Skip to content
United Factions

Privacy Policy

Who is responsible?

United Factions is operated by iWally IT, Klokjeslaan 95, 3601 HD Maarssen, the Netherlands (Dutch Chamber of Commerce 50785680; VAT ID NL002257929B18). For privacy questions or requests, email [email protected].

What data we use and why

  • Account and access data: email address, display name, internal account ID, password hash where applicable, login/session data and account-security events. We use this to provide and secure your account and the community services.
  • Minecraft and Discord identity: Minecraft username and UUID, Discord account ID and verification/link status. We use these identifiers to verify that the website, Discord and game identities belong together, prevent impersonation and deliver account-linked features. Raw UUIDs and Discord IDs are not intentionally displayed on public profiles.
  • Community content: forum profile, topics, replies, reports and moderation history. Public posts and your chosen public profile name can be seen by other visitors.
  • Support and withdrawal requests: email address, order number, optional Minecraft username, selected category, subject and message. We use this to answer, document and confirm customer-service, cancellation and statutory withdrawal requests. These requests are private and are not published.
  • Game information: faction membership and selected public statistics supplied by the United Factions game servers. We publish only competition-safe fields. We do not publish base coordinates, inventory, balance, current online status, last-seen time or raw UUID.
  • Faction emblems: a verified faction owner may upload a PNG or WebP logo or flag. The site validates, crops and re-encodes the image before publication and does not retain embedded metadata in the displayed WebP.
  • Public moderation feed: active-ban player name, reason, start time and expiry or permanent status supplied by the game server. UUIDs and IP addresses are deliberately excluded from the website feed.
  • Technical and security data: IP address, browser/user-agent information, request logs, essential cookies and fraud or abuse signals. We use these to operate, troubleshoot and protect the site, game services and community.
  • Orders and subscriptions: name where supplied by a payment provider, contact and billing details, ordered items, Minecraft recipient, payment and renewal status, and entitlement/delivery records. Payment credentials are handled by the selected payment provider and are not stored as full card or bank credentials by United Factions.
  • Email preferences: your separate newsletter and offers choices, including when and where a choice was recorded. Both are optional and off by default. United Factions is not currently sending a newsletter; a future launch will include an unsubscribe link in every marketing email.
  • Announcement bridge: the dedicated UFA Announcements bot reads new messages only from the United Factions #announcements channel. For approved staff authors, it processes the message text, embeds, attachment links, message and channel IDs, author Discord ID and name, and timestamps to create a matching public forum topic. It ignores direct messages, other channels, bots, webhooks and non-approved authors. Message-to-topic IDs are retained to prevent duplicate posts.

Legal grounds

We process data when it is necessary to provide the account, forum, game-link, order or subscription you requested; to meet legal obligations such as accounting and consumer-law duties; or for legitimate interests in keeping the community secure, preventing abuse and maintaining reliable services. Newsletter and promotional email are based on your consent. You may withdraw that consent at any time in Account settings or through the unsubscribe link.

Who receives data?

Data is shared only where needed with hosting and email infrastructure operated for iWally, Cloudflare for security and delivery, WordPress/WooCommerce service components, the selected payment provider, and the Minecraft/Discord services needed for identity linking and entitlement delivery. We do not sell personal data.

When an approved Discord announcement is mirrored, its author name and announcement content become public on the United Factions forum and may be announced again in a United Factions Discord channel through the existing forum webhook. Discord remains a separate platform whose own privacy terms also apply when you use their services.

Some suppliers, including Cloudflare, Discord, Microsoft/Mojang or an email/payment provider, may process data outside the European Economic Area. Where required, this is covered by an adequacy decision or approved safeguards such as standard contractual clauses. Their own privacy terms also apply when you use their services.

How long we keep data

We keep account data while the account is active and for a limited period afterwards where needed for security, disputes or recovery. Server and security logs are rotated and kept only as long as reasonably needed for troubleshooting and abuse prevention. Support and withdrawal requests are retained only as long as needed to answer, document and demonstrate handling of the request. Forum posts may be retained or anonymised to preserve discussions and moderation records. Public ban entries disappear from the website feed when no longer active; underlying moderation records may be retained for enforcement and appeals. Order and accounting records are retained for the legally required period. Consent evidence is retained while consent is active and afterwards where necessary to demonstrate compliance. Backups expire through their normal rotation.

Announcement-sync cursors and message-to-topic IDs are kept for as long as needed to prevent duplicates and operate the bridge. Mirrored forum topics follow the forum retention rules and may remain visible if the original Discord message is later edited or deleted, unless staff corrects or removes the forum copy.

Your choices and rights

You may ask for access, correction, deletion, restriction, objection or data portability where the law provides these rights. You may withdraw consent without affecting earlier lawful processing. We may need to verify your identity before acting on a request. Contact [email protected]. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies and automated decisions

We use essential cookies for login, account security, language and shopping-cart functionality. We do not currently use advertising cookies. We do not make decisions with legal or similarly significant effects solely by automated means. Automated security and payment checks may flag suspicious activity for staff review.

Changes

We update this notice when the service or its suppliers materially change. Important changes will be announced through the site or community channels. Last updated: 10 August 2026.