Data we collect on you and GDPR

As a small gaming community we do collect and process some data on our servers, much of our "raw" data is auto-deleted. Below lists what we keep.

Website

• Users can self delete their account here https://www.phantomrebels.com/settings/account-security/
  • This includes everything you put into the website (Account, IP, email etc)
    • We do not keep logs after account data is erased, the erasure process takes everything into account and is automatic.
    • The account is not recoverable after this action is performed.
• Analytics data collected is anonymized during collection and is not personally identifiable, this does not fall within the scope of GDPR.
• Users can request a copy of their data from this page - https://www.phantomrebels.com/settings/account-security/
  • You must be logged in and should notify us via the contact us form at the bottom of the page so we can process this promptly.
  • You would revisit the page once the request is approved, it will be provided in XML format.

Battlemetics

• Operates their own data processing and handling process.
• Identifiers are kept indefinitely kept by them, in some situations we can request limited removal (only where we collected the data).
  • Where we did not we can still access data they have collected (from other servers or public sources), server sessions etc are public realm information.
• Chat logs are auto-deleted after 90 days (3 Months)
  • We can have chat logs and identifiers removed where we provided these
  • We can have Battlemetrics keep an identifier attached where you have been banned for the purposes of excluding you from our servers
• Battlemetrics "public tracking" may mean even after we had our "rcon provided" data removed, you are still able to be looked up.
  • They are responsible for collecting, processing and handling of that public data, not us, we have no control over their data and nor are we their data controller.
    • You would need to contact them directly to remove public results of their own collected data.

Game Server Logs

• Auto-deleted / erased after 14 days. This includes all identifiers, including IPs.
• Logs that contain information such as denial-of-service attacks on our services may be kept up-to 1 year to help prevent these.
  • Packet captures during denial-of-service attacks are shared with our host. These are deleted once not required and not kept past 7 days.

Should I get my data removed?

It should be noted that under GDPR that requesting data removal we will remove everything we collected, however to users that are banned, we do have the right to keep identifiers in that situation.

GDPR allows for data removal of personal information (IPs, chat logs etc), not the right to be forgotten, where you have abused, been excluded or temporary removed from our services by moderators or staff.
This means we have a "legitimate interest" in the eyes of GDPR to retain the data required to maintain identifiers for purposes such as a server bans / exclusions.

• This is done within Article 17 of the GDPR "an organization’s right to process someone’s data might override their right to be forgotten."