Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data Luna AQW Tickets (https://tickets.aqw.app) collects, why, how long it is kept, and the rights you have under the EU General Data Protection Regulation (GDPR). In short: we only collect what the site needs to work, we never sell your data, and you can ask for a copy of your data or have it deleted at any time.

Who is responsible for your data

The data controller is Proxy, based in Norway. For anything related to your data, contact [email protected].

What we collect and why

Your account

When you log in with Discord, Google, X (Twitter) or an email address, we receive and store your account ID, display name, profile picture and, depending on the login method, your email address. We use this to keep you logged in and to tie your run submissions and bug reports to you.
Legal basis: performance of a contract (providing the service you signed up for), Article 6(1)(b) GDPR.

Profile changes

If you change your username or upload a profile picture, we store the new name and the image file.
Legal basis: performance of a contract, Article 6(1)(b) GDPR.

Run submissions

When you submit a speedrun we store the boss, category, time, the player names and classes you enter, the video link, the optional channel link, and the date and time of submission, together with your account ID and display name. Approved runs are published on the public leaderboard with the player names, classes, time, date, video link and channel link. Your account ID and the moderator notes are never shown publicly.
Legal basis: performance of a contract, Article 6(1)(b) GDPR.

Player names may belong to people other than you. Only list players who are happy to appear on the leaderboard. Anyone named in a run can ask us to remove their name (see Your rights).

Moderation and bans

To keep the leaderboard accurate, moderators review submissions and can temporarily or permanently ban accounts that submit fake or abusive runs. A ban stores your account ID, display name, the reason and the end date.
Legal basis: our legitimate interest in keeping the leaderboard fair and free of abuse, Article 6(1)(f) GDPR.

Bug reports

If you report a bug, we store your answers, the page you were on, your browser's user agent (browser and operating system version), and your account ID and display name, so we can reproduce the problem and follow up.
Legal basis: our legitimate interest in finding and fixing problems with the site, Article 6(1)(f) GDPR.

Settings stored on your device

Your theme, language and text size choices are stored in your browser's local storage, and the login provider keeps a session token in your browser so you stay logged in. This information stays on your device and is only used to make the site work the way you asked. We do not use advertising or tracking cookies.

Embedded videos

When you open a run's video, it loads from YouTube's privacy-enhanced domain (youtube-nocookie.com). Nothing is loaded from YouTube until you open a video. Once you do, Google receives your IP address and browser information underGoogle's privacy policy.

Who we share data with

We never sell your data or use it for advertising. We use these service providers to run the site, and they only process data on our behalf:

• Google Firebase (Google Ireland Ltd. / Google LLC) for login, the database and file storage.
• [Your hosting provider] for hosting the website.

When you log in with Discord, Google or X, that company handles the login under its own privacy policy and shares your basic profile with us.

Some of these providers may process data outside the EU/EEA, including in the United States. Where that happens, the transfer is protected by the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep data

• Account data: until you delete your account or ask us to delete it.
• Run submissions: while your account exists. Published runs stay on the leaderboard as part of the public record unless you ask us to remove them or your name.
• Bans: until the ban ends, and then up to 12 months, so repeat abuse can be recognised.
• Bug reports: up to 12 months after the bug is fixed.
• Profile pictures: until you replace them or your account is deleted.

Your rights

Under the GDPR you have the right to:

• Get a copy of your data (Article 15). You can ask for all the information we hold about you, and we'll send it to you.
• Have your data deleted (Article 17). You can ask us to delete your account and all data tied to it, including submissions, bug reports and your profile picture, and to remove or anonymise your name on published runs.
• Correct your data (Article 16). You can change your name and picture in your settings, or ask us to fix anything else.
• Take your data elsewhere (Article 20). You can ask for your data in a machine-readable format (JSON).
• Object or restrict processing (Articles 18 and 21), where we rely on legitimate interests.
• Complain to a supervisory authority (Article 77). In Norway that isDatatilsynet (the Norwegian Data Protection Authority), or you can contact the authority in the EU/EEA country where you live.

How to make a request

Email [email protected] from the address linked to your account, or include the display name you use on Luna AQW Tickets. We may ask you to confirm the request while logged in, so we can be sure it's really you. Requests are free, and we'll respond within one month. If a request is complex, we may extend this by up to two more months and will tell you why.

When we delete your data, we may keep a minimal record of an active ban until it ends, so that deleting an account can't be used to get around a ban. We will tell you if this applies.

Age

You must be at least 13 to use Luna AQW Tickets. If you're below the age at which you can consent to data processing yourself in your country (between 13 and 16 in the EU/EEA), you need permission from a parent or guardian to create an account.

Security

Data is sent over encrypted connections (HTTPS), and access to the database is restricted by security rules: other users can't see your submissions, bug reports or account details, and only moderators can review them.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. For significant changes, we'll let you know on the site.