XBattle — Privacy Policy

Last updated: 11 November 2026

XBattle is an online gaming and tournament platform operated by Jérôme Abela, who is responsible for the personal information processed by the service.

For privacy questions or requests, contact xbattle579@gmail.com.

1. Information we collect

When you sign in with Google, XBattle permanently stores your Google account's unique identifier. Your email address is checked temporarily to recognise the designated administrator, then discarded. XBattle does not request or store your Google profile name. Google authentication tokens are processed during sign-in and are not retained.

XBattle also stores:

• Your chosen nickname.
• Your Elo rating and game participation history.
• Tournament registrations and results.
• Account privileges and hashed authentication credentials.

Your nickname, Elo rating, game history, tournament registrations and results are publicly visible. Your Google account identifier, privileges and authentication credentials are private.

2. How we use your information

We process this information to provide user accounts, authentication, games, tournaments, rankings and administration.

Our legal bases under UK data protection law are:

• Contract: providing the XBattle services requested by users.
• Legitimate interests: securing the service, preventing misuse and maintaining the integrity of games, ratings and tournament records.

3. Cookies

XBattle uses cookies necessary for authentication:

• xb_session maintains login sessions for up to 30 days for registered accounts and 365 days for guests. The server stores a SHA-256 hash of the credential, associated account and expiry date, rather than the original cookie value.
• xb_oauth temporarily supports Google authentication. It expires after at most 10 minutes and is cleared when authentication completes.

XBattle does not use advertising cookies, analytics or tracking services.

4. Server logs

Our server records IP addresses and HTTP request information for operation, troubleshooting and security.

Logs are rotated weekly and automatically deleted after approximately 12–13 weeks.

5. Data retention and deletion

Account information is retained while an account exists.

Users and administrators can delete accounts. Associated game and tournament records remain but are anonymised under the label "Deleted account", without retaining links connecting them to the former account.

Expired authentication credentials become unusable, although expired credential records may remain in the database.

6. Hosting and information sharing

XBattle is hosted by IONOS on a server located in the United Kingdom. IONOS provides the hosting infrastructure.

Google provides authentication services and processes authentication information according to its own privacy policy.

Public game and tournament information is available to visitors. Private account information is not publicly disclosed.

XBattle does not use other external services to process user information.

7. Your rights

Under applicable data protection law, you may have rights to access, correct, erase or restrict processing of your personal information, and to object to certain processing.

To exercise these rights, contact xbattle579@gmail.com.

You can also complain to the UK Information Commissioner's Office at https://ico.org.uk/.

8. Changes

We may update this policy when XBattle's features or data-handling practices change. The latest version will be available on this page.