Epiczone.sk stores only what it needs for your account, the forum and the rest of the website. If you have a question about your data, write to support@epiczone.sk.
What Epiczone stores and why
Account. Your nickname, e-mail and password. The password is stored in a form nobody can read, not even the Epiczone leadership. If you fill them in, also your avatar, signature, location and Discord, plus the website language and your notification settings. When you log in with Steam or Google, Epiczone stores the ID of your account there so it recognises you next time and, if you don't have them yet, your name and profile picture, and with Google also your e-mail. If you had an account on the old site, it moved here together with your posts and messages.
What you do on the website. Forum posts and topics, comments, ratings, poll votes, likes, MiniChat messages and private messages. In the forum, the website remembers which topics you've read and which you follow, so it can show you what's unread and send notifications. Posts, comments and the MiniChat are public. Private messages are visible only to you and the recipient.
Technical data. Your IP address and browser type are stored with your login and deleted when it expires. For your account, the IP address and the time of your last login and last activity are kept, always only the latest. Others can see when you were last active, for example in the “Online on the website” list. The server also keeps visit logs (IP address, page, time and browser) and deletes them after 14 days. Technical data helps protect accounts and deal with abuse, for example when someone dodges a ban.
Account data is processed so that Epiczone can provide your account and the website's services (Art. 6(1)(b) GDPR). Technical data and the protection against bots rely on the legitimate interest in protecting the website and its users (Art. 6(1)(f) GDPR).
Cookies
Epiczone uses only cookies the website can't work without, so it doesn't ask you about them:
- session and XSRF-TOKEN: keep you logged in and protect forms from forgery,
- remember_web: only when you tick “Remember me” when logging in,
- appearance: light or dark mode,
- locale: the language you chose.
Epiczone uses no advertising or analytics cookies.
Who data is shared with
- OVHcloud runs the server the website lives on.
- Resend delivers the e-mails Epiczone sends you (e-mail verification, new password, notifications).
- Cloudflare (Turnstile) checks that you're not a bot when you register, log in or reset your password. It receives your IP address and technical data about your browser.
- Sentry collects reports of errors on the website. It receives the page address, your IP address and technical data about your browser.
- Google or Steam (Valve), only if you log in with them. A profile picture from their account loads directly from them.
- YouTube and other websites, when you open a post or news article with an embedded video or image. Your browser loads it directly from them, so they see your IP address. YouTube videos are embedded in privacy-enhanced mode.
Cloudflare, Sentry, Google, Valve and Resend may also process data outside the European Union, with the safeguards GDPR requires (such as the European Commission's standard contractual clauses). Epiczone doesn't sell your data and doesn't share it with anyone else unless the law requires it.
How long it is kept
Account data is kept for as long as the account exists. A login without “Remember me” expires after two hours of inactivity.
When your account is closed, your profile, account data, likes and what you've read and followed in the forum are deleted. Only what discussions and results need stays: posts, topics, comments and MiniChat messages show “Deleted account” as the author, private messages stay with the people you sent them to, and poll votes and ratings still count, but without your name.
Your rights
You have the right to:
- know what data Epiczone has about you and get a copy, also in a machine-readable form,
- have it corrected (you can change most of it yourself in the settings),
- have it deleted or its processing restricted,
- object to processing based on legitimate interest.
Just write to support@epiczone.sk from the e-mail address of your account. You'll get an answer within a month. Write the same way if you want your account closed.
If you think your data is being handled badly, you can turn to the Office for Personal Data Protection of the Slovak Republic.