Privacy & Data

Last updated: 25 July 2026

This policy explains what personal data Old School Rivals (the "Service", "we") collects, why, and the rights you have over it. Old School Rivals is a community-run, free-to-play private server, not affiliated with the original rights holders. We collect the minimum needed to run the game and process donations — we never sell your data.

1Who is responsible

The Service is operated by the Old School Rivals team. For any privacy request, contact us on our Discord community server — this is our primary and fastest contact channel for data questions.

The website is hosted in France and the game server is located in Germany. Your data therefore stays within the European Union / EEA; we do not transfer it outside the EU.

2What we collect

• Account data — your username, email address and password (used only to create your account and sign you in), and your account/character identifiers.
• Gameplay data — your pilots, gears, levels, war points, guild, wings and other in-game progress, needed to run the game and show your account pages.
• Donation & purchase records — the order details (item, amount, currency, provider) and the payment provider's transaction reference and timestamps. We do not receive or store your card or bank details (see §4).
• Technical data — IP address and connection/security logs, kept to run the servers, prevent cheating and fraud, and keep the game fair.
• Discord — if you contact us or link a Discord handle for support or donation matching, we store that handle to connect your request to your account.

3Why we use it (legal bases)

• To provide the Service (contract) — creating your account, running the game, delivering purchases and donation rewards.
• Legitimate interest — security, anti-cheat, fraud prevention and keeping the servers stable.
• Legal obligation — keeping payment records for accounting and tax where required.
• Consent — any optional feature you explicitly opt into; you can withdraw it at any time.

4Payments

Donations and purchases are processed by Stripe and PayPal. Your card and banking details are entered on the provider's own secure page and never pass through or get stored on our servers. Those providers process your payment data under their own privacy policies. We only receive a confirmation and a transaction reference so we can deliver your order and handle refunds or disputes.

5Cookies

We use a single essential session cookie to keep you logged in. We do not use advertising, profiling or third-party tracking cookies, and we do not run analytics that identify you. Because the session cookie is strictly necessary to use the site, no consent banner is required for it.

6Who we share it with

We share data only with the parties needed to run the Service: our payment providers (Stripe, PayPal) and our hosting provider. We do not sell your data and do not share it for advertising. We may disclose data if legally required, or to protect the Service and its players against fraud or abuse.

7How long we keep it

• Account & gameplay data — while your account exists. If you delete your account, it is removed or anonymised, except where we must keep some records (below).
• Payment records — retained as required by accounting/tax law.
• Security logs — kept for a limited period, then rotated/deleted.

8Your rights

Under the GDPR you can request to access, correct, delete, restrict or port your data, and to object to certain processing. To exercise any of these, contact us on Discord. We will respond within one month. You also have the right to lodge a complaint with your local data-protection authority.

9Children

The Service is not directed at children under the age required for consent in your country. If you believe a child has provided us personal data, contact us and we will remove it.

10Changes

We may update this policy as the Service evolves. The "last updated" date above reflects the latest version; significant changes will be announced on our Discord. See also our Terms & Refund Policy.