Privacy Policy

This policy explains what personal data the Battlefield Unlocks website collects, why, how long it is kept and what rights you have under the EU General Data Protection Regulation (GDPR). In short: we collect as little as possible. There is no email address, no tracking, no ads and no analytics.

1. Who is responsible (data controller)

The data controller for this website is enart. You can reach us through our community Discord server (message a staff member). Battlefield Unlocks is a non-commercial fan project and is not affiliated with Electronic Arts or its studios.

2. What data we collect

When you create an account

• Username and display name you choose.
• Password, stored only as a secure one-way hash (scrypt). Nobody, including us, can read your password.
• Two-factor authentication (only if you turn it on): the secret key for your authenticator app and hashed recovery codes.
• Previous usernames (only if you change yours): kept so that old profile links keep working and nobody else can take a name you used recently. They are deleted together with your account.
• API keys (only if you create them for a companion app): the name you give each key, a one-way hash of it, and when it was created and last used. Apps using a key can read and change your collection, nothing else; you can delete a key anytime in Settings.
• Sign in with Discord (only if you link Discord in Settings): your Discord user ID and avatar address. We only request Discord's basic "identify" permission and never see your Discord password, email, messages or servers.
• Your collection: which items you have collected, your tracking settings (e.g. F2P mode) and the rank you entered.
• Social links (only if you add them): the addresses of your YouTube, Twitch and/or Kick channels. Nothing is connected to those platforms; we only store and show the link.
• Leaderboard verification (only once you pass 85% of the main leaderboard): a short code for your account, the items picked at random for you to show, whether the request is waiting, approved or rejected, which moderator decided and the reason they gave. The screenshots themselves are posted on our Discord server, not uploaded to this site.
• Store bells and notifications (only if you use them): which store bundles you follow, and the notifications we show you (for example "a bundle you follow is back") with when you read them.
• Staff and helper work (only for accounts that do it): store entries, store pictures and item pictures you added keep your username, and titles and switches given by staff (for example Contributor or Picture uploads) are stored with your account.
• Account details: when the account was created and last updated, your privacy choices (public profile, leaderboard) and your rank on the site (player, mod, admin…).

We do not ask for your email address, real name, age, location or any payment information.

Sign-in sessions

When you sign in we store a session record (a hashed session ID, your account and an expiry date) so you stay signed in. Sessions expire after 30 days without use, and when you sign out or change your password.

Security records

• Rate limiting: to stop password guessing and spam, your IP address is briefly held in the server's memory (not saved) while counting sign-in and sign-up attempts.
• Staff activity log: when a staff member changes something about another account (for example its rank, password, titles, social links, leaderboard entry or verification) or about the site (for example the store or the database), we record who did it, to which account, when, and the staff member's IP address.
• Web server logs: like almost every website, our web server keeps short technical logs of requests (IP address, time, requested page, browser type) to keep the service running and to investigate abuse. Your browser may also send us reports when it blocks something on a page for security reasons (the page address and what was blocked); they are kept in the same logs.

Without an account

If you use the tracker as a guest, your progress is saved only in your own browser (local storage) and is never sent to us, unless you later create an account and choose to keep it.

Spreadsheet import

If you import your progress from a Google Sheets copy, our server downloads the Database tab of the spreadsheet you link, reads which items are ticked, and discards the file. We don't keep the spreadsheet or its link.

3. Why we use it (legal bases)

• To provide the service you signed up for (GDPR Art. 6(1)(b)): your account, sign-in, saved collection, settings, profile and leaderboard entry.
• Legitimate interests (Art. 6(1)(f)): keeping the site secure and working (sessions, rate limiting, security logs, staff activity log, backups) and preventing cheating on the leaderboard.

We don't use your data for advertising, profiling or automated decision-making, and we never sell it.

4. What is public

By default your display name, username, rank badge and completion statistics are visible on your public profile page and on the leaderboards, together with any social links you added (shown only while your profile is public). Past 85% of the main leaderboard, a mark next to your name shows whether your verification is waiting, approved or rejected (never the items or the reason). You can make your profile private and hide yourself from the leaderboards at any time in Settings. Your password, 2FA data and session data are never public.

5. Who else processes the data

• Hosting: the website and its database run on Oracle (Frankfurt). The hosting provider stores the data on our behalf and does not use it for its own purposes.
• Discord: only if you choose "Sign in with Discord"; Discord's own privacy policy applies to your Discord account.
• Google Sheets: item data is read from the community's public spreadsheet by our server. No personal data of visitors is sent to Google; fonts and pictures are served from our own server.

We don't share your data with anyone else, except where the law requires us to.

6. How long we keep it

• Account and collection: until you delete your account. Deleting it hides your account and collection right away and signs you out everywhere. For 14 days we keep them so we can restore the account if you ask us to (only staff can see them during that time); after that they are removed for good automatically. You can also ask us to remove them right away.
• Username of a deleted account: after that, only the username (and names you used before) is kept, so nobody else can take it to pretend to be you: for 90 days, or permanently for staff (website staff, Discord server staff and the mobile app developer), the same as after a username change. Nothing else about the account is kept.
• Backups: the database is backed up daily; backups are deleted automatically after at most 30 days, so a deleted account can remain in a backup for up to 30 days before it is gone for good. Super Administrators of the site can also download a backup to keep a copy in case the server is lost. It leaves out two-factor keys, recovery codes, app keys and Discord connections; they keep it private and delete copies older than 30 days.
• Sessions: until you sign out, or 30 days after last use.
• Notifications: 90 days, then deleted automatically. Followed bundles and verification records stay until you unfollow or delete your account.
• Staff activity log: 12 months, then deleted automatically. Entries keep the usernames involved even if an account is later deleted, so abuse can still be investigated.
• Web server logs: about 14 days.

7. Cookies and local storage

We use one strictly necessary cookie, bfu_session, to keep you signed in. If you sign in with Discord, two short-lived cookies (up to 10 minutes) protect that sign-in against forgery. If you use two-factor authentication and tick "Remember this device", the cookie bfu_2fa_trust lets that browser skip the code for 30 days; changing your password or two-factor settings cancels it. The site also uses your browser's local storage for guest progress and small preferences. There are no analytics, advertising or third-party tracking cookies, so no cookie banner is needed.

8. Your rights

Under the GDPR you have the right to:

• Access and portability: download all data stored about your account with Download my data in Settings.
• Rectification: change your username and display name in Settings.
• Erasure: delete your account yourself in Settings, at any time. It is removed for good after 14 days, or right away if you ask us to.
• Restriction and objection: e.g. hide your profile and leaderboard entry, or contact us to object to a specific use.
• Complaint: you can lodge a complaint with the data protection authority in your country (in Poland: the President of the Personal Data Protection Office, UODO).

For anything you can't do yourself in Settings, contact us through our community Discord server (message a staff member). We usually answer within 48 hours, and always within one month as required by the GDPR.

9. Security

The site is only served over HTTPS. Passwords and recovery codes are hashed, sign-in attempts are rate limited, two-factor authentication is available for every account, and staff actions are limited by rank and logged.

10. Children

The site is not intended for children under 16. If you are under 16, please ask a parent or guardian before creating an account.

11. Changes to this policy

If we change how we handle personal data, we'll update this page and the date at the top. For bigger changes we'll also announce it on our Discord server.