Contact details
Website: enfrag.com
Contact: EnFrag Discord or the website contact form
Applicability
This Privacy Policy applies to the personal data EnFrag collects when you use our website, account system, and related services.
What personal data we collect
We collect some data automatically and some data you provide directly. This can include:
- Account information such as your EnFrag display name, email address if one is provided, and internal account identifiers
- Discord account data needed for sign-in and community features, such as your Discord user ID, username, and avatar
- Steam account data if you choose to link Steam from your account page, such as your Steam ID and Steam profile name
- Messages or details you send through our contact or support flows
- Technical data such as IP address, browser or device information, cookies, and security logs
- Product and usage data such as page visits, feature usage, and analytics events
We do not currently store Steam access tokens for account linking. Steam linking is handled through OpenID verification and the profile fields listed above.
Children
We do not knowingly collect personal data from people under the legal age listed below unless they have permission from a parent or guardian.
| Country | Minimum Age |
|---|---|
| Netherlands | 16 |
| France | 15 |
| Spain, Italy | 14 |
| UK, Sweden | 13 |
| Most other countries | 13-16 |
We cannot verify every visitor's age. If you believe we collected data from someone underage, contact us so we can review and remove it where required.
Why we collect your data
We collect data so we can:
- Create and secure your EnFrag account
- Let you sign in with Discord and optionally link Steam from your account page
- Show community features such as public member profiles, rankings, and connected-account status
- Respond to support or contact requests
- Improve site performance, product quality, and security
- Comply with legal obligations
Legal bases
Where GDPR or similar laws apply, we process personal data under one or more of these legal bases:
- Performance of a contract, such as providing your account and account-linked features
- Legitimate interests, such as fraud prevention, product analytics, moderation, and service security
- Consent, where we rely on it for optional features or communications
- Compliance with legal obligations
How long we keep your data
We keep personal data only as long as needed for the purposes above.
- Account and linked-account data is generally kept while your account remains active
- If you delete your account, we erase or anonymize account profile data unless we must keep limited records for legal, security, or dispute-handling reasons
- Contact and support records are kept only as long as reasonably needed to handle the request and any follow-up
- Analytics, logs, and backup data may remain for a limited retention period before rotation or deletion
Sharing data with others
We never sell your personal data. We only share it with third-party services when needed to run EnFrag, secure the service, or comply with the law.
This may include:
- Discord, to support sign-in and related account data used by EnFrag
- Steam, when you choose to link a Steam account and we validate that connection
- Hosting, infrastructure, logging, analytics, email, or security providers that help us operate the platform
- Competent authorities or legal advisors when required by law or necessary to protect rights and safety
These providers are expected to protect the data they process for us.
Cookies
We use cookies to:
- Make the site work
- Remember your settings
- Improve the website
We also use PostHog to understand how people use our site.
You can turn off cookies in your browser. You can also delete cookies anytime from your device.
Your rights
Under GDPR, you have the right to:
- See what data we have about you
- Fix wrong information
- Ask us to delete your data
- Get a copy of your data
- Take back your consent anytime
If you delete your account, we will remove or anonymize the relevant account data unless we are legally required to keep limited records.
More info about deletion rules: GDPR Article 17
How we protect your data
We take data protection seriously. We use:
- SSL or other secure transport where appropriate
- Limited access to systems and administrative tools
- Encryption for sensitive data where it is stored
- Logging, monitoring, backups, and security controls
- Internal access restrictions and operational safeguards