// LEGAL
Privacy Policy
Version: 1.0 · Effective: 2026-10-25
1. Controller
YIA STRIKE, https://yia.network, n/a. Privacy contact: support@yia.network. Data protection officer: none appointed.
This policy covers the YIA Strike game server, the website yia.network, its store and our Discord-linked
services.
2. What we collect and why
| Data | Where it comes from | Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|---|---|
| SteamID, Steam persona name and avatar | Steam client on the server; Steam sign-in on the website | identify players, deliver purchases, anti-cheat, profiles | (b) contract; (f) legitimate interest (security, fair play) |
| Nick(s) and in-game account (nick + hashed password) | you, in game | identity for non-Steam players, statistics | (b) contract |
| IP address | game server, website, Cloudflare | connection, abuse prevention, ban enforcement, fraud checks | (f) legitimate interest |
| Gameplay data: classes, levels, EXP, honor, kills, medals, achievements, playtime and sessions, maps, clan membership, items and skins | game server | run the game, leaderboards, profiles, earnable rewards | (b) contract; (f) legitimate interest (public leaderboards) |
| Chat messages, reports, vote kicks, staff actions | game server logs | moderation, appeals | (f) legitimate interest |
| Anti-cheat signals and demos you send us | game server, you | detect cheating, handle bans and appeals | (f) legitimate interest |
| Website account: email, password hash (Argon2id), language, currency, settings, 2FA secret (encrypted) | you | account, login, security | (b) contract |
| Purchases: order, items, price, currency, country, payment method type, Stripe ids, consent/waiver timestamp, order IP | you, Stripe | sell and deliver, receipts, refunds, disputes, accounting, tax | (b) contract; (c) legal obligation (accounting, tax) |
| Emails we send (receipts, link confirmations, security notices) | us | service messages | (b) contract |
| Cookies: session, CSRF token, language; Cloudflare security cookies | website | the site works and is protected | (f) legitimate interest / strictly necessary |
- Card details are entered on Stripe's page. We never receive the full card number. Stripe acts as an independent controller for payment and fraud-prevention data (Stripe privacy policy).
- We do not use advertising, tracking or analytics cookies, so there is no cookie banner. If that changes we will ask for consent first.
- We do not sell personal data and do not use it for automated decisions with legal effect. The earnable VIP ranking is automated but always reviewed by staff before a reward is granted or refused.
3. Public profiles
By default your nick, avatar, classes and levels, statistics, playtime, achievements, clan, skins, active passes and badges are shown on a public profile and on leaderboards. This is part of the community service and based on our legitimate interest. You can opt out at any time in Account → Privacy: your profile is hidden and leaderboards show "Hidden player" instead of your nick. Players who have not linked a website account can ask us by email to hide their nick. Your honor balance, email, IP and purchases are never public.
4. Who receives data (processors and recipients)
| Recipient | Role | Data | Location / safeguard |
|---|---|---|---|
| Stripe Payments Europe Ltd. / Stripe, Inc. | payment processing (independent controller for payment data) | order, email, country, payment data | EU/US; EU-US Data Privacy Framework / SCCs |
| Hostinger International Ltd. | server and database hosting | all data stored on our server | Germany (EU) |
| Cloudflare, Inc. | website proxy, TLS, DDoS and bot protection | IP, request data, security cookies | EU/US; DPF / SCCs |
| YIA STRIKE mail server (our own server, Hostinger) | sending emails | email address, email content | Germany (EU); GDPR |
| Valve (Steam) | when you sign in with Steam, Steam confirms your SteamID to us | SteamID | their own policy |
| Authorities, courts, payment schemes | only when legally required, or to defend chargebacks and legal claims | as needed |
5. How long we keep data
| Data | Retention |
|---|---|
| Website account | until you delete it; then anonymised |
| Game data (levels, stats, honor, skins) | for the season; season data is reset at season end, archived leaderboards keep nick + final ranking unless you opt out |
| Session / playtime history | 24 months |
| Web server and game logs (incl. IPs, chat) | 14 days, longer only for a specific open case or ban |
| Bans | for the duration of the ban + 12 months |
| Order IP address | 90 days |
| Orders, invoices, payment records | 5 years as required by accounting and tax law in the United Arab Emirates, pseudonymised after account deletion |
| Stripe webhook records | 2 years |
| Staff audit log | 3 years |
| Link codes | 24 hours |
| Backups | up to 12 months (rolling) |
6. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to
processing based on legitimate interest (including the public profile), and to withdraw consent where we rely
on it. Use Account → "Download my data" and "Delete account", or email support@yia.network. We answer within one
month. We may need to verify that you own the identity (for example with a /link code).
Deleting your account: your web account is anonymised and identities are unlinked; you can also choose to delete your in-game data. Active passes and items are then lost. Orders are kept as required by law (section 5).
You can complain to a data-protection supervisory authority, in particular in your country of residence or in ours: UAE Data Office.
7. Children
Players under 16 need a parent's consent to create a website account. Purchases by anyone under 18 need a parent's or guardian's permission. If you believe a child gave us data without consent, contact support@yia.network and we will delete it.
8. Security
Passwords are hashed, staff accounts use two-factor authentication, the database is not reachable from the internet, payment keys are restricted, and backups are encrypted. No system is perfectly secure; if a breach affects your data we will tell you and the authority as the law requires.
9. Changes
We will post changes here and email account holders about material changes before they apply.
Contact: support@yia.network · https://yia.network
Questions: support@yia.network