Privacy Notice

101st Doom Battalion operates this community website for personnel records, operational administration, attendance, account linking, awards, certifications, and related member services.

This website supports a gaming community and is not an official public authority, military organisation, or official Star Wars, Arma, Discord, Steam, Valve, Bohemia Interactive, Disney, or Lucasfilm service.

For privacy questions, correction requests, deletion requests, or other data-protection enquiries, contact: CX-O 72149 Akhari.

The website may process member names, callsigns, usernames, email addresses, account and authentication records, Discord user IDs, Discord verification information, Steam IDs, Steam profile information, personnel profiles, ranks, roles, attendance records, certifications, medals, awards, administrative notes, audit logs, security information, IP addresses, and device information where those details are logged by the website, hosting provider, security provider, or authentication provider.

The exact information held for a person depends on whether they are a visitor, registered website user, current member, former member, administrator, or someone using a linking or verification flow.

Information may be provided directly by users, entered by authorised staff, imported or synchronised from connected community systems, generated by website activity, created during account administration, or received from third-party services such as Discord, Steam, Supabase, hosting infrastructure, and security infrastructure.

Steam linking uses Steam OpenID to confirm the Steam ID returned by Steam. Discord verification uses a short-lived verification code sent through the 101st Discord bot to the Discord account already stored against a personnel record.

Information is used to operate the website, manage member accounts, maintain personnel records, support attendance and training administration, display service records, assign ranks and roles, record certifications, record medals and awards, verify account linking, secure the website, investigate misuse, and maintain audit history.

Information is also used to support Arma-related statistics, XP tracking, and community administration where a member has linked the relevant account information.

Depending on context, the website may process information because it is necessary to provide requested website and community services, because the community has a legitimate interest in operating secure member administration systems, because records are needed for community governance and moderation, because legal obligations apply, or because a person has chosen to provide optional information.

Where optional features are offered, such as linking Steam information to a personnel record, the feature can only operate if the relevant information is provided.

Account records may include email addresses, authentication identifiers, session information, role records, permissions, and login-related security information.

These records are used to allow authorised access, restrict administrative areas, prevent unauthorised use, and maintain accountability for changes made through the website.

Personnel records may include names, callsigns, ranks, roles, billets, time in grade, status history, service records, administrative notes, and related profile information.

Personnel information is used to manage the 101st Doom Battalion roster, display current records, support transfers, and maintain continuity for current and former members.

Attendance records may include event attendance, non-attendance, excuses, weekly summaries, Discord attendance responses, timestamps, and staff-entered corrections.

Attendance information is used for operational planning, unit administration, role assignment for events, historical attendance review, and related community management.

Discord user IDs and verification records may be used to confirm that a person selecting a personnel record controls the Discord account already linked to that record.

Verification codes are short-lived. The code is not intended to be stored in readable form, and verification attempts may be logged for security, abuse prevention, and troubleshooting.

Steam account linking uses Steam OpenID to confirm the Steam ID controlled by the person completing the linking flow. The website does not receive Steam passwords, Steam Guard codes, wallet information, inventory information, trades, or private Steam account credentials.

The website may store Steam ID, Steam display name, Steam profile URL, Steam avatar URL, linking status, timestamps, and audit records so the Steam account can be connected to the correct personnel profile for Arma XP and stat tracking.

The website may store and display certifications, medals, awards, XP, kill statistics, death statistics, medical tracking statistics, weekly summaries, and service history.

Some awards or statistics may be created automatically from tracked activity, while others may be entered or corrected by authorised staff.

Audit logs and security logs may record user IDs, personnel IDs, actions taken, timestamps, request information, IP addresses, device information, and error information where needed to secure the website and investigate issues.

Audit logs help prevent unauthorised changes, support accountability, and allow staff to diagnose problems with account linking, personnel updates, attendance records, and administrative actions.

Information may be processed by service providers that help operate the website, including Supabase, the website hosting provider, Cloudflare if used for DNS, caching, security, or proxy services, Discord, Steam or Valve, and email providers if email functionality is configured.

Information may also be visible to authorised 101st Doom Battalion staff where needed for community administration and technical support.

Supabase is used for database and authentication features in this project. Supabase may process account data, authentication data, personnel data, attendance data, audit records, and other database records needed by the website.

Supabase authentication may use browser storage and cookies or tokens necessary to keep users signed in and protect sessions.

The website hosting provider may process technical logs, IP addresses, request information, and device information needed to serve the website, diagnose errors, and protect the service.

Discord may process Discord user IDs, server membership information, bot messages, attendance interactions, role assignments, and verification messages when website features interact with Discord.

Steam processes Steam sign-in through Steam OpenID and may provide public Steam profile information.

The website and its service providers may process information in countries outside the United Kingdom. This can happen when cloud hosting, database, security, Discord, Steam, or email services operate internationally.

Where relevant, the website relies on the safeguards and contractual arrangements provided by those service providers.

Information is kept only for as long as reasonably needed for the purposes described in this notice, including active membership administration, security, audit history, dispute resolution, service records, and technical troubleshooting.

Some weekly activity records may reset or roll over while lifetime profile totals, audit records, service records, or historical records may be retained for longer where they support community administration.

When a member leaves, the website may retain a limited personnel history, rank history, awards, audit logs, and administrative records where needed for community records, moderation, security, or continuity.

Access permissions, Discord roles, or active status may be removed or changed. Some public or internal profile information may be archived rather than immediately deleted.

Depending on applicable law, users may have rights to request access, correction, deletion, restriction, objection, portability, or review of certain information held about them.

These rights may be limited where information must be kept for security, audit, legal, community governance, or legitimate administrative reasons.

Requests to correct or delete information should be sent using the contact details in this notice. Please include enough detail to identify the relevant account, personnel record, or linked service.

The website may need to verify the requester before making changes to account, personnel, Discord, Steam, attendance, award, or audit information.

Privacy concerns should first be raised using the contact details in this notice so the issue can be reviewed by the website operator.

This Privacy Notice may be updated as the website, community tools, legal requirements, or service providers change. The Last Updated date and version on this page show the current published version.