Privacy & Data Policy

BUSHWAR | Africa Cold War ("BUSHWAR", "we", "us") is a community-led, non-profit Arma Reforger gaming community. We operate this website (play.bush-war.com), a Discord server, a Discord bot, and Arma Reforger game servers.

This document is both our Privacy Policy and our Data Policy. It explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it, wherever in the world you are.

Data controller contact: contact@bush-war.com

Website account (Discord sign-in). When you sign in with Discord we receive and store:

• Your Discord user ID, username, and avatar
• Your email address associated with Discord
• Your public Discord connections (e.g. Steam, Xbox, PlayStation), only to let you link your game identity
• An OAuth access token used to read the above on your behalf

Game server telemetry. When you play on our Arma Reforger servers, server logs automatically generate:

• Your in-game player name and platform identity ID
• Gameplay statistics: kills, deaths, hits, sessions, playtime, achievements
• Connection and session timestamps

Community moderation records. To keep the community safe we keep:

• Reports, warnings, kicks, bans, and other infractions, including the reason and the moderator who issued them
• Relevant in-game or Discord context attached to those records

Discord bot. Our bot processes Discord user IDs, usernames, roles, and messages in our server only to the extent needed for community features (stats, leaderboards, moderation, announcements).

We do not collect payment data, government identifiers, precise location, or biometric data. We do not sell personal data, and we do not use it for advertising.

• Contract / providing the service: operating accounts, profiles, leaderboards, and linked game identities you request.
• Legitimate interests: server administration, anti-cheat, moderation, and keeping the community safe and fair. We balance these interests against your rights.
• Consent: signing in with Discord is optional; you grant the listed scopes at sign-in and can revoke them at any time in your Discord settings.

We never use your data for automated decision-making with legal or similarly significant effects, and we never sell or "share" it for cross-context behavioural advertising (as defined by the California CPRA).

We use only strictly necessary cookies: session cookies set by our authentication system when you sign in. We do not use analytics, advertising, or tracking cookies, so no cookie consent banner is required. Signing out removes your session.

Data is stored in a PostgreSQL database and application services hosted on Railway (railway.com), with infrastructure that may be located in the United States or the European Union. Game servers and Discord infrastructure are operated by their respective providers (Bohemia Interactive / hosting provider, Discord Inc.).

Where personal data is transferred outside your jurisdiction (e.g. outside the EEA or UK), we rely on our processors' safeguards such as Standard Contractual Clauses and equivalent mechanisms maintained by those providers.

• Account data: kept while your account exists; deleted on request.
• Gameplay statistics: kept while the community operates, as they form shared leaderboards and history; de-linked or anonymised on request.
• Moderation records: kept as long as needed to enforce community rules and ban evasion prevention, then deleted or anonymised.
• OAuth tokens: refreshed or expired automatically; invalidated when you revoke access.

Depending on where you live (including under the EU/UK GDPR, California CCPA/CPRA, Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, and similar laws), you have the right to:

• Access: ask for a copy of the personal data we hold about you
• Rectification: correct inaccurate data
• Erasure: ask us to delete your data ("right to be forgotten")
• Restriction & objection: limit or object to certain processing
• Portability: receive your data in a machine-readable format
• Non-discrimination: exercising these rights never affects your access to the community
• Complain: lodge a complaint with your local data protection authority

To exercise any of these rights, email contact@bush-war.com. We respond within 30 days. You can also revoke Discord OAuth access at any time from your Discord account settings (User Settings → Authorized Apps).

Access to personal data is restricted to community administrators who need it for moderation and operations. Data is transmitted over encrypted connections (HTTPS/TLS) and stored with our hosting provider's at-rest protections. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify affected users and, where required, the relevant supervisory authority without undue delay.

Our services are intended for users aged 16 and over, consistent with Discord's own minimum-age requirements and the mature themes of Arma Reforger. We do not knowingly collect data from children below the applicable digital-consent age in their country. If you believe a child has provided us data, contact contact@bush-war.com and we will delete it.

• Discord Inc.: authentication and community platform (see Discord's privacy policy)
• Railway Corp.: application and database hosting
• Bohemia Interactive / game server host: Arma Reforger platform and server infrastructure

These providers act as processors or independent controllers under their own policies. We do not share your data with anyone else, except where required by law.

We may update this policy as the community or the law evolves. The "last updated" date at the top reflects the current version. Material changes will be announced in our Discord server.

Questions, requests, or complaints: contact@bush-war.com