Privacy Policy

Who we are

Nation is run by Modern Grind Technology, a business of David Olverson, based in Virginia, United States. Modern Grind Technology decides how your personal data is used for Nation (in some laws this is called the “controller”).

What we collect

Your Nation account

• Login name (your username): used only to sign in. It is never shown publicly. We keep a history of past login names, and a name you give up is held for you for 90 days.
• Password: we store only a salted scrypt hash, never the password itself. We also count failed sign-in attempts so we can lock an account under attack.
• Display name (and its history) and your public player ID.
• Avatar address, if you set one. Avatars are links to images on approved hosts, not files we store; when someone views your avatar, their browser loads it from that host, which can see their IP address.
• Account dates (created, first and last seen), your account status, your Passport privacy settings, saved builds, crew membership and friends.
• How you were let in: the access code or invite you used (we store only a one-way hash of it, never the code itself), your access group (for example Founder or Alpha) and whether you are a beta tester.

Your website account

• If you sign up on this website with an email address: your email address, a salted scrypt hash of your password, your display name and your last sign-in time. If you use Sign in with Nation instead, we link the website account to your Nation account and do not need an email address.
• Profile fields you choose to fill in: handle, bio, region, platform and favourite position, plus your notification preferences.
• Sessions: a hash of your session token, when it expires, when it was last used, and the browser’s user agent (its name and version), so you can stay signed in and we can spot misuse.
• What you create here: support tickets, bug reports, feedback, feature requests, looking-for-group posts and playtest applications.

Discord, if you link it

Linking Discord is optional. We ask Discord only for the identify permission and store your Discord user ID, username, display name and avatar reference, and whether you are in the Nation server. We do not ask for your Discord email, your server list or permission to join servers for you. The access token is used once to read your identity and then thrown away; we do not store Discord tokens. When you use Nation’s bot commands or open a ticket in the Nation Discord, we also see what you send there, and Discord itself handles your messages under its own privacy policy.

Games and competitive play

• Matches you play: who played, teams, scores, results and box score stats (such as points, rebounds, assists, minutes and shooting numbers).
• Results are recorded automatically from each player’s own game at the end of a game (the game’s end-of-game upload, forwarded by the game server). If uploads are missing, players in the match can report the result; if they disagree, staff review it. Staff corrections are recorded with a reason.
• Your game ID: the numeric player ID (a Steam ID) your game uses on our servers. It is linked to your account so our game servers can check that the person playing is you, and staff may link it for you. It is never shown on your Passport.
• Game admissions and events from game servers, which we keep as evidence for fair play.

IP addresses

• While your launcher is signed in, we record the IP address it connects from on your current play pass, so our game servers can admit you and so we can protect matches from impersonation and cheating. It is replaced each time your launcher renews the pass, and the last one is kept with your account.
• Our website and API also use IP addresses briefly, in memory, to rate-limit sign-in and other requests against abuse. Those counters are not saved to our databases.
• To stop abuse of invite codes, the website keeps a short-lived record of attempts in its database. Each record is keyed by a one-way, keyed hash of your IP address or account, never the address itself, and is deleted after about 10 minutes.
• We never publish an IP address and never show it to other players.

The launcher

The launcher does not send us usage analytics or telemetry, and it does not collect hardware or device IDs. Its log files and crash reports stay on your computer. It talks to our servers to sign you in, keep your session and play pass alive, and load your Passport, friends, crew, builds and queue. If you choose to send a support report from the launcher, it sends the launcher and game client versions, your operating system version, the selected server, error codes, the update state and up to 20 lines of your log with personal details masked. Nothing is sent unless you press the button.

Creator Program

If you apply to the Creator Program: your answers, the social accounts and links you give us, the audience numbers you type (marked self-reported), content samples, your linked Discord identity at the time you applied, and staff review notes and decisions. Reviewers may look at your public profiles to check them. Creators see only totals for their own campaigns, never who used a code.

Payments

Purchases are handled by Whop. Whop collects your payment details under its own terms and privacy policy. From Whop we keep only what we need to deliver and account for the item: the payment and product references, the amount and currency, the payment status (including refunds and disputes) and the dates. We never receive or store your card or bank details, billing address, name, email or phone number from a payment, and we strip IP addresses from the payment events Whop sends us.

Safety, moderation and staff records

We keep an audit log of important actions (who did what, to what, and when), with secrets and tokens removed. We keep sanctions (warnings, suspensions and bans) with their reason and who issued or lifted them. Staff handling support, moderation and security see only what their role needs. If you report a player, we keep your report (the category, what you wrote, any links and the match you name) with your account so staff can review it; reports about you are kept as moderation records and are never public. If you appeal a sanction, we keep what you wrote and the staff decision with that sanction.

Why we use it

We use your information only to run Nation. In plain terms, our reasons are:

• To provide the service you asked for (performing our contract with you): creating and securing your account, signing you in, running games, recording results, showing your Passport, delivering items you buy and answering support.
• Legitimate interests that do not override your rights: keeping games fair, preventing cheating, fraud, abuse and ban evasion, securing our systems, fixing bugs, and understanding in aggregate how invites and access codes are used.
• Your consent, where we ask for it: linking Discord, optional profile fields and applying to the Creator Program. You can withdraw consent at any time by unlinking, clearing the field or asking support.
• Legal obligations: keeping payment records and responding to lawful requests.

We do not sell your personal data, we do not use it for advertising, and we do not use third-party analytics or tracking. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects; sanctions are decided by staff.

What is public and what is private

Public on your Player Passport (anyone can see it, and it may be shown on leaderboards and match pages): your public player ID, display name, avatar, the date your account was created, your account status (active, suspended or banned, but never the details), career stats, recent games, achievements and badges, your current build, league history and, unless you hide it, your crew and crew history.

Public on this website: your display name and the profile fields you choose to fill in, and anything you post in public areas such as looking-for-group.

Never public: your login name, password, email address, IP addresses, linked Discord ID, sanction details, payment records, support tickets, security reports and audit records.

Your privacy settings

• Show last seen: off by default. While it is off, your Passport hides when you were last online and shows dates only, not times, for your games, stats, builds and achievements.
• Show crew: on by default. Turn it off to hide your crew and crew history from your Passport and to leave you out of public crew rosters.
• Discord: unlink at any time from your account. The link is closed immediately and the Discord roles Nation manages are removed; your Nation account and history stay.

Who we share it with

We share personal data only with service providers that help us run Nation, only what they need, and never to sell it:

• Hosting providers that run our servers and databases, currently including Railway (this website and its database) and Hetzner (servers for the Nation API and its database).
• Whop, which processes payments.
• Discord, when you link your account or use the Nation Discord (for example, to give you the right roles).

Creators in the Creator Program see only total counts for their own campaigns. We may also disclose information if the law requires it, to protect people from harm, or as part of a sale or transfer of Nation, in which case this policy continues to apply to your data.

Cookies and local storage

This website uses only cookies it needs to work. There are no advertising or analytics cookies.

• nation_session: keeps you signed in. It cannot be read by page scripts and lasts up to 14 days unless you sign out.
• nation_signin: protects the Sign in with Nation step. It lasts up to 10 minutes.
• nation_dl_ticket: lets you start a launcher download after you enter an invite code. It lasts 5 minutes.
• nation_appeal: only if you appeal a sanction. It holds a sealed, appeal-only sign-in that page scripts cannot read, is sent only to the appeal pages, and lasts at most 1 hour.

Staff using the staff console also get a short-lived cookie that carries a moderation action between its form and its confirmation step.

The launcher keeps your sign-in session on your computer; a launcher session expires after 24 hours without use and at most 30 days after you sign in.

How long we keep it

• Account and profile data: for as long as your account exists.
• Sessions: website sessions expire after up to 14 days. Launcher sessions expire after 24 hours without use and at most 30 days after you sign in. We keep a record of expired and revoked sessions (without the token) for security.
• Matches, results and stats: they are part of the competitive record that other players rely on, so we keep them while Nation runs competitive play.
• Audit logs, sanctions and payment records: kept to protect accounts, stop ban evasion and fraud, and meet accounting and legal duties.
• Database backups are kept for 14 days and then replaced.
• Support reports, tickets and creator applications: for as long as we need them to help you and run the program.

Nation is new, and we have not yet set automatic deletion periods for every kind of record. Until we do, you can ask us to delete your data at any time (see below). When we delete an account, we remove or replace your names, contact details, password, sessions, game and Discord links, builds and privacy settings, and your Passport stops being shown. Your matches, results and stats stay in the competitive record under the name “Deleted player”. We keep payment records, sanctions and our staff and security logs (which can include names you used before), because we need them to meet legal and accounting duties and to stop fraud and ban evasion; only staff can see them. Your game ID is removed from your account and replaced with a keyed one-way fingerprint, so that ID cannot be linked to a new account. Rep records that game servers reported about your games keep the game ID they were reported with, as part of the competitive record; only staff can see them. Copies in backups are replaced within 14 days.

Security

We protect your data with HTTPS, salted password hashing (scrypt), storing only hashes of session tokens, invite codes and access codes, keeping secrets out of logs, and giving staff only the access their role needs. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Children

Nation is not for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has an account, tell us through support and we will close it and delete their data.

International users

Nation is run from the United States. Our service providers may store and process data in the United States and in other countries, which may have different data protection laws from yours. By using Nation you understand that your information will be handled there, protected as this policy describes.

Your rights and how to use them

Depending on where you live (for example under the GDPR in the EU and UK, or state privacy laws in the US), you may have the right to:

• get a copy of the personal data we hold about you;
• correct data that is wrong;
• have your data deleted;
• object to or restrict how we use it, and withdraw consent you gave;
• receive your data in a portable format.

We offer these to every user, wherever you live. To make a request, open a ticket in the support channel in the Nation Discord (opens in a new tab) and say which request it is. If you have a website account you can also open a PRIVACY ticket on the support page. We may need to confirm the account is yours before we act, for example by asking you to confirm from your signed-in account; we will never ask for your password. Requests are handled by staff, not automatically, and we aim to answer within one month. We will not treat you differently for using your rights.

If you are not happy with our answer, you can complain to the data protection authority where you live.

Changes to this policy

We will update this policy when what we collect or how we use it changes. We will change the effective date at the top of this page, and for significant changes we will also post a notice on the site or in the Nation Discord before they take effect.

Contact

The only way to reach us about privacy is through the support channel in the Nation Discord (opens in a new tab) or a PRIVACY ticket on the support page. We do not handle requests by email or phone.