Privacy Policy

1. Overview

This policy explains what personal data refunded.vip collects, why, how long we keep it, and the rights you have over it. We aim to collect as little as possible.

2. What we collect

• Account data: username, email address, password (stored only as an Argon2id hash — never in readable form), join date, and the invite code used.
• Profile data: anything you choose to add — avatar, banner, accent colours, and comments you post.
• Security data: session records, IP address and browser user-agent at sign-in, rate-limiting counters, and — if you enable two-factor authentication — an encrypted authenticator secret and hashed recovery codes.
• Support and moderation data: tickets you open, reports you file or that concern you, warnings, and bans.
• Administrative logs: a record of staff actions, used for accountability.

We do not use advertising trackers or third-party analytics, and we do not sell personal data. We do not store payment card details.

3. Why we process it (legal bases)

• Contract: to create and operate your account and provide Premium features you have paid for.
• Legitimate interests: to keep the community safe — preventing fraud, abuse, ban evasion, and unauthorised access — and to keep moderation records that make decisions reviewable.
• Legal obligation: where we must retain or disclose information by law.
• Consent: for optional things you choose to add, such as a profile picture or comments. You can withdraw this by removing the content.

4. Cookies

We set one cookie, rvsession, which identifies your signed-in session. It is HttpOnly, Secure, and SameSite=Lax, and is strictly necessary for the site to work — so no cookie banner is required. We use no advertising or analytics cookies. Clearing it signs you out.

5. Who we share it with

Your username, user ID, join date, roles, profile styling, comments, and inviter are visible to other members by default. Setting your profile to private in your settings limits this to your username and join date.

Your email address is never shown to other members. We share data only with our hosting provider (which stores it on our behalf), our outbound email provider (to deliver verification, security and support messages), and law enforcement where legally required.

6. How long we keep it

• Active accounts: for as long as the account exists.
• Deleted accounts: your account is deactivated immediately and hidden from other members. Personal data is erased after a 30-day grace period, during which you can ask staff to restore it.
• Moderation records: reports, warnings, and bans are retained in de-identified form after deletion. This is a legitimate interest — it prevents banned members from wiping their history simply by re-registering.
• Sessions and security tokens: deleted automatically once expired.

7. Your rights

If you are in the EU, EEA, or UK you have the right to access your data, correct it, erase it, restrict or object to processing, and receive a portable copy. Most of this is self-service: your settings page lets you view and edit your data, change your email, and delete your account.

For anything else, open a support ticket. We aim to respond within 30 days. You also have the right to complain to your local data protection authority.

8. How we protect it

Passwords are hashed with Argon2id. Session and verification tokens are stored only as HMAC digests. Two-factor secrets are encrypted at rest with AES-256-GCM. All traffic is served over HTTPS. Sensitive actions require re-entry of your password, and we rate-limit authentication endpoints against brute force.

9. International transfers

Our infrastructure is located in the EU. Where a provider processes data outside the EEA, we rely on the appropriate safeguards required by law.

10. Children

The Service is not directed at children under 16. If you believe a child has registered, contact staff and we will remove the account.

11. Changes

We will announce material changes to this policy in the community and update the date above.