1. Data controller
The controller of your personal data is Reload-Airsoft.
For any questions about your data, you can contact us at: Relaod-Airsoft@proton.me
2. Data collected
When creating your account
- Email address (required)
- Username (required)
- Password (stored as a bcrypt hash — never in plain text)
- Date of birth (optional)
- Profile photo / avatar (optional)
When using the platform
- Game registrations
- Participation history and game statistics
- Published content (blog articles, comments)
- Game preferences and equipment (if provided)
Technical data
- IP address (for security and abuse prevention)
- Connection data and access logs
- Browser type and operating system
- Session data (session token stored server-side in Redis)
Payment data
Payments are processed by Stripe. Reload-Airsoft never stores your card numbers, IBAN, or any banking details. Only an opaque Stripe identifier is kept for potential refunds. See the Stripe privacy policy.
Sign-in via third-party services (OAuth)
If you sign in via Discord or Google, we receive only the data those services share with us: email address, display name, and unique identifier. We do not access your contacts, messages, or other personal data.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management | Contract performance (Terms of Service) |
| Game registration and participation management | Contract performance |
| Payment processing | Contract performance |
| Sending transactional emails (confirmation, password reset) | Contract performance |
| Content moderation | Legitimate interest (platform security) |
| Anonymised usage statistics | Legitimate interest |
| Fraud prevention and security | Legitimate interest |
| Newsletter and marketing communications | Consent |
4. Retention period
- Active account data: for the duration of your registration on the platform
- After account deletion: 30 days (recovery period), then permanent deletion
- Payment data: 10 years (legal accounting obligations — data hosted at Stripe)
- Security logs: 12 months maximum
- Session data: 30 days (or upon logout)
5. Data recipients
Your personal data is never sold to third parties. It may be shared with the following categories of recipients:
- Game organisers: your username and participation options (carpooling, equipment) that you provided when registering
- Stripe : for payment processing
- Technical service providers: hosting, transactional emails (sub-processors subject to strict GDPR obligations)
- Competent authorities: only upon judicial requisition
6. Your rights
In accordance with the GDPR, you have the following rights over your personal data:
Right of access
Obtain a copy of the data we hold about you
Right of rectification
Correct inaccurate or incomplete data
Right to erasure
Request the deletion of your data ("right to be forgotten")
Right to object
Object to certain processing activities (in particular marketing)
Right to data portability
Receive your data in a structured, machine-readable format
Right to restriction
Request temporary suspension of a processing activity
To exercise these rights, contact us at Relaod-Airsoft@proton.me with a copy of proof of identity. We will respond within one month.
You may also lodge a complaint with the CNIL (French Data Protection Authority).
7. Data security
Reload-Airsoft implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction:
- All communications encrypted via HTTPS/TLS
- Passwords hashed with bcrypt (high cost factor)
- Two-factor authentication (2FA) available on your account
- Sessions automatically invalidated after 30 days of inactivity
- Infrastructure hosted within the European Union
- Data access limited to only those who need it
8. Cookies
We use cookies and similar technologies. For more information, see our Cookie Policy.
9. Changes
We may update this policy at any time. In the event of a substantial change, you will be notified by email or via a banner on the site. The date of the last update is shown at the top of this page.