Privacy Policy
Last updated
This explains what Anchor collects, why, who sees it, and what you can ask us to do about it. It applies to the site at anchor.rip and everything served from it.
1. Who is responsible
Anchor is an unincorporated project run by its maintainers, who are together the controller of the personal data described here. It is not a company. Contact details are in section 14, and we will give you the name and address of the person responsible on request.
2. What we collect
What you give us
- Account details. Username, password (stored only as a hash we cannot reverse), and an email address if you provide one.
- Profile details. Display name, description, avatar, equipped items, cosmetics and anything else you choose to put on your profile.
- Content. Games, models, images, audio, clothing, group pages, forum posts and messages you create or upload.
- Correspondence. Anything you send us in a report, appeal or support message.
What we collect automatically
- Log data. IP address, approximate location derived from it, date and time, pages requested, referring page, user agent, and error traces.
- Device and client data. Browser or game client version, operating system, screen size and similar technical details.
- Activity. Sign ins, purchases, trades, item and currency movements, moderation actions, and which games you join.
We keep IP addresses and device data because they are how a small site enforces bans, catches ban evasion, spots duplicated accounts and exploits, and investigates abuse.
What we do not collect
We do not ask for your real name, postal address, date of birth, phone number or government identification. We do not process payment card details ourselves. We do not buy personal data about you from data brokers, and we do not run advertising trackers or advertising profiles.
3. What is public
Anchor is a social site, so a lot of it is public by design. Anyone, signed in or not, can see your username, display name, profile description, avatar and renders of it, cosmetics, inventory where you have not hidden it, groups, friends, badges, forum posts, and anything you publish.
Assume anything you put on a profile, a game or a post can be read, copied, screenshot and archived by anyone, including by search engines and by third parties we do not control. Deleting it from Anchor does not delete those copies.
5. How we use it
- To run your account and show you the site.
- To render your avatar, thumbnails and models.
- To run games, matchmaking and game servers.
- To operate points, items, trades and inventories.
- To moderate the site, enforce our terms, and investigate abuse and exploits.
- To detect ban evasion, duplicated accounts, fraud and attacks.
- To fix bugs, monitor performance and improve features.
- To answer you when you contact us.
- To comply with the law and respond to lawful requests.
We do not sell your personal data, we do not share it for cross context behavioural advertising, and we do not use it to build advertising profiles.
6. Legal bases
If the UK GDPR or EU GDPR applies to you, we rely on the following bases. Performance of a contract, for running your account and providing the site. Legitimate interests, for security, moderation, abuse prevention, and improving the service, where those interests are not overridden by your rights. Consent, where we ask for it, which you may withdraw at any time. Legal obligation, where the law requires us to act.
8. How long we keep it
We keep account data while your account exists. When an account is closed we delete or anonymise personal data within a reasonable period, except where we need to keep some of it, which includes moderation records, ban records and the identifiers used to enforce them, records of transactions, and anything we are required to keep by law or need in order to defend a legal claim.
Logs are kept for a limited period for security and debugging, then deleted or aggregated. Content you published may remain visible where other users have copied, quoted or embedded it, and copies may persist in backups and caches for a period after deletion.
9. Security
We take reasonable measures to protect your data. Passwords are stored hashed, traffic is served over HTTPS, and access to systems is limited.
No system is completely secure, and we cannot guarantee the security of anything you send us or that we store. Anchor is an independent project, not a bank. Use a password you do not use anywhere else, and do not put anything on the site that would harm you if it became public.
If a breach happens that is likely to put your rights at risk, we will notify you and any regulator we are required to notify, as promptly as we reasonably can.
10. Children
Anchor is not for children under 13, and we do not knowingly collect personal data from them. If we learn that an account belongs to someone under 13, we close it and delete the personal data associated with it.
If you are a parent or guardian and believe your child under 13 has given us personal data, email legal@anchor.rip and we will delete it.
11. Your rights
Depending on where you live, you may have some or all of the following rights over your personal data. Access a copy of it. Correct it if it is wrong. Delete it. Restrict or object to how we use it. Receive it in a portable format. Withdraw consent you gave. Complain to your local data protection authority.
If the California Consumer Privacy Act applies to you, you additionally have the right to know what we collect and why, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal data as those terms are defined there, so there is nothing to opt out of.
To exercise any of this, email legal@anchor.rip from the address on your account, or contact us from the account itself. We will respond within the period the applicable law allows. We may need to verify who you are first, and we may decline where the law lets us, for example where deleting data would defeat a ban or destroy evidence of abuse. If we decline, we will tell you why.
12. Where your data goes
Anchor is hosted in Frankfurt, Germany, and served through a global content delivery network, so requests may be handled in other countries whose data protection laws differ from your own. Where we transfer personal data out of the United Kingdom or European Economic Area, we rely on an adequacy decision or on standard contractual clauses.
13. Changes
We may update this policy. When we do we will change the date at the top, and where the change is significant we will make a reasonable effort to tell you through the site before it takes effect. Continuing to use Anchor after that means you accept the updated policy.
14. Contact
Questions, requests or complaints go to legal@anchor.rip, which reaches the maintainers and is the contact point for every right described in section 11.
See also our Terms of Use.