Privacy Policy

1. Who We Are

Baltic Tiers (“we”, “us”) is an independent, volunteer-run Minecraft PvP ranking community operating baltictiers.xyz and an associated Discord server and bot. We are the data controller for the personal data described below. We do not have a formal legal entity; for all data protection purposes, contact a Baltic Tiers Owner or Administrator via our Discord server.

2. What We Collect

We do not use advertising trackers or sell data. The Site operates staff accounts and may link them to Discord through OAuth. Passwords are stored only as one-way hashes; Discord access tokens are used for account linking and are not exposed publicly.

3. Why We Process This Data

• Operating the ranking service (legitimate interest, GDPR Art. 6(1)(f)): publishing tiers, rankings, and points is the core, publicly-understood purpose of Baltic Tiers.
• Participation in testing (consent, GDPR Art. 6(1)(a)): you voluntarily request a test and provide your Minecraft username knowing the result will be published.
• Security and abuse prevention (legitimate interest): server access logs help us detect and respond to abuse of the Site.

4. Discord Bot Data

Our Discord bot processes commands, buttons, ticket channels, private testing threads, role membership, linked Minecraft identity, tier results, and moderation actions. A link-safety filter reads new message content to detect unauthorized links. Message text is not stored as a general chat log; the filter may retain a strike count, channel ID, timestamp, and moderation outcome. Ticket and testing-thread IDs are retained while needed. Your interaction with Discord itself (messages, presence, etc.) is governed by Discord’s own Privacy Policy, which we do not control and are not responsible for.

5. Data Retention

We retain ranking data (tiers, points, username, country) for as long as your profile remains part of the public ranking, or until you request removal. Server access logs are retained only as long as operationally necessary for security purposes and are rotated periodically.

6. Who We Share Data With

We do not sell or share your personal data with third parties for marketing purposes. Ranking data is inherently public by design (that is the purpose of the Service). Our infrastructure is a self-managed VPS; our domain is registered through Namecheap. We do not use a CDN, proxy, or third-party analytics provider in front of the Site.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate data (e.g. a misattributed tier or country);
• Request erasure of your profile and associated data (“right to be forgotten”);
• Object to or request restriction of processing;
• Request a copy of your data in a portable format;
• Lodge a complaint with your national data protection authority — for Latvia, the Data State Inspectorate.

To exercise any of these rights, contact a Baltic Tiers Owner or Administrator via our Discord server. We will respond within one month as required by GDPR.

8. Children’s Privacy

The Service is not directed at children under 13. Discord itself requires users to be at least 13 years old, and we rely on that as our minimum age for testing and participation. We do not knowingly collect data from children under 13; if we learn we have, we will delete it.

9. Security

We take reasonable measures to protect data on our VPS, but no self-hosted system can guarantee absolute security. In the event of a data breach affecting your personal data, we will notify affected users via Discord announcement without undue delay.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves (e.g. if we add accounts, analytics, or third-party infrastructure). Material changes will be announced in our Discord server.

11. Contact

For any privacy question or data request, contact a Baltic Tiers Owner or Administrator via our Discord server.