Skip to content
United Factions

Privacy Policy

Who is responsible?

United Factions is operated by iWally IT, Klokjeslaan 95, 3601 HD Maarssen, the Netherlands (Dutch Chamber of Commerce 50785680; VAT ID NL002257929B18). For privacy questions or requests, email [email protected].

What data we use and why

  • Account and access data: email address, display name, internal account ID, password hash where applicable, login/session data and account-security events. We use this to provide and secure your account and the community services.
  • Minecraft and Discord identity: Minecraft username and UUID, Discord account ID and verification/link status. We use these identifiers to verify that the website, Discord and game identities belong together, prevent impersonation and deliver account-linked features. Raw UUIDs and Discord IDs are not intentionally displayed on public profiles.
  • Community content: forum profile, topics, replies, reports and moderation history. Public posts and your chosen public profile name can be seen by other visitors.
  • Support requests: email address, optional Minecraft username, selected category, subject and message submitted through the support form. These messages are sent to the private iWally support mailbox through authenticated SMTP and are not published.
  • Game information: faction membership and selected public statistics supplied by the United Factions game servers. We publish only competition-safe fields. We do not publish base coordinates, inventory, balance, current online status, last-seen time or raw UUID.
  • Faction emblems: a verified faction owner may upload a PNG or WebP logo or flag. The site validates, crops and re-encodes the image before publication and does not retain embedded metadata in the displayed WebP.
  • Public moderation feed: active-ban player name, reason, start time and expiry or permanent status supplied by the game server. UUIDs and IP addresses are deliberately excluded from the website feed.
  • Technical and security data: IP address, browser/user-agent information, request logs, essential cookies and fraud or abuse signals. We use these to operate, troubleshoot and protect the site, game services and community.
  • Orders, if the Store opens: name, contact and billing details, ordered items, payment status and entitlement/delivery records. Payment credentials are handled by the selected payment provider and are not stored as full card or bank credentials by United Factions.
  • Email preferences: your separate newsletter and offers choices, including when and where a choice was recorded. Both are optional and off by default. United Factions is not currently sending a newsletter; a future launch will include an unsubscribe link in every marketing email.

Legal grounds

We process data when it is necessary to provide the account, forum, game-link or an order you requested; to meet legal obligations such as accounting duties; or for legitimate interests in keeping the community secure, preventing abuse and maintaining reliable services. Newsletter and promotional email are based on your consent. You may withdraw that consent at any time in Account settings or through the unsubscribe link.

Who receives data?

Data is shared only where needed with hosting and email infrastructure operated for iWally, Cloudflare for security and delivery, WordPress/WooCommerce service components, and the Minecraft/Discord services needed for identity linking. If commerce is activated, the applicable payment provider receives the information needed to process the payment. We do not sell personal data.

Some suppliers, including Cloudflare, Discord, Microsoft/Mojang or a future email/payment provider, may process data outside the European Economic Area. Where required, this is covered by an adequacy decision or approved safeguards such as standard contractual clauses. Their own privacy terms also apply when you use their services.

How long we keep data

We keep account data while the account is active and for a limited period afterwards where needed for security, disputes or recovery. Server and security logs are rotated and kept only as long as reasonably needed for troubleshooting and abuse prevention. Support email is retained only as long as needed to answer, investigate and document the request. Forum posts may be retained or anonymised to preserve discussions and moderation records. Public ban entries disappear from the website feed when no longer active; underlying moderation records may be retained for enforcement and appeals. Order and accounting records are retained for the legally required period. Consent evidence is retained while consent is active and afterwards where necessary to demonstrate compliance. Backups expire through their normal rotation.

Your choices and rights

You may ask for access, correction, deletion, restriction, objection or data portability where the law provides these rights. You may withdraw consent without affecting earlier lawful processing. We may need to verify your identity before acting on a request. Contact [email protected]. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies and automated decisions

We use essential cookies for login, account security, language and shopping-cart functionality. We do not currently use advertising cookies. We do not make decisions with legal or similarly significant effects solely by automated means. Automated security checks may flag suspicious activity for staff review.

Changes

We update this notice when the service or its suppliers materially change. Important changes will be announced through the site or community channels. Last updated: 7 August 2026.