Privacy policy

The data controller is the MLN Arena organizers. Address: [to be completed]. Contact for any privacy question: [to be completed].

• Account: email address, password (stored encrypted by our authentication provider, never readable by us), in-game name, Free Fire UID, country, server region and language.
• Optional details: phone number (WhatsApp), date of birth and profile picture.
• Parental consent for players under 15: name, email and phone of the parent or guardian.
• Teams and tournaments: teams, invitations, rosters, check-ins, results and result screenshots.
• Chat: your messages, reports you send and moderation actions about you.
• Payments for paid tournaments: amount, status and dates. Card details are entered on Stripe and never reach our servers.
• Emails: a log of the emails we send you (type, date, status).
• Technical data: sign-in session cookies and server logs (IP address, browser) kept for security.

• To create your account and run the tournaments you join (performance of a contract, GDPR art. 6(1)(b)).
• To keep competitions fair: checking UIDs, preventing cheating, enforcing bans and moderating the chat (legitimate interest, art. 6(1)(f)).
• To send you useful emails: invitations, registrations, payments and reminders. You can turn reminders off in your dashboard (legitimate interest).
• To collect the consent of a parent for players under 15 (consent, art. 6(1)(a) and art. 8).
• To keep payment records as required by accounting law (legal obligation, art. 6(1)(c)).

Your in-game name, profile picture, country, team and tournament results are public. Your email address, phone number and date of birth are only visible to you and the organizers.

We do not sell your data and we do not use advertising. Our providers only process it on our instructions:

• Supabase: database, sign-in and file storage, hosted in the European Union (Frankfurt, Germany).
• Web host of the site: [to be completed].
• Resend: sending emails.
• Stripe: payments for paid tournaments only.

When a provider is located outside the European Union (Resend and Stripe are US companies), the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Account data: until you delete your account.
• Result screenshots: 30 days after the end of the tournament.
• Chat messages: 30 days (messages pinned by the organizers stay longer).
• Email log: 90 days.
• Results of past tournaments: kept as the tournament history. When you delete your account, your name in them is replaced by an anonymous one.
• Bans: the banned identifiers (UID, email, phone) are kept while the ban is active, to keep cheaters out.
• Payment records: 10 years (French accounting rules).

You can access, correct, delete or download your data, object to its use or ask to restrict it. From your player dashboard you can download your data and delete your account at any time. For anything else, write to [to be completed]: we answer within one month.

You can also file a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Players under 15 need the consent of a parent or guardian before playing. The parent or guardian can contact us at [to be completed] to use the rights described above on the child's behalf.

MLN Arena only uses cookies that are needed for the site to work: your sign-in session and your language. There are no advertising or tracking cookies, so no consent banner is needed.

We may update this policy. The date at the top shows the latest version; for important changes we will warn you on the site or by email.