Privacy

What is collected

• Your SteamID64 — the 17-digit Steam account identifier. Steam sign-in tells us this and nothing else; we never see your Steam password or email. The SteamID64 is personal data and is treated as such.
• Your email address, only if you give one — used for receipts and service notices, never marketing without a separate opt-in.
• Payment records — amount, VAT breakdown, receipt number, and Stripe references. Card numbers never touch this platform; Stripe handles them.
• Session logs and player-list snapshots — who was connected and when, used for service health and as evidence in payment disputes.
• Consent records — the exact wording, version, time and IP address of consents you give (for example the VIP immediate supply waiver and the voice age declaration).

What is never collected

• Voice is never recorded, stored, or transcribed. There is no covert listening capability. Moderation of voice is report-driven — see the parents' guide.
• Player positions used by proximity voice are held in memory only and never written to a database, log, or file.

How long it is kept

• Transaction records: 7 years, as required for HMRC.
• Session logs and player snapshots: 90 days, then hard-deleted automatically.
• Safeguarding reports and their outcomes: 12 months, retained even if the account they mention is erased — this is the one category that survives erasure, deliberately.

Erasure — what it really does

You can request erasure from your account settings. Erasure is implemented as pseudonymisation: your SteamID64 is replaced with a tombstone and your display name with a neutral placeholder, while the financial records the law requires us to keep survive under the legal-obligation exemption. After erasure the remaining records no longer identify you.

Lawful bases

• VIP subscriptions: performance of a contract.
• Donor recognition: legitimate interests, with an anonymous opt-out.
• Voice participation and age declaration: consent, recorded per use.

Where data lives

On the operator's own servers in the UK, plus Stripe for payments and Discord for optional account linking. There is no advertising, no analytics resale, and no data broker involvement.