Privacy Policy

1. What we collect

• Account: your gamertag, a securely hashed password, hashed one-time recovery codes, and the month you turn 18 (we check your date of birth when you sign up, then throw it away). Your email address only if you choose to add one. Players under 16 also give a parent or guardian’s email address. We never ask for your real name, phone number or ID.
• Passkeys: if you add one, a public key and a label for the device. Your fingerprint, face or PIN never leaves your device.
• Profile: username, display name, bio, region, time zone, avatar and cover images, gamer IDs you add, your gaming schedule, playstyle and what you’re looking for.
• What you share: posts, photos, clips, comments, reactions, polls, messages, LFG sessions, community posts, event sign-ups and Marketplace listings.
• Connections: friends, follows, blocks, community memberships, roles and applications.
• Linked gaming accounts: when you link a platform, your account ID and the game data it provides — libraries, playtime, achievements, characters, ranks and online status. See section 4.
• Activity: when you were last active (to show whether you’re online), and — only if you install the Amicium app and turn detection on — which supported games you play and for how long.
• Dating (optional, 18+): the separate dating profile you create, including your gender, who you’re interested in and your photos. Because this can reveal information about your sex life or sexual orientation, we only process it with your explicit consent, and you can delete it at any time in Dating settings.
• Safety records: reports you make or that are made about you, moderation actions, and community audit logs.
• Technical: your IP address and device information, used for security, preventing abuse and (see section 4) estimating your ping to game servers.

2. Why we use it, and our legal basis

• To run Amicium for you — your profile, feed, messaging, communities and linked accounts (contract).
• To match you with players, communities and servers — recommendations use your games, region, schedule and friends (legitimate interests; you control what’s shown in Settings).
• To keep people safe — age checks, guardian approval for younger players, moderation, preventing spam and abuse (legal obligation and legitimate interests).
• Dating — only with your explicit consent, which you can withdraw by deleting your dating profile.
• Emails — account and safety emails are necessary; digests and summaries can be turned off in Settings.

We don’t sell your personal data, and we don’t use it for third-party advertising.

3. Who can see what

You choose who can see your profile (public, Amicium users, friends, or only you), and separately whether your games, playtime, linked accounts, activity and online status are shown. Posts have their own visibility setting. Posts in a community are visible only to its members unless the community makes its feed public — and posts in private communities never leave them. Your dating profile is never shown on your gaming profile or feed.

4. Services we share data with

We use these services to provide Amicium. We only send them what’s needed for the purpose shown:

• Valve (Steam Web API): Your Steam library, playtime, achievements and online status, after you link Steam.
• Blizzard (Battle.net API): Your characters and game stats, after you link Battle.net.
• Riot Games API: Your League of Legends and TFT account, rank and champions, after you link your Riot ID.
• OpenXBL (xbl.io): Your Xbox profile, games and achievements, after you link Xbox.
• fortnite-api.com: Your public Fortnite stats, after you link your Epic name.
• Twitch: Whether you’re live, after you link Twitch; game artwork and streams.
• Mojang: Checking a Minecraft username you add to your profile.
• Discord / Steam Community: Public details of a Discord server or Steam group a community links.
• ip-api.com: Approximate location of game servers. Your own IP address is never sent: ping estimates use your device’s time zone.
• mcsrvstat.us, RustMaps: Public status of Minecraft servers and Rust maps. No personal data is sent.
• Steam, IGDB, Riot, Blizzard, Xbox, Twitch and YouTube image hosts: Avatars, game artwork and video thumbnails. Amicium fetches these for you, so these sites don’t see your IP address. Video clips only load from YouTube, Twitch and others when you press play.
• flagcdn.com: Country flags, fetched through Amicium so the host doesn’t see your IP address.

We also use hosting, email and storage providers that process data on our behalf under contract: [hosting provider], [email provider] and [file storage provider]. We may share data where the law requires it, or to protect someone’s safety.

Some of these services are based outside the UK. Where data is transferred internationally we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

5. How long we keep it

• Account and profile data: while your account is open.
• Linked-account data: until you unlink the account or close your Amicium account.
• Content you delete is removed from Amicium straight away and from backups within [35 days].
• Safety and moderation records: up to [2 years] after they’re closed, or longer where the law requires.
• Online status is a single “last seen” time that’s overwritten, not a history.

6. Children

You must be 13 or older to use Amicium. Players aged 13 to 15 need a parent or guardian to approve their account; the guardian can see an activity summary and switch off features such as public posts, LFG, Live, communities and the Marketplace. Dating is never available to anyone under 18. We design features with the ICO’s Age Appropriate Design Code in mind. If you believe a child under 13 has an account, contact [safety@your-domain].

7. Your rights

You can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Most of this you can do yourself in Settings: see a live list of everything we store about you, download all of it as a file, edit your profile, change visibility, unlink accounts, or delete your account straight away. For anything else, email [privacy@your-domain] and we’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

8. Security

Passwords are hashed, connections are encrypted (HTTPS), platform tokens are stored encrypted, and access to personal data is limited to people who need it. No system is perfectly secure; we’ll tell you and the ICO about a breach where the law requires.

9. Cookies and storage

We use your browser’s storage to keep you signed in and remember preferences. See Cookies & Storage.

10. Contact and changes

Contact our privacy team at [privacy@your-domain], or write to [Company legal name], [Registered address]. We’ll tell you about important changes to this policy before they take effect.