Privacy Policy

Data controller: a private individual who owns csarena.net, Republic of Moldova. For any questions about your data, contact us at support@csarena.net.

Data is processed in accordance with the personal data protection laws of the Republic of Moldova and, for users in the European Union, also taking into account the EU General Data Protection Regulation (GDPR).

Account data you provide when signing up:

• your login and, optionally, your email address;
• your password — only as an irreversible hash; we never store or know the password itself;
• the date you signed up and last signed in, and records of your consent to the terms and to newsletters.

If you sign in with Steam: your SteamID and the public nickname and avatar from your Steam profile. We never receive your Steam password — you sign in on Steam's own website.

Technical data:

• IP address and browser (user agent) for each active sign-in session — to protect your account;
• IP address when you vote — to limit voting to once per day and fight vote manipulation;
• IP address of requests to the site — briefly, to protect against password guessing and abuse; kept in memory only;
• country derived from your IP address — determined with a local GeoIP database to estimate ping and sort servers "near you"; the IP address is not sent anywhere or stored for this.

Data about servers added by their owners: address, name, description, website, Discord, country and tags.

Game servers themselves publish players' nicknames, scores and playtime. The Service receives this public data when it queries servers and shows the current player list on the server's page.

Only the latest received list is kept; no nickname history is stored. Player count statistics are kept in anonymous form (numbers only) for up to 30 days.

Nicknames with profanity, 18+ content or links are hidden automatically. If you do not want your nickname shown, write to support@csarena.net.

• to provide the Service: account, sign-in, voting, adding and managing servers — based on our contract with you, i.e. the Terms of Service;
• to protect the Service and users from hacking, vote manipulation and abuse — based on our legitimate interest;
• to send news and offers for server owners — only if you gave separate consent, which you can withdraw at any time;
• to answer your requests and comply with the law.

The Service uses only strictly necessary cookies, without which the site does not work:

• csa_session — your sign-in session; kept for up to 30 days and extended while you use the site, deleted when you sign out;
• locale — your chosen interface language; kept for 1 year.

We do not use advertising or analytics cookies and do not track you on other sites. If third-party advertising or analytics code is added to the Service in the future, we will update this policy and ask for your consent where required.

The site's fonts are served from our own servers, with no requests to third parties.

We do not sell your data or share it with third parties for their own purposes. Data may be accessible to:

• the hosting provider whose servers run the Service — only for storage and processing on our behalf;
• Steam and Google — if you choose to sign in with their accounts; their privacy policies then apply as well;
• public authorities — only where required by law.

To add servers automatically, the Service requests the public list of game servers from Steam; no user data is sent.

The data, including data received from Steam, is stored on our hosting provider's servers. Country of data storage: Netherlands. If it differs from your country, we apply the safeguards required by law.

• account data — while the account exists; deleted when the account is deleted;
• sign-in sessions, IP address and browser — until you sign out or the session ends, at most 30 days;
• votes and voting IP addresses — while the account exists; deleted with it;
• server data — while the server is listed in the monitoring;
• email correspondence — as long as needed to answer and resolve the request.

Servers you added stay in the monitoring after your account is deleted, without any link to you.

The site uses a secure HTTPS connection. Passwords are stored only as a hash (bcrypt), session tokens as a hash, and the session cookie is not accessible to page scripts. Only the Service's administration has access to the data.

No system is perfectly secure. If a breach affects your rights, we will notify you as required by law.

You have the right to:

• know what data we hold about you and get a copy;
• correct inaccurate data;
• delete your account and data — yourself in your account settings or on request;
• withdraw consent to newsletters — in your account settings;
• object to or restrict processing, or receive your data in a portable format — where the law provides for it;
• complain to a data protection authority — in Moldova, the National Center for Personal Data Protection; in the EU, the supervisory authority of your country.

Send requests to support@csarena.net. We will reply within 30 days and may ask you to confirm that the account is yours.

The Service is not intended for people under 16. When signing up, users confirm that they are at least 16 years old; the Service does not verify age and is not responsible for the accuracy of this confirmation.

We do not knowingly collect data of people under 16. If you learn that such a person has signed up, write to support@csarena.net and we will delete the account and the data linked to it.

We may update this policy. The new version applies from the moment it is published on this page; the date is shown at the top. We will announce significant changes in advance.

This policy is written in Russian. Translations are provided for convenience; in case of discrepancies the Russian version prevails.