Last updated: 2 November 2026

1. Controller

Warp Drive Control Zone (the website warp-drive.org and the related Discord bot) is operated by its owner – the controller of your data (details at the bottom of this page). Contact for privacy matters: [email protected].

2. What data we process

  • Discord login (OAuth, scopes “identify” and “guilds”) – your Discord ID, username, display name and avatar, plus the list of servers you are on (used only to show the servers you can manage; we do not store that list). We never get your e-mail or password.
  • Tournament data – sign-ups, teams and their members, match results and reports, disputes and abuse reports you submit, together with your Discord ID.
  • Support tickets (/help and the /ticket command) – the subject, the conversation with the team, the chosen category and the server the ticket relates to. Only you and the platform team can see them. So the team can answer faster, the conversation is also copied to a private team thread on the official Warp Drive Discord server, and you can reply from a Discord direct message – the content is then also processed by Discord. Resolved and closed tickets are deleted after 12 months without activity, and all your tickets (with their Discord threads) are removed together with your account.
  • Applications to the Warp Drive team (the “Apply” button on our Discord server) – your Discord ID and account name, the chosen role, your age, Minecraft username, a few sentences about you, your availability and the team’s reply. We use them only to consider your application (your request – Art. 6(1)(b) GDPR; age – to match the role to your age, legitimate interest, Art. 6(1)(f)). They are seen by the team members who manage the team; a short message (role, account mention, age) is posted in the team channel on Discord. The bot sends you the answer in a private message. We delete the data 90 days after the decision (together with the team channel message), or earlier together with your site account.
  • E-mail – when you write to us by e-mail, we process your address, the sender name, the content and attachments to answer you (legitimate interest, Art. 6(1)(f) GDPR; for purchase matters – contract, Art. 6(1)(b)). We keep the messages for up to 12 months after the matter is closed, unless they are needed longer for a complaint or dispute.
  • Players directory – the directory shows your name, avatar, ratings, teams and a short bio (empty unless you write one) to anyone, without needing to sign in.
  • Private messages (optional, off by default) – stored in our database and only the people in the conversation can see them; when a conversation is reported to the moderators, the team sees its latest messages. Conversations with no activity are deleted after 90 days, and all your conversations, blocks and settings are removed together with your account. We send direct-message notifications from the Discord bot only with your consent. Conversations with the official Warp Drive account are visible to the whole platform team, and we record which team member wrote each message. You can also write and read private messages on our Minecraft servers (/msg, /r, /support) – these are the same conversations, with the same data and the same retention period; a message shown in the game counts as read on the website.
  • Linked game account (optional) – if you link your Minecraft account (with a one-time code entered on a game server; we store your Minecraft UUID and player name), we store these identifiers with your profile. They let a tournament server check that the registered players are the ones playing. Only the organizers of servers where you take part in a tournament can see them, in the API for their game servers; they are never public. A linked game account is tied to your profile permanently (you cannot unlink it yourself; the team can release it on request through a ticket). When you delete your account, the identifiers and player name are deleted, but we keep a one-way hash of the game account ID linked to your Discord ID – so that a banned player cannot use the same game account on a new profile (legitimate interest: preventing cheating and ban evasion, Art. 6(1)(f) GDPR).
  • Training – when you play on the Warp Drive training arena, after each session we store its results with your profile: duration, bridge course runs and best time, bow shots and hits (separately for each target distance), dummy hits, critical hits and the longest combo, as well as your shooting range and sparring settings. After each sparring round (bot duel, combo, hit rhythm) we store its result: mode, bot level, win, time, hits dealt and taken, critical hits, combo and score. On the bridge course we keep your best time on each route with its split times and the path of that run (for the record ghost), and your longest Clutch streak. Only you can see them. Deleting your account deletes them completely.
  • IP address on our game servers – when you join a Warp Drive match server (e.g. warp-drive.org), the server passes your IP address to us, and we store only a one-way keyed hash of it (IPv6 addresses are shortened to the /64 network), never the address itself. It is used only to detect multiple accounts of one person and arranged matches between them: the team only sees that two accounts joined from the same address and decides what to do – nothing happens automatically. The hash is deleted 30 days after your last join or together with your account (legitimate interest: preventing fraud, Art. 6(1)(f) GDPR).
  • In-game voice chat (optional) – if you install the Simple Voice Chat mod, our game servers pass your voice in real time to players who are close to you in the game (up to 48 blocks). We do not store conversations, and recording by players is disabled on our servers. Without the mod no voice is transmitted (contract – providing the game service, Art. 6(1)(b) GDPR).
  • Sanctions – if the team gives you a warning or a ban, we store its type, reason, length and who issued it, and you receive a message from the official Warp Drive account. Sanctions are kept after account deletion for as long as they are needed to prevent ban evasion. You can appeal through a ticket in Help.
  • Fair play anticheat – on our match servers an anticheat program (Grim, running on our own server) and our plugin check movement, hits and placed blocks during a match. When detections pass a threshold or another player reports you, we store a case: the kind and number of detections, the score, your ping and a recording of the last minute of the match (positions, where you looked, hits, blocks). A team member reviews the case; automatically we can only stop a ranked match for an obvious cheat and block playing for 7 days, which the team confirms or lifts within 24 hours. Detection counts from matches (without any player data) are kept for 30 days, recordings for 30 days after the case is closed, cases for 12 months. Nothing is installed on or read from your computer. Legitimate interest: fair competition (Art. 6(1)(f) GDPR). You can appeal through a ticket in Help and ask for your recording.
  • Team chat – teams belong to the platform, not to a Discord server. Messages written in a team’s chat are stored in our database and visible only to the team’s active members (the team captain can delete any message). When a chat is reported, the platform team sees its latest messages. Messages are deleted after 90 days and your messages are removed together with your account.
  • “Find an opponent” lobby chat – messages in a team lobby before a match is found are visible only to the players who joined it. They are deleted when the lobby is disbanded, at the latest after 24 hours, and your messages are removed together with your account.
  • Server data (when the bot is added) – server ID, name, icon, owner ID, member count, the channel and role IDs chosen in setup, tournaments and an audit log of organizer actions.
  • Subscriptions and referrals – which Warp Plus / Pro level an account or server has, where it comes from (a purchase on Discord or on the website, a team grant or a reward) and for how long. Payments are processed by Discord or Stripe (Stripe Payments Europe Ltd., Ireland) – you give card and BLIK details directly to them, and we store only the Stripe customer ID and the purchase status – for a Cores pack also the pack, the amount, the time of both consents and any refund (contract – Art. 6(1)(b) GDPR; we keep Cores purchase records after the account is deleted, without your name, and Stripe keeps payment records as required by tax law). For referrals we store who invited whom, the qualification status, the number of matches counted and the linked Minecraft account used to qualify (to stop the same game account from qualifying invites more than once). Legitimate interest: running the rewards and preventing abuse (Art. 6(1)(f) GDPR). This data is removed together with the account.
  • Cores – the history of Cores earned and spent (what for, how many, when), the profile looks you bought and which ones you wear. Legitimate interest: running the rewards and preventing abuse (Art. 6(1)(f) GDPR). Removed together with the account.
  • Account level and profile banner – XP history (what for, how much, when), level, Service Medals and crates earned by playing; the banner hash of your Discord profile (if you have one) and the banner image you uploaded yourself (cropped, without file metadata). Legitimate interest: running the level and rewards and showing the profile (Art. 6(1)(f) GDPR). Removed together with the account; you can remove your own banner at any time.
  • Warp Market – your skins, crates and keys, offers and purchases (price, when, with whom), opened crates and what they gave, and equipped skins. Contract: running the market (Art. 6(1)(b) GDPR) and preventing fraud (Art. 6(1)(f)). Removed together with the account; finished sales stay in the other party’s history without your name.
  • Workshop – your designs (pixels, name, status and the team’s reason), your votes and reports. Contract: running the Workshop (Art. 6(1)(b) GDPR). Removed together with the account; skins already in the game stay without your name.
  • Stream link – if you add one: your channel address (Twitch, YouTube, Kick, TikTok) and until when the “Live” badge is on. While you are live, the link is public on your profile and in tournaments. You can remove it at any time; it is also removed together with your account.
  • Prizes in official tournaments – when you win a money or physical prize: name, bank account number (IBAN), delivery address and phone number for the courier, a guardian’s statement (under 18) and, where tax law requires, details needed to settle the tax. Basis: contract – handing out the prize (Art. 6(1)(b) GDPR) and legal obligation – tax and accounting (Art. 6(1)(c)). Kept until the prize is handed out and any complaint is closed; tax documents for as long as tax law requires (as a rule 5 years from the end of the tax year). Details: Prize rules.
  • Cookies – only strictly necessary ones: a session cookie (wdcz_session, HttpOnly, up to 7 days), a short-lived login state cookie (wdcz_oauth, 10 minutes), your language choice (wdcz_lang, 1 year) and – only after opening a friend's referral link – the referral code (wdcz_ref, up to 30 days, removed at your first sign-in). The theme choice (wdcz_theme) is stored in your browser's storage. No advertising or tracking cookies.
  • Page statistics – anonymous daily counters per page type. No IP addresses, identifiers or cookies are involved.

The bot does not read message content (it does not use the Message Content intent). We only have your e-mail address if you write to us yourself, and we do not collect payment data.

3. Purpose and legal basis

To run tournaments, show public tournament and player pages, moderate abuse and keep the service secure. Legal basis: performance of the service you asked for (Art. 6(1)(b) GDPR) and our legitimate interest in security and preventing abuse (Art. 6(1)(f) GDPR).

4. What is public

Tournament pages show participants’ display names and avatars, results and brackets. A player profile shows a name, avatar and tournament history. Server listings appear in the catalog only if the server’s administrator opted in.

5. Recipients

  • OVH SAS – hosting of the website, database, e-mail and game servers (data centres in France and Poland); it processes data only on our behalf.
  • Discord Inc. – login and the platform the bot runs on (own privacy policy).
  • Cloudflare – network tunnel and DDoS protection; it sees connection metadata such as IP addresses.
  • Stripe Payments Europe Ltd. (Ireland) – payments on the website.
  • Bank, courier or post – only when handing out a money or physical prize in an official tournament (the details needed for the transfer or delivery).
  • Microsoft (Mojang) – when you join our game server, we check with them that your Minecraft account is genuine (we send your player name).

Discord, Cloudflare and Microsoft may process data in the USA. These transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or, where it does not apply, on standard contractual clauses; write to [email protected] for a copy of the safeguards.

We do not sell data or share it for marketing.

6. Retention

  • Sessions expire after 7 days.
  • Server data is deleted 30 days after the bot is removed from the server.
  • Backups are kept for 14 days.
  • Technical logs of the website and game servers (without IP addresses) – 14 days.
  • E-mail – up to 12 months after the matter is closed.
  • Team applications – 90 days after the decision.
  • The log of team and organizer actions – 24 months.
  • Anticheat cases – 12 months; match recordings – 30 days after the case is closed.
  • Tournament history is kept while the server uses the service; when you delete your data, your profile is anonymized (see below).

7. Your rights

You can access, correct, delete, restrict or port your data and object to processing. Two things you can do yourself on the My data page: download a JSON copy of your data and delete your data (your profile is anonymized – name and avatar are removed and only a technical ID stays so that other players’ results remain intact – and you are removed from teams). Otherwise write to [email protected]. You may also complain to the supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).

8. Age

The service is available to people who meet Discord’s minimum age (13, or higher where local law requires).

9. Changes

We may update this policy; the date above shows the latest version.