Privacy Policy
Last updated: January 1, 2025 · wallfire.net
Overview
WallFire ("we", "us", "our") is a darts community platform operating at wallfire.net. We are committed to protecting your personal information and being transparent about what we collect and why. This policy applies to all users of wallfire.net.
We comply with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.
What data we collect
| Data type | Why we collect it | Retention |
|---|---|---|
| Email address | Account login, notifications, security | Until deletion request |
| Name | Public profile display | Until deletion request |
| Password (hashed) | Authentication — never stored in plain text | Until deletion request |
| City, state, country | Location display on public profile | Until deletion request |
| Photo | Profile avatar — you upload, we store on S3 | Until deletion request |
| Player stats (PPD/MPR) | Optional — you choose what to share | Until deletion request |
| Phone number | Optional — visibility controlled by you | Until deletion request |
| IP address (login) | Security, fraud prevention, GDPR consent logging | 90 days |
| Session token (cookie) | Keeping you logged in | Session / 30 days |
| Audit log entries | Security and GDPR compliance | 12 months |
| Messages | In-app communication between users | Until deletion request |
How we use your data
- To operate and provide WallFire services (league finder, player profiles, messaging)
- To send transactional emails (account confirmation, password reset, deletion confirmation)
- To display your public profile to other users and search engines (per your visibility settings)
- To match players with teams and vice versa
- To maintain security and prevent fraud
- To comply with legal obligations
We do not sell your data. We do not share your data with third parties for marketing purposes. We do not display advertising.
Your controls
You have full control over your data on WallFire:
- Visibility settings — Control who can see your email, phone, skill stats, and league/team associations. Settings available in Account Settings.
- Update or correct data — Edit your profile at any time.
- Export your data — Request a copy of all data we hold about you.
- Delete your account — Request full deletion of your account and all associated data (see below).
- Withdraw consent — You may withdraw marketing email consent at any time from settings.
Cookies
We use the following cookies:
| Cookie | Purpose | Type |
|---|---|---|
| next-auth.session-token | Keeps you logged in | Essential |
| wf_cookie_consent | Remembers your cookie preferences | Essential |
We do not use advertising cookies, tracking pixels, or third-party analytics by default. Optional analytics cookies may be enabled with your explicit consent via the cookie banner.
Request data deletion
You have the right to request deletion of your account and all associated data. Once submitted, your request will be processed within 30 days. You will receive an email confirmation when deletion is complete.
Note: Some data may be retained in anonymized form for legal compliance or security purposes (e.g., anonymized audit logs). We will tell you what, if anything, is retained.
Contact
For any privacy questions or concerns, contact us at [email protected]. We aim to respond within 72 hours.