the same level of data
protection as your home country.
</p>
<p>
Where we transfer personal information of users in the United Kingdom
or the European Economic Area to countries that have not been
designated as providing an adequate level of protection, we rely on
appropriate safeguards as required by applicable law, including the
European Commission's Standard Contractual Clauses, the UK
International Data Transfer Agreement or Addendum, or another lawful
transfer mechanism.
</p>
<p>
You can request further information about these safeguards by
contacting us at <a href="mailto:legal@openfront.io">legal@openfront.io</a>.
</p>
<h2>8. Security</h2>
<p>
We use commercially reasonable technical and organisational measures
to protect personal information from loss, misuse, and unauthorised
access, disclosure, alteration, and destruction. However, no method
of transmission over the internet or method of electronic storage is
100% secure, and we cannot guarantee the absolute security of your
information.
</p>
<p>
In the event of a personal data breach that is likely to result in a
risk to the rights and freedoms of affected individuals, we will
notify the relevant supervisory authority and, where required,
affected individuals, in accordance with applicable law.
</p>
<h2>9. Your Rights</h2>
<h3>9.1 Rights available to all users</h3>
<p>
You may contact us at any time at
<a href="mailto:support@openfront.io">support@openfront.io</a> to:
</p>
<ul>
<li>Request access to the personal information we hold about you</li>
<li>Request that we correct inaccurate or incomplete information</li>
<li>Request that we delete your account and associated information</li>
<li>Withdraw your consent where we rely on it as our legal basis</li>
</ul>
<p>
Please note that we may need to retain certain information where we
have a legal obligation or other lawful basis to do so (for example,
to maintain enforcement records to prevent ban evasion).
</p>
<h3>9.2 Additional rights for users in the UK and the European Economic Area</h3>
<p>
If you are located in the United Kingdom or the European Economic
Area, you have the following rights under the UK GDPR or EU GDPR
(as applicable):
</p>
<ul>
<li>
<strong>Right of access.</strong> To obtain a copy of the personal
information we hold about you.
</li>
<li>
<strong>Right to rectification.</strong> To have inaccurate
information corrected and incomplete information completed.
</li>
<li>
<strong>Right to erasure.</strong> To have your personal information
deleted in certain circumstances.
</li>
<li>
<strong>Right to restriction of processing.</strong> To request
that we limit how we use your information in certain circumstances.
</li>
<li>
<strong>Right to data portability.</strong> To receive your personal
information in a structured, commonly used, and machine-readable
format, and to have it transmitted to another controller, where
technically feasible.
</li>
<li>
<strong>Right to object.</strong> To object to our processing of
your personal information where we rely on legitimate interests,
including profiling for those purposes; and to object at any time
to processing of your personal information for direct marketing.
</li>
<li>
<strong>Right to withdraw consent.</strong> Where we rely on your
consent, you can withdraw that consent at any time without
affecting the lawfulness of processing before withdrawal.
</li>
<li>
<strong>Right to lodge a complaint.</strong> You have the right to
lodge a complaint with a data protection supervisory authority. In
the UK this is the Information Commissioner's Office
(<a href="https://ico.org.uk">ico.org.uk</a>); in the EU this is
the supervisory authority in your country of residence.
</li>
</ul>
<h3>9.3 Additional rights for California residents</h3>
<p>
If you are a California resident, you have the following rights under
the California Consumer Privacy Act, as amended by the California
Privacy Rights Act ("CCPA"):
</p>
<ul>
<li>
<strong>Right to know.</strong> To request information about the
categories and specific pieces of personal information we have
collected about you, the categories of sources, the purposes for
collecting it, and the categories of third parties with whom we
share it.
</li>
<li>
<strong>Right to delete.</strong> To request that we delete personal
information we have collected from you, subject to certain
exceptions.
</li>
<li>
<strong>Right to correct.</strong> To request that we correct
inaccurate personal information we hold about you.
</li>
<li>
<strong>Right to opt out of sale or sharing.</strong> We do not sell
your personal information for money. We may, however, share certain
information with our advertising partner (Playwire) in ways that
could be considered "sharing" for cross-context behavioural
advertising under the CCPA. You can opt out of this sharing using
the cookie controls on our website.
</li>
<li>
<strong>Right to limit use of sensitive personal information.</strong>
We do not use sensitive personal information for purposes that
require offering this right under the CCPA.
</li>
<li>
<strong>Right to non-discrimination.</strong> We will not
discriminate against you for exercising any of your rights under
the CCPA.
</li>
</ul>
<p>
To exercise any of these rights, please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. We may
need to verify your identity before responding. You may also
designate an authorised agent to make a request on your behalf.
</p>
<h2>10. Automated Decision-Making</h2>
<p>
Some processes within the Service involve a degree of automated
decision-making, including:
</p>
<ul>
<li>
<strong>Anti-cheat and anti-abuse detection.</strong> We use
automated systems to identify suspected cheating, exploit use, spam,
and other breaches of our Terms of Service.
</li>
<li>
<strong>Matchmaking and rating.</strong> We use automated systems to
match players into games and to calculate ratings and leaderboard
positions.
</li>
<li>
<strong>Display name screening.</strong> We use automated systems
to screen display names against a list of prohibited terms.
</li>
</ul>
<p>
Decisions with significant consequences for you — in particular,
permanent account bans for serious or repeated breaches — are subject
to human review where you appeal an enforcement action in accordance
with Section 6.9 of our Terms of Service. If you believe an
enforcement action against your account was the result of solely
automated processing and you wish to request human review, please
contact us at <a href="mailto:support@openfront.io">support@openfront.io</a>.
</p>
<h2>11. Children's Privacy</h2>
<p>
You must be at least 13 years old to use our Service, or at least 16
years old if you are a resident of the European Economic Area, the
United Kingdom, or another jurisdiction that requires a higher
minimum age for the processing of personal data, unless local law
provides for a lower age of digital consent.
</p>
<p>
We do not knowingly collect personal information from anyone below
the applicable minimum age. If you are a parent or guardian and you
believe that your child has provided us with personal information,
please contact us at
<a href="mailto:support@openfront.io">support@openfront.io</a>. If we
become aware that we have collected personal information from a user
below the applicable minimum age, we will take reasonable steps to
delete that information and terminate the account.
</p>
<h2>12. Third-Party Links</h2>
<p>
Our Service may contain links to third-party websites and services
that are not operated by us. We are not responsible for the privacy
practices or content of those third parties. We encourage you to
review the privacy policy of every site and service you visit.
</p>
<h2>13. Changes to This Privacy Policy</h2>
<p>
We may update this Privacy Policy from time to time. If we make
material changes, we will provide reasonable notice, which may
include posting a notice on the Service, updating the "Last Updated"
date at the top of this Privacy Policy, or, where appropriate,
contacting you by email. We encourage you to review this Privacy
Policy periodically.
</p>
<h2>14. Contact Us</h2>
<p class="contact">
If you have any questions about this Privacy Policy or wish to
exercise any of your rights, you can contact us at:
<br /><br />
General privacy enquiries:
<a href="mailto:support@openfront.io">support@openfront.io</a>
<br />
Legal enquiries:
<a href="mailto:legal@openfront.io">legal@openfront.io</a>
<br /><br />
OpenFront LLC<br />
c/o Northwest Registered Agent, Inc.<br />
2108 N Street, Suite N<br />
Sacramento, CA 95816, United States
</p>
<div class="footer">
<p>
By using our Service, you acknowledge that you have read and
understood this Privacy Policy.
</p>
</div>
</body>
</html>