Privacy Policy

UKCL (“we”, “us”) runs ukcl.online and the UKCL Discord. This Policy explains what we collect, why, and your rights under UK GDPR.

1. Data we collect

• Discord OAuth: Discord ID, username, global name, avatar/banners (if you opt in), and whether you are a member of the UKCL Discord.
• Profile you provide: Activision ID, custom display name, avatar/banner uploads, social handles, role/platforms, theme, bio/mood/status, gaming setup, availability.
• League activity: teams, tournament entries, ladder matches, wagers, points, tickets, DMs, and related metadata.
• Technical: IP address, last activity timestamp, cookies for auth/session (see Cookies below).

2. How we use it

• To run the league: auth, teams/tournaments/ladders, scoring, leaderboards, notifications.
• To moderate and keep the community safe (bans, abuse prevention).
• To send Discord embeds/webhooks you expect (welcome messages, announcements, ladder challenges) where configured.
• To improve the site (error logs, basic analytics if we add any — we will update this Policy first).

Legal basis: contract (providing the league), legitimate interests (security/moderation), and consent where you opt in (e.g. social links, banner display).

3. Cookies

We use essential cookies for login/session and CSRF protection. A small banner lets you accept/dismiss. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but you will be logged out.

4. Sharing

We do not sell your data. We share it only as needed to run UKCL:

• Discord: when you sign in or we post configured embeds via bot/webhook.
• Service providers: hosting/CDN where the site runs (e.g. your VPS/Caddy/WhiteNoise). They only process data to deliver the service.
• Public by design: team rosters, tournament brackets, ladder standings and profiles you choose to make public are visible to other logged-in users (and some list pages to everyone for SEO).

5. Retention

We keep your account while it is active. If you delete your profile (Profile → Delete Profile, type “delete profile”), we delete your account and associated data. Backups are kept for 7 days for disaster recovery and then pruned. Logs may be kept briefly for security.

6. Your rights (UK GDPR)

You can access, correct or delete your data via your profile settings and Delete Profile. You can also object or request restriction. To exercise rights, open a ticket or contact staff on Discord. You can lodge a complaint with the ICO (ico.org.uk) if you are not satisfied.

7. Security

We take reasonable steps to protect your data (HTTPS via Caddy, access controls, backups). No system is 100% secure.

8. Children

UKCL is not directed at children under 13. If you are under the age required by Discord to have an account, please do not use UKCL.

9. Changes

We will update this Policy when needed and bump the “Last updated” date. For material changes we will post an announcement in Discord.

10. Contact & controller

Controller: UKCL. For privacy requests, open a ticket on ukcl.online or contact staff on Discord. Include your Discord username so we can find your account.

---

This page is not legal advice. Tailor it with a solicitor for your exact needs.