Privacy policy

Information we receive

• Discord sign-in: your Discord user ID, username, avatar, email address when provided by Discord, and whether the email is verified. We use your server membership and roles to manage access. Registration can also check the game-account connections you authorize Discord to share. Registration verification records store the email verification result, rather than your email address.
• Game-account confirmation: the permanent platform account ID, the Discord account it was confirmed for, the confirmation method, and the time of confirmation. Direct Epic Games sign-in requests Basic Profile permission and uses the returned Epic account ID to authenticate the game account for your league registration. We do not request Epic friends, presence, or country permissions.
• League participation: submitted player names and tracker links, public game statistics, replay files and their player identifiers, applications, team memberships, contracts, match results, and registration or disciplinary decisions.
• Requests and service operation: information you submit in forms or support requests, notification preferences, essential session cookies, and technical records such as request times, error logs, and network information processed by our hosting infrastructure.

Passwords are entered with the sign-in provider. We do not receive your Epic, Steam, or Discord password. OAuth tokens are used on the server during sign-in; Epic access and refresh tokens are not saved in our registration database or sent to your browser.

How we use information

We use account information to sign you in, authenticate your submitted game account, prevent another player from claiming the same account, and manage league access. We use competition records to evaluate registration requirements, calculate league salaries, organize rosters and matches, publish results, and resolve disputes. We use contact and technical information to provide support, deliver requested league notifications, and protect and operate the service.

Epic Account Services data is used for authenticating your account. We do not sell or rent Epic account information, use it for advertising, or import your Epic friends to build a social network.

Who can see information

Player-facing league information, such as player names, linked public tracker profiles, teams, salaries, standings, results, and replay-derived statistics, may appear on this website or in league Discord channels. Registration evidence, support requests, and administrative records are available to authorized staff who need them to operate the league.

We use hosting and infrastructure providers to operate the website. Discord supports community membership, roles, notifications, and support tickets. Epic Games and Steam handle their respective sign-in flows. Public rank and replay services, including Rocket League Tracker, RLStats, RL Portal, and Ballchasing, supply game information when the corresponding feature is used. Requests to these providers can include the submitted tracker link or game identifier needed for that request.

External services have their own privacy policies. See the Epic Games privacy policy and Discord privacy policy. We may also disclose information where required by law or necessary to address fraud, security incidents, or the rights of affected people.

Cookies, retention, and security

Essential cookies keep you signed in and protect sign-in callbacks. The website session expires after seven days; temporary game sign-in state expires after ten minutes. You can sign out to clear the website session or clear cookies through your browser.

We retain account verification information only while needed for authentication and account ownership, or where applicable law requires it. A verification record can remain stored after its freshness window expires; an expired record does not automatically authorize a new registration. League records may be retained to preserve competition history, enforce rules, and resolve disputes. Technical logs and recovery backups are retained for service operation and recovery.

We restrict administrative access and use HTTPS and server-side sign-in checks. Backups are restricted to recovery use. When a deletion request is fulfilled, staff also address relevant backups and ensure a restored backup does not reintroduce information that must remain deleted.

Access, correction, and deletion

You can view your player profile and saved registration on the website. To request access, correction, or deletion of your information, including Epic account information, email themythicarena@gmail.com or contact Mythic Arena staff through our support page. Include your Discord user ID or player name so we can identify the right record. Do not send passwords, sign-in codes, or access tokens. We may ask you to verify control of the relevant account before processing the request.

We handle Epic account-data deletion requests promptly, including requests communicated by Epic. Removing account information may prevent further use of an Epic-based registration until you authenticate again. Where a lawful retention requirement applies to other records, we will explain the limitation and restrict their use. Public match records may be de-identified where appropriate.

You can review or withdraw an application’s authorization in your sign-in provider’s account settings. Withdrawing provider authorization does not itself send us a deletion request; contact us if you also want previously stored information removed.