Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account registration: Username, email address, and password (stored as a hashed value).
• Profile information: Optional fields including first name, date of birth, location, and biography.
• Communications: Any messages or content you submit through Site features.

1.2 Information Collected Automatically

• IP address: Collected at login and during account activity for security purposes, including geographic location approximation (city and country level).
• Login history: Timestamps, IP addresses, and approximate location data associated with authentication events.
• Session data: Authentication tokens and session identifiers stored in browser cookies.
• Usage data: General interaction data used to maintain and improve the Site.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Site and its services;
• Authenticate your identity and manage your account;
• Detect and prevent fraudulent access, unauthorized account activity, and security threats;
• Send transactional emails, including account verification, password resets, and security notifications;
• Improve and personalize the Site experience;
• Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Cookies and Local Storage

We use the following cookies and browser storage mechanisms:

• Session cookie: A strictly necessary cookie used to maintain your authenticated session. This cookie expires when you close your browser or after a period of inactivity.
• Remember-me cookie: An optional persistent cookie set when you choose "Remember me" at login. This cookie allows you to remain authenticated across browser sessions for up to 30 days.
• Security cookies: Short-lived cookies used to validate location-based login challenges and prevent session hijacking.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. All cookies set by this Site are strictly necessary for the operation of the authentication and security systems.

4. Third-Party Services

We share limited data with the following third-party service providers as necessary to operate the Site. Each provider has its own privacy policy governing their use of data.

Service	Provider	Data Shared	Purpose
Transactional Email	Resend	Email address, email content (verification links, password reset links)	Delivering account verification emails, password reset emails, and security notifications. Resend processes email addresses solely to deliver messages on our behalf.
IP Geolocation	IP-API / GeoIP service	IP address	Determining approximate geographic location (city and country) of login events to detect suspicious access and prompt security challenges when a new location is detected. IP addresses are not stored by the geolocation provider beyond the duration of the API request.
DNS, CDN & DDoS Protection	Cloudflare	All traffic to azuresong.net passes through Cloudflare's network, including IP addresses and HTTP request metadata	Domain name resolution, content delivery, TLS termination, and protection against malicious traffic. Cloudflare processes traffic data in accordance with their privacy policy. By accessing this Site, your connection is routed through Cloudflare infrastructure.

5. Data Retention

We retain your personal information for as long as your account remains active or as necessary to provide services. Specifically:

• Account data is retained for the lifetime of your account and deleted upon verified account deletion requests;
• Login history is retained for security auditing purposes;
• Session tokens are invalidated upon logout, password change, or expiry;
• Server ping data (game server status records) is automatically purged after 35 days.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including password hashing, encrypted transmission (TLS), session token rotation, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your account and associated personal data;
• Object to or restrict certain processing of your data.

To exercise any of these rights, please contact us via our community Discord.

8. Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice on the Site. The "Last updated" date at the top of this policy reflects the date of the most recent revision. Continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please reach out via our community Discord server linked in the footer of this Site.