Alukos Privacy Policy

Alukos ("we" or "us") runs alukos.com, the Alukos game servers, the Alukos Discord bot, and the PIM program. We are responsible for the personal information described here. You can reach us at [email protected].

Alukos is an independent community platform and is not affiliated with, endorsed by, or sponsored by any game publisher. Game names and trademarks belong to their owners.

Information you give us

• Account details: email address, username, display name, password (stored only as a secure hash), and date of birth.
• Sign-in security: passkeys, authenticator app settings, and recovery codes (stored only as hashes).
• Phone number: the number you verify, and the date you verified it.
• Discord: your Discord user ID and username when you link Discord, and the sign-in tokens Discord gives us (stored encrypted).
• Profile and Team details: avatar, profile text, Team and Roster names, tags, and logos.
• Uploads: demos you upload to Vantage, clips you make, and anything you share with a Roster.
• Messages to us: appeals, reports, support requests, and Team or GSO server requests.

Information collected when you use Alukos

• Sign-ins: the date and time, IP address, browser, and result of each sign-in, sign-out, and failed attempt.
• Pages you view while signed in: which page, when, your IP address, and your country. We use this only to investigate security problems, such as a leak.
• Location: the country you are connecting from, as reported by our network provider, Cloudflare. We use it, and the country of your phone number when needed, to pick the closest match server.
• Matchmaking and events: queues you join, ready-ups, Teams and Rosters you are on, lineups, scrims, results, penalties, and your in-game ping to each server location.
• Matches on our servers: each server's log of the match, which includes in-game names, kills, deaths, rounds, and in-game chat; the game ID your game reports; and the connection record that shows which account played in which slot.
• Match recordings (demos): of league, ladder, and tournament matches. A demo includes every player's in-game name and play, and in-game chat.
• Moderation records: warnings, penalties, kicks, bans, appeals, and the reviews behind them.

Information from PIM

PIM runs only when you join an Alukos match through PIM, and it stops a few minutes after your match ends. While it runs, it sends us:

• basic information about your PC;
• information about your game;
• your in-game ID; and
• your recording of each league, ladder, and tournament match.

PIM does not record your keystrokes or your screen. It does not use your microphone or camera. It does not read your browsing history, your documents, or your clipboard. Only trusted Alukos staff can see what PIM sends.

Information from other companies

• Discord tells us your Discord ID and username when you link your account.
• Twilio tells us whether your phone number was verified, and what kind of line it is (for example, mobile or internet-based).
• Cloudflare tells us which country a request comes from.

• To run your account: sign-in, security, account approval, and support.
• To keep play fair: one account per person, catching cheaters and ban evasion, and reviewing reports and appeals. This is why we require a verified phone and a Discord link to play, and PIM for matches that require it.
• To run matches and events: queues, ready-up, drafts, server placement, results, standings, brackets, and ladders.
• To show stats and analysis: profiles, leaderboards, match pages, Vantage, Arc, and clips.
• To send messages: sign-in and security emails, match alerts by email or Discord message, and notices about changes to our terms. You can turn off most match alerts in your settings.
• To fix and improve Alukos: finding errors and slow pages, and planning server capacity.
• To follow the law: answering valid legal requests and protecting our rights and our players.

If you are in the European Union or the United Kingdom, our legal bases are: running the service you asked for (contract), keeping the platform fair and secure (legitimate interests), following the law (legal obligation), and your consent where we ask for it.

Anyone can see:

• your username, display name, avatar, and profile;
• your match history, results, and stats, and the in-game names you have played under;
• your Teams and Rosters, and your history with them;
• your bans and suspensions, with their category, length, and dates. A ban overturned on appeal is not shown.

Signed-in Alukos players can see public demos and public clips. Members of a Roster can see demos and clips shared with that Roster.

Never public: your email, phone number, date of birth, IP address, sign-in history, PIM information, the reasons and evidence behind a ban, and your appeals.

In-game chat is never shown to players anywhere on Alukos, including in replays and clips. Only admins can read a match's chat, and every time an admin opens it, that is recorded.

We don't sell your personal information, and we don't share it for advertising.

We use these companies to run Alukos. They handle your information only to provide their service to us:

When you choose a new password, we check it against the Have I Been Pwned list of leaked passwords. Only the first five characters of a scrambled (hashed) version of your password are sent, never the password itself, and nothing that identifies you.

Some game servers ask the game publisher's own servers to check the game's CD key when a player connects. When this happens, the publisher receives the player's IP address.

We may also share information:

• with the police, a court, or a government agency when the law requires it;
• to protect players, Alukos, or the public from harm, fraud, or cheating; and
• with a new owner if Alukos is sold or merged. That owner must follow this policy.

Our website and database are hosted in the United States (AWS, Northern Virginia). Game servers run in several cities, including in the United States and South America, and may later run in Europe. A server you play on receives your connection details and match data.

If you live outside the United States, your information is moved to and stored in the United States. When we move personal information from the European Union, the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on our service providers' certification under the EU-U.S. Data Privacy Framework (including its UK and Swiss extensions) where they hold it, and on the European Commission's Standard Contractual Clauses (and the UK Addendum) in their data processing terms. You can ask us for more detail at [email protected].

Information held as evidence for an active ban or penalty is kept while that ban or penalty stands, even if the table above gives a shorter time.

You can:

• see and change most of your account details in Settings;
• see your own sign-in history in Settings, under Security;
• turn off most match alerts in Settings;
• make a public demo private again, as long as no other player has clipped it;
• remove PIM from your PC at any time. You then cannot play in matches that require it.

You can also contact us to:

• get a copy of your personal information;
• correct information that is wrong;
• delete your account;
• stop or limit some uses of your information.

Email your request to [email protected]. To confirm it's you, write from your account's email address. We don't treat you differently for using these rights.

Deleting your account

To delete your account, email [email protected] from your account's email address.

When we delete your account, we delete or anonymize your personal information: your email address, phone number, password, date of birth, Discord link and Discord tokens, the PCs registered with PIM and the information PIM sent us, your private uploads, your settings, and your sign-in and page-view logs.

We keep your match records. Your Alukos username, your country, and the in-game names you played under stay on the match pages, stats, standings, and Team and Roster history of the matches you played, because those records are also other players' history. Public demos of league, ladder, and tournament matches also keep your in-game name.

If the law where you live gives you the right to have your name removed from these records too, contact us. We will then show your records as "Deleted player".

If your account was banned, we keep a scrambled (hashed) form of your phone number and other identifiers after deletion, so that deleting an account cannot be used to get around a ban.

We also keep limited information when we need it to enforce a ban, prevent cheating or fraud, handle a legal claim, or follow the law, and only for as long as that purpose needs it.

If you live in the EU, the UK, California, or another place with privacy laws, you may have other rights, such as the right to complain to your local data protection authority.

We use cookies only to make the site work. We don't use advertising cookies, and we don't use third-party analytics.

The site also saves some preferences in your browser, such as layout and filter choices. These never leave your computer.

If you block cookies, you will not be able to sign in.

We protect your information with encryption in transit, encrypted storage for sensitive items such as Discord tokens, hashed passwords and recovery codes, two-step sign-in, and access limited to staff who need it. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

You must be at least 13 years old to make an account. We ask for your date of birth at signup and refuse accounts for anyone younger. If we learn that a child under 13 has an account, we delete it. If you think a child under 13 has given us information, contact [email protected].

We may change this policy. When we do, we update the "Last updated" date at the top. If a change is important, we tell you at least 30 days before it takes effect, by email or with a notice on the site.

Email: [email protected]