Loading...
Loading...
What we collect when you sign in with Discord, what a competition publishes about you, who else touches it, and how to get it removed.
Effective:
Apex Legends Competitive Scrims Manager is a community platform for competitive Apex Legends scrims, run by volunteer staff rather than a company. Playing costs no money, there is no advertising and there is no investor behind it. Discord sells an optional subscription to our server, described in the optional subscription, which nothing here requires you to buy.
This policy covers the website at apexlegendscompetitive.com and the SOLO Discord bot that runs the scrims behind it. They share one database, so what one holds the other can read. Apex Legends is a trademark of Electronic Arts Inc. We are not affiliated with EA or Respawn Entertainment, and we send them nothing about you.
We collect what it takes to run a scrim night and nothing else. All of it arrives through Discord or through you typing it into the bot.
| Data | Why we need it | When we get it |
|---|---|---|
| Discord user ID | It is your account identifier. Every record we hold is keyed to it, and it is how the bot knows the person in Discord is the person on the site. | The first time you sign in or register with the bot |
| Discord username, display name and avatar hash | To show who you are on rosters, signups and the player database, and to render your avatar. | Every time you sign in |
| Your Overstat profile link | Your skill rating is calculated from the match history on that profile. Without it we cannot rate you, and we cannot balance a lobby you are in. | Only if you link one |
| Scrim results: placements, kills, damage and which team you played on | To compute standings, to compute your skill rating, and to keep an honest record of the season. | When you play |
| Your skill rating and the audit trail behind each change to it | So a rating can be explained and corrected rather than just asserted. Staff can see why a number moved. | Recalculated after you play |
| Team membership, signups and waitlist position | To decide who is eligible for a block and which three players fielded a match. | When you or your captain signs the team up |
| Token balance and the ledger of how it changed | Tokens are the in-platform reward currency. The ledger exists so a balance can be audited rather than disputed. | When you earn or spend one |
| Whether your Discord account holds the subscriber role | It is the only way the bot knows to hand you the monthly tokens the subscription includes. We read the role, never the purchase behind it. | Read from Discord when the monthly tokens go out |
| Notification preferences | So the bot pings you about the things you asked to be pinged about and stays quiet about the rest. | When you change a setting |
We never receive your email address. Discord sign-in uses the identify scope only, which returns your user ID, username, display name and avatar hash. It does not return your email, your servers, your friends or your messages, and we do not request the scopes that would. We collect no payment details, no real name, no date of birth, no address and no phone number. There is no analytics script, no advertising pixel and no third-party tracker anywhere on this site.
A competition is a public record, so some of this is published on purpose. Your Discord display name, your avatar, your team, your skill rating, your signups and your scrim results appear on the public player database, signups and scrim blocks pages, and anyone can read them without signing in.
Your Discord user ID is never published. Lobby codes are never published. If you want no public footprint here, do not register for scrims, because the leaderboard is the product.
Discord sells a paid subscription to our server. It is optional, and you can play every scrim without it. Be clear about what it does though: it grants tokens, and tokens are what pay for a signup and what buy priority for a place in a busy block. It does not touch your skill rating, your results, or which lobby your rating puts you in, and every token it grants can also be earned by playing. How tokens move is set out in the terms of service.
The transaction is between you and Discord. Discord holds your payment method, runs the billing and handles cancellations and refunds under its own terms. We never see your card, your billing address or what you paid, and none of it is ever sent to us.
What we see is one thing: whether your Discord account currently holds the subscriber role. Once a month the bot reads that role and adds the tokens the tier includes, up to a cap, and records the date it last did so. That date is the only trace of the subscription in our database. If the role goes away the monthly grant stops, and tokens already in your balance stay there.
Where the law requires us to name a legal basis for handling your information, these are ours.
| What we do | Legal basis | Why it applies |
|---|---|---|
| Running your profile, your signups and your place in a block | Performance of a contract | You asked us to provide this service, and we cannot run a scrim for you without these details. |
| Publishing results, standings and ratings | Legitimate interests | A competition has to have a public record, and every team in a lobby has an interest in the result standing. We publish handles and results, never contact details. |
| Keeping sessions honest and blocking abuse of the site and the bot | Legitimate interests | Players expect their accounts to be protected, and an unprotected platform harms everyone on it. |
| Investigating cheating and enforcing the rules | Legitimate interests | Competitive integrity is the whole point of a scrim. Practice against a cheater is worth nothing. |
| Sending your information to the United States, where the database runs | Performance of a contract | There is no version of this platform that keeps your data in your country, and you are told so before you register. |
| Responding to a court order, a regulator or a subpoena | Legal obligation | We comply with the law when it compels us. |
We do not rely on consent for anything except the optional extras you choose to add, such as linking an Overstat profile or a Twitch handle. You can withdraw those at any time by asking staff to remove them, and that does not affect anything done before you did.
We use the services below. Each one only ever sees what the table says it sees.
| Service | What it does | What it receives | Where |
|---|---|---|---|
| Discord (opens in a new tab) | Sign-in, the bot, avatar hosting, and billing for the optional subscription | Discord already holds your account. Signing in tells Discord you authorized this app. Your browser loads your avatar directly from the Discord CDN. If you subscribe, Discord takes the payment and we receive none of the details. | United States |
| MongoDB Atlas (opens in a new tab) | The database | Everything in the table above. | AWS us-east-1, United States |
| Netlify (opens in a new tab) | Serves the website | Standard request logs, which include your IP address and browser user agent. We do not read them to identify anyone. | Global CDN |
| Overstat (opens in a new tab) | Source of match statistics | We read the public profile you linked. We send Overstat nothing about you. | Third party |
| Twitch (opens in a new tab) | Shows whether a roster is live | The Twitch handle you added to your roster, so we can ask whether that channel is streaming. | United States |
We do not sell personal information, we do not share it for marketing, and we do not profile you for advertising. We will disclose information where the law compels it, or where it is needed to investigate cheating or to protect someone from harm.
The database runs on Amazon Web Services in us-east-1, in the United States. The site is served from the Netlify global network, so the copy you load comes from wherever is nearest to you. Discord and Twitch are United States companies.
If you are outside the United States, registering means your information crosses a border. There is no way to run this platform without that, so if it is not acceptable to you, do not register.
The United States has no adequacy decision from the European Commission, so for anyone in the European Economic Area or the United Kingdom this is a transfer to a country without one. The transfer happens because it is necessary to provide the service you asked for, under Article 49(1)(b) of the GDPR. We are a volunteer community project and we do not have standard contractual clauses in place with our providers, which you should weigh before you register.
Two things here act on you without a person checking first, and you should know about both.
Neither decides anything that seriously affects you. Bans, suspensions and removals are always a staff decision made by a person. If you think your rating or your lobby is wrong, say so in Discord and a staff member will look at the audit trail behind it and correct it if it is wrong.
Sign-in sessions expire seven days after they are issued. Your profile, rating, token balance and preferences are kept while your account exists. Scrim results and standings are kept as a permanent record of the season, because a leaderboard that can be rewritten afterwards is worth nothing. Netlify keeps request logs for its own short operational period.
Ask staff in Discord and you can have us show you everything we hold about you, correct anything that is wrong, or delete your profile. All of it is free and none of it requires a reason. We will ask you to make the request from the Discord account it concerns, because that account is the only proof of identity we have.
If you ask us to delete your profile we remove your Discord username, display name, avatar, Overstat link, rating, token balance and preferences. Past match results stay in the season record under the team you played for, with your name removed. We cannot unwind a completed scrim, and the other teams in that lobby have a legitimate interest in the result standing.
The full set of rights you can exercise with us:
All of these are free, and we will answer within 30 days. If our answer does not satisfy you, you can complain to a regulator. In the European Economic Area or the United Kingdom that is your local data protection supervisory authority. In Illinois, where the operator is, that is the Illinois Attorney General. Complaining to us first is welcome but not required.
We hold no password, because sign-in goes through Discord and we never see your credentials. The session cookie is signed with HMAC-SHA256 and verified in constant time, so a forged or edited one is rejected. It is HTTP-only, same-site and sent only over HTTPS in production. All traffic to the site and to the database is encrypted in transit, and the database is access-controlled so only the application can read it.
No system is perfectly secure. Protect your Discord account with a strong password and two-factor authentication, because on this platform your Discord account is your account. If you think someone has got into it, tell staff immediately.
If information we hold is lost, or accessed or disclosed without authorization, we will tell the people affected and say what happened, which of your data was involved, what we have done about it, and what you should do next.
The operator is in Illinois, so the Illinois Personal Information Protection Act applies and we notify affected Illinois residents in the most expedient time possible and without unreasonable delay. Where a breach affects people in the European Economic Area or the United Kingdom we will also notify the relevant supervisory authority within 72 hours, as the GDPR requires. We will post a notice in Discord as well, because that is where you actually are.
Discord requires you to be at least 13, and older in some countries. Because you can only be here through Discord, that floor applies here too. We do not ask for a date of birth, because collecting one from everybody to screen a few would take more data than it protects.
If we learn an account belongs to someone below the minimum age for their country, we remove it and erase the personal information attached to it. If you believe that applies to an account here, tell staff and we will act on it.
If what we collect changes, this page changes with it and the effective date at the top moves. Where a change materially affects you, we will announce it in Discord before it takes effect.
Every request under this policy goes through the staff in our Discord server. Open a ticket or message a staff member directly.
Message staff on Discord (opens in a new tab)https://discord.gg/8wzDMHeCfz