Privacy policy

Last updated: 3 August 2026

This page is provided in English only.

This privacy policy explains how War Eternal — WarZone (the “Service”), published by Alex under the alexforge brand at https://warzone.alexforge.xyz, processes personal data.

The Service is a fan-made coordination tool for the WarZone event in War Eternal. Map data is entered by hand; there is no connection to the game’s official APIs.

1. Data controller

2. What we process

Depending on how you use the Service, we may process:

  • Account data (helpers, officers, admin only): nickname, password hash (scrypt; the password itself is not stored), role, who invited you, account creation time, last seen time, and disable status if an account is turned off.
  • Session cookie (warzone_session): a signed token that keeps you signed in (about 30 days).
  • Locale cookie (warzone_locale): your interface language choice (EN / RU / AR).
  • Map contribution metadata: who changed ownership, confirmations or shields (stored as a nickname for coordination), and free-text notes officers may attach to map nodes.
  • Account audit log: actions such as invites or disabling accounts (actor, action, detail, time).
  • Technical data for abuse protection: IP address used for rate limiting on sign-in / join, and verification through Cloudflare Turnstile when that feature is enabled.
  • Server / hosting logs: ordinary web-server and infrastructure logs that may include IP address, user agent and request metadata, retained only as needed for security and operations.

Guests can view the map and statistics without an account. Viewing alone does not create a user profile.

3. Purposes and legal bases (GDPR)

  • Providing the Service (accounts, map editing, sessions, language): performance of a service you request / legitimate interest in running a small fan coordination tool.
  • Security (rate limits, Turnstile, session integrity, disabling abusive accounts): legitimate interest in protecting the Service and its users.
  • Legal obligations: where we must respond to a valid request from authorities.

We do not sell personal data and we do not use it for advertising profiles.

4. Cookies

We use only cookies that are needed for the Service to work:

  • warzone_session — authentication (httpOnly, SameSite=Lax; Secure in production).
  • warzone_locale — language preference.

These are strictly necessary or preference cookies. We do not use third-party advertising or analytics cookies on this site. If Cloudflare Turnstile is enabled on login/registration forms, Cloudflare may set its own cookies or similar technologies as described in Cloudflare’s documentation and privacy policy.

5. Recipients and processors

  • Hosting: DigitalOcean, LLC (server infrastructure).
  • Bot protection (optional): Cloudflare, Inc. (Turnstile), when site keys are configured.
  • Invite-only teammates: officers/admins may see nicknames, roles and related team fields needed to run the map.

Data is stored in a database file on the application server. We do not share account data with the game publisher.

6. International transfers

Hosting and security providers may process data in the United States or other countries. Where required, transfers rely on the provider’s appropriate safeguards (for example standard contractual clauses or equivalent mechanisms they offer).

7. Retention

  • Accounts: kept while the account is useful for the Service; disabled accounts may be retained so map history still makes sense, unless deletion is requested and feasible.
  • Session cookie: up to about 30 days, or until you sign out.
  • Locale cookie: until it expires or you clear cookies.
  • Map change / audit logs: kept for operational history of events; may be purged when no longer needed.
  • Rate-limit / short-lived security data: short windows (on the order of hours) in memory where applicable.
  • Server logs: according to normal hosting practice, typically limited periods for security and debugging.

8. Your rights

If you are in the EEA/UK (or otherwise entitled under applicable law), you may have the right to access, rectify, erase, restrict or object to certain processing, and to data portability where applicable. To exercise these rights, email [email protected] from a contact we can reasonably link to your account (for example the nickname used on the Service).

You may also lodge a complaint with a supervisory authority. In France, that is the CNIL.

9. Security

We use HTTPS, hashed passwords, signed session cookies and role checks on server actions. No method of transmission or storage is perfectly secure; please choose a unique password and do not reuse credentials from the game or other sites.

10. Children

The Service is aimed at players of War Eternal who coordinate an alliance event. It is not directed at children. If you believe we hold data about a minor without appropriate basis, contact us to request deletion.

11. Changes

We may update this policy when the Service or the law changes. The “Last updated” date at the top will change accordingly. Continued use after an update means you should review the new text.

12. Related documents