Version 2026-09-06. This page explains what BFME Arena stores about you, why, and what you can do about it.
BFME Arena is run by Joël Pinna. If you have a question about your data, or you want to use any of the rights below, write to joelpinna@gmail.com.
When you create an account we store your email address, a hashed version of your password, and the display name you choose. You can also add a country, an "about me", a Discord handle, a Twitch channel and an avatar. Those extra fields are optional and you can clear them at any time.
When you sign in we record the IP address you signed in from, an identifier for the device you used, and the time. If you sign in with Google or Discord we store the account identifier that provider gives us so we can recognise you next time. We do not receive or store your Google or Discord password.
Playing generates game data: match results, replays, ladder positions, tournament entries and achievements. Using the site and the client generates messages you send, reports you file, comments you post and survey answers you give.
Chat is stored. Everything typed in arena chat, party chat, a game room and in private messages is saved with the time it was sent, where it was sent and who sent it. This is how a report about someone being abusive can be judged on what was actually said instead of on one person's word against another's.
The website records page views for basic usage statistics. Your IP address is stored there only as a one way hash, never in readable form, and only if you accepted analytics cookies.
Your account details and your game data are processed to run the service you signed up for. That is the contract between us, and without that data there is no account and no ladder.
IP addresses, device identifiers and moderation records are kept because we have a legitimate interest in stopping cheating, ban evasion and abuse. A competitive ladder does not work if a banned player can return with a new email address five minutes later.
Analytics cookies are used only if you say yes to them in the cookie banner. You can change your mind at any time and nothing else on the site depends on that choice.
Raw IP addresses from sign ins are cleared after 90 days. The device identifier and the date are kept after that, because those are what let us enforce a ban.
Chat is kept for 180 days and then deleted automatically. If a report is filed, the messages from the half hour either side of the incident are copied onto that report and stay with it, because a moderation decision has to remain checkable after the archive itself has been cleared.
Your account details are kept until you delete your account.
Match results, replays, ladder positions and moderation records are kept indefinitely. They are part of the competitive history of the game and other players' results depend on them.
We use a small number of outside services to run BFME Arena:
We do not sell your data and we do not use it for advertising.
Inside the team, chat can be searched only by general admins, and every search is recorded together with the name of the admin who ran it. Arena admins cannot search it at all. They see chat only when it has been attached to a report they are already handling.
Your display name, avatar, country if you set one, profile text, match results, ladder position and achievements are visible to other players. Your email address, your IP address and your device identifier are never shown to other players.
You can delete your account from your account settings on the website. Your email address, password, profile details, avatar and stored IP addresses are removed after 7 days, and you can cancel during that time.
Your display name and your match history stay. Ladder positions, replays and tournament results are part of other players' records too, and removing them would rewrite results other people earned. Your account stops being linked to you personally, but the name on the ladder remains. If that is not acceptable to you, please do not create an account.
Bans and moderation records also stay. Deleting an account is not a way to remove a sanction.
You can ask for a copy of your data, and there is a button on the website that gives it to you straight away as a file. You can correct anything that is wrong, ask us to delete your account, object to how we use your data, or ask us to restrict what we do with it. Write to joelpinna@gmail.com for anything the buttons do not cover, and we will answer within one month.
If you think we have handled your data badly and we have not resolved it, you can complain to the data protection authority in the country you live in. In the Netherlands that is the Autoriteit Persoonsgegevens.
You need to be at least 16 to have an account here.
If this policy changes in a way that matters, we will say so on the site. The version number at the top tells you which one you are reading.