Privacy & cookies
Last updated: 16 September 2026
This policy explains what personal data HeroSiege.Trade collects, why, and what your rights are under the GDPR. The data controller is HeroSiege.Trade.
1. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Discord user ID, username, display name, avatar and e-mail address | Discord, when you sign in (scopes identify and email) | Creating and recognising your account; showing your name and avatar on listings; enforcing bans |
| Profile details you add (in-game name, bio) | You | Shown publicly so other players can contact you |
| Listings, prices, descriptions, service offers, reports | You | The core function of the Site; listings are public |
| Private messages between players | You and the other party | Delivering the conversation to both participants; moderation of abuse reports |
| Last-seen time, listing views, bump times | Generated by the Site | Showing “online” status and sorting listings |
| IP address, browser and request logs | Your browser / our server | Security, abuse prevention and debugging; kept up to 30 days |
We do not use analytics, advertising, tracking pixels or third-party scripts. We do not sell or rent your data.
2. Legal basis
- Providing the service you asked for (account, listings, messages) — Art. 6(1)(b) GDPR.
- Security, abuse prevention, moderation and enforcing bans — our legitimate interest, Art. 6(1)(f) GDPR.
- Where we ask for your consent (we currently don’t), Art. 6(1)(a) GDPR.
3. Who sees your data
- Other players see your display name, avatar, Discord username, in-game name, bio, listings and online status. Messages are visible only to the two participants and, if reported, to moderators.
- Discord handles the sign-in; see Discord’s privacy policy. We only receive the profile fields listed above.
- Our hosting provider stores the database and server logs on our behalf inside the EU.
- Public authorities, when the law requires it.
No data is transferred outside the EU/EEA except the Discord sign-in itself, which is governed by Discord’s own safeguards.
4. Retention
- Account and profile data: until you delete your account.
- Listings: until you delete them, or 90 days after they expire or are marked sold.
- Messages: until either participant deletes their account.
- Reports and ban records: kept for as long as needed to enforce the ban, including the Discord ID of a banned account.
- Server logs: up to 30 days. Database backups: up to 30 days.
5. Your rights
You can access, correct, export or erase your data, object to processing based on legitimate interest, and lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).
- Most data you can edit or delete yourself: profile in Settings, listings in My listings.
- Delete account in Settings removes your account, profile, listings and messages immediately. Bans are recorded separately by Discord ID.
- For anything else, write to contact@herosiege.trade. We answer within 30 days.
6. Cookies
HeroSiege.Trade uses only cookies that are strictly necessary for the Site to work. They do not track you across sites and do not require consent, which is why you see a notice rather than a consent dialog.
| Cookie | Purpose | Lifetime |
|---|---|---|
authjs.session-token | Keeps you signed in | 30 days |
authjs.csrf-token, authjs.callback-url, authjs.pkce.code_verifier, authjs.state | Protect the sign-in flow against forgery | Session / minutes |
sn_realm | Remembers which realm (Season, Non-Season, Blood Pact) you are browsing | 1 year |
sn_cookie_notice (local storage) | Remembers that you closed the cookie notice | Until cleared |
You can delete cookies in your browser at any time; you will simply be signed out.
7. Children
The Site is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.
8. Changes
We may update this policy; the date at the top shows the current version. Significant changes will be announced on the Site.
9. Contact
Data controller: HeroSiege.Trade. Contact: contact@herosiege.trade.