Privacy Policy

Last updated: May 29, 2026

1. Who we are

Bullet IIID is an Italian esports clan with a virtual operational base. To manage the Road To Torino tournament we collect some personal data. For any request or to exercise your rights, write to privacy@bulletiiid.com.

2. Data we collect

• OTG nickname — required to identify the player in matches.
• Email — required to send registration confirmation, validation result and operational communications.
• Discord tag (optional) — to coordinate the match day, sanctions and support.
• K/D screenshot — used exclusively to validate the division (Gold/Silver) and prevent abuse (OCR + perceptual hash). Stored until the end of the season.
• IP address — recorded for security purposes (rate limit anti-bruteforce login + anti-spam registration form). Stored 12 months.
• Game data — kills, hex, placement, points generated during match days. Public on the leaderboard.

3. Legal basis

We process data based on the explicit consent collected at registration (form with dedicated checkbox) and on legitimate interest for security and fraud prevention (Art. 6.1.a and 6.1.f GDPR).

4. Retention

• K/D screenshots: deleted at the end of the current season or upon request.
• Email, Discord, nickname: until account deletion is requested by the user or until the tournament ends.
• Access logs (IP, audit log): 12 months.
• Rejected registrations: 90 days, then anonymized.

5. Sharing with third parties

We do not sell data. The services we use:

• Discord — only if the user provides their Discord tag, for clan coordination.
• Google Vision API — OCR analysis of the K/D screenshot (data is not used for training, see Google policy).
• tracker.gg — K/D verification when the player provides a link to their profile.

6. Your rights

You are entitled to (Art. 15-22 GDPR):

• Access — request which data we hold about you (export request).
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — remove your profile. Aggregated historical statistics remain but are anonymized.
• Objection — object to processing for specific purposes.
• Portability — receive your data in JSON format.

To exercise a right, write to privacy@bulletiiid.com. We will respond within 30 days.

7. Security

Staff passwords with bcrypt hash, JWT with centralized revocation, anti-bruteforce rate limit, encrypted daily backups. HTTPS-only communications.

8. Minors

The tournament is open to adults (18+). If you register with a minor's data, the registration will be rejected.

9. Cookies

See the dedicated section in Cookie Policy. The site uses only technical cookies (session + theme preferences). We do not use advertising trackers or third-party analytics.

10. Changes

We update this page when processing changes. The "last updated" date at the top reflects the latest revision. Substantial changes will be communicated to you via email if you have an active registration.

← Back to home