HaxballEUPrivacy Policy
Last updated: 3 November 2026
HaxballEU is a volunteer-run Haxball community. This page explains, in plain language, what personal data the HaxballEU website (the home page and the Champions League site) collects, why, who can see it, and what your choices are. We keep it to the minimum the site needs to work.
1. Who is responsible
The HaxballEU admin team runs this site. You can reach us through our Discord server — message an admin there for anything in this policy.
2. What we collect and why
| Data | Why | Who can see it |
|---|---|---|
| Username | Your identity on the site (teams, matches, stats, chat) | Logged-in members |
| E-mail address | Only to send a code if you forget your password | Only you (and technically the site admins/host) |
| Password | Logging in. Stored only as a one-way hash, never in readable form | Nobody |
| Discord nickname | So captains and admins can contact you | Logged-in members |
| Country, bio, profile picture (optional) | Your player profile | Logged-in members |
| Team applications, team rosters, transfers, match reports, achievements, chat messages | Running the tournament | Logged-in members (applications may be limited to admins) |
| "Last seen" time | The "Active now" list in the page footer (people seen in the last 15 minutes) | Logged-in members |
| IP address | Temporary abuse protection: counting failed log-ins, sign-ups and password-reset requests. Deleted automatically after about 24 hours | Admins/host only |
Members only: the Champions League site is visible to logged-in members only. Visitors without an account cannot see member data.
We do not sell your data, we do not run advertising, and we do not use analytics or tracking tools.
3. Cookies
The site sets one essential session cookie that keeps you logged in. It is not used for tracking and is removed when you log out or it expires. Because it is strictly necessary, no cookie banner is required.
4. Third parties
- Hosting provider — stores the website, the database and technical server logs (which normally include IP addresses).
- Google Fonts — the home page loads fonts from Google, so your browser contacts Google's servers.
- Discord — the "Discord" links lead to Discord, which has its own privacy policy.
- Kick, Twitch, YouTube — if the admins show a live stream on the Champions League home page, your browser loads the player from that platform while you view it.
- E-mail service — password-reset e-mails are sent through the mail account the admins configured for the site.
5. How long we keep data
Account data is kept while your account exists. Match, team and statistics records may be kept after you leave so that tournament history stays correct. IP-based abuse counters are deleted automatically after about a day.
6. Your rights
If the GDPR or a similar law applies to you, you may ask us to give you a copy of your data, correct it, delete your account, restrict or object to its use, and you may complain to your national data-protection authority. Contact an admin on Discord and we will handle your request, usually within 30 days. Please contact us from the Discord account you gave us so we can confirm it is really you.
7. Security
Passwords are hashed, login and sign-up attempts are rate-limited, uploads are checked, and the site is served over HTTPS. No website can promise perfect security, so please use a unique password.
8. Changes
If we change this policy we will update the date at the top of this page and, for important changes, announce it on the site or on Discord.