Privacy Policy & Cookies – Lethal

This Privacy Policy describes how Lethal collects, uses, and protects your information when you use our website, Lethal. We are committed to a "privacy-first" approach, focusing on security and transparency.

1. Data Controller & Contact

The entity responsible for your personal data is the Lethal Community. For any questions regarding your data or to exercise your rights under the GDPR, you can reach us via:

• Discord: Join our Discord
• Email: [email protected]

2. Information We Collect

To provide our community features and security monitoring, we process the following information:

• Discord Authentication (OAuth2): We receive your unique Discord ID, username, and avatar to identify you within our system.
• External Game Account IDs (Optional): You may voluntarily link identifiers (e.g., Account ID for Steam or Minecraft) to enable features like in-house matchmaking or server whitelisting.
• Device & Session Information: To provide the "User Sessions" monitoring feature, we collect your browser type/version, operating system, and approximate location (via IP).
• IP Addresses: Logged for security purposes, such as preventing DDoS attacks and abuse.
• Anonymous Usage Data: We collect non-identifiable statistics to improve our website using a cookieless analytics system.

3. Cookies & Local Storage

We use strictly necessary technologies (JWT, Refresh Tokens, and Local Storage) for technical functions. These do not require a consent banner under Swedish (LEK) and EU regulations.

What we store:

• Authentication Tokens: Secure tokens used to maintain and refresh your session.
• User Preferences: Your settings for background, site theme, layout, and music player state.

4. Legal Basis for Processing

• Art. 6(1)(b) GDPR (Service Provision): Processing IDs and session tokens is necessary to provide the features you requested.
• Art. 6(1)(f) GDPR (Legitimate Interest): Logging IP addresses and device info is necessary to maintain the security of your account and the community.

5. Data Retention & Third Parties

• Location: All data is processed and stored on servers located within the European Union (Sweden).
• No Sale of Data: We do not sell, rent, or trade your personal data to third parties for marketing or commercial purposes.
• Independent Controllers: Platforms such as Discord and game providers (e.g., Steam) are independent data controllers with their own privacy policies.
• Third Parties & Bots: We use Discord for authentication, and external Account IDs are used solely for internal game-related features.
• External Services: We do not control or delete data held by Discord or independent third-party bots, and deleting your account on Lethal will not remove your data from those external services.
• Retention: Account-related data is kept as long as your account is active.
• Security Logs: Security logs and session IP data are automatically deleted after 90 days.

6. Your Rights

Under the GDPR, you have the right to access, correct, or delete your data. Contact us via the methods listed in Section 1 to exercise these rights.

Last updated: January 11, 2026