1.Data you give us
Account data: your username, e-mail address and password. Passwords are stored only as a salted hash; we never see them in plain text.
Profile data you choose to add: avatar, signature, user title, tagline, Telegram and Discord usernames, profile background, cover image, music link and other optional fields.
Content: posts, threads, polls, listings, paid content, vouches, reputation comments, shoutbox messages, private messages, and messages in groups and channels.
Messages you send us (for example support requests or reports).
2.Data collected automatically
IP addresses: we record the IP address you registered from, your most recent IP address, and the IP address of each post you make. We use them for security, to fight spam, fraud and multiple accounts, and to answer lawful requests.
Country: when you first visit, your IP address is matched against a geolocation database kept on our own server (DB-IP) to choose the Site's language. The country is not stored; only the language you end up with is remembered.
Browser language (the "Accept-Language" header), used for the same purpose.
Usage and technical data: pages viewed, the time of your last visit and activity, who is online, sessions, read markers for threads and forums, and server logs (IP address, date and time, requested page, browser identification) kept for security and troubleshooting.
3.Payments and credits
Credit balances and a ledger of every credit movement on your account (deposits, payments, fees, rewards, withdrawals), kept to run the credit system and to keep accurate books.
Deposits: the deposit addresses assigned to you, transaction hashes, coins, networks, amounts and their US dollar value as reported by our payment processor.
Withdrawals: the amount, network, destination address, optional memo, status and transaction hash.
Upgrades: the plan bought, amount, payment reference and status.
We do not receive or store card or bank details. Blockchain transactions are public by nature: anyone can see transfers to and from an address on the blockchain, independently of us.
4.Cookies and local storage
Strictly necessary cookies: your session (sid), the login cookie that keeps you signed in (mybbuser), activity markers (mybb[lastvisit], mybb[lastactive]), read markers, login attempt counters and the form security key.
Preference cookies: your language (mybblang) and collapsed sections.
Referral cookie (hv_ref): remembers for 30 days who invited you, so they can be credited if you register.
Notice cookie (hv_flash): carries a confirmation message to the next page for about a minute.
Local storage in your browser: small preferences such as the selected tab, whether the shoutbox is open, and unsent post drafts. This never leaves your device.
We do not use advertising or cross-site tracking cookies, and we do not use analytics services that profile you.
5.Why we use your data and on what legal basis
To provide the Site and your account, publish your content, deliver messages, run credits, deposits, withdrawals, paid features, raffles, referrals and rewards — because it is necessary to perform our contract with you (these Terms).
To keep the Site secure, prevent spam, fraud, scams, multiple accounts and abuse of rewards, moderate content and enforce the Rules — on the basis of our legitimate interest in a safe community, and yours.
To keep financial records and respond to lawful requests from authorities, including anti-money-laundering and sanctions obligations where they apply — to comply with legal obligations.
To remember your preferences such as language — on the basis of our legitimate interest in showing you the Site in a language you understand; you can change it at any time with the EN / RU switch.
To send you account e-mails (activation, password resets, notifications you enable) — to perform our contract with you. You can turn optional e-mails off in your User CP.
6.Who can see your data
Other members and visitors see what is public by design: your username, profile, public posts, reputation, vouches, awards and online status (unless you choose to be invisible). Your credit balance is never shown to other members.
Members of a group or channel see the messages posted in it. The people you message privately see those messages.
Staff (administrators and moderators) can see account details including IP addresses, and may read private messages and chats when investigating reports, fraud, abuse or legal requests.
7.Service providers we share data with
Hosting: our servers are run by our hosting provider (Hostinger), which stores the Site's data on our behalf.
OxaPay (crypto payment processor): receives the information needed to generate your deposit addresses, take upgrade payments and send your withdrawals (an internal reference to your account or order, the plan, networks, amounts and destination addresses). Their privacy policy applies to their processing.
Content delivery: the Site loads fonts from Google Fonts and icons from cdnjs (Cloudflare). When your browser downloads them, these providers receive your IP address and browser information.
Media you or other members link to (for example profile backgrounds, images or music hosted elsewhere) is loaded from those third-party hosts, which then see your IP address.
Authorities: we may disclose data when the law requires it, to answer a valid legal request, or to protect the rights, property or safety of the Site, our members or others.
We do not sell your personal data and we do not share it for advertising.
8.International transfers
Our service providers may process data in other countries. Where data protection law requires it, we rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
9.How long we keep your data
Account and profile data: while your account exists. When an account is deleted, its personal data is removed or anonymised, except as described below.
Public posts may remain visible, no longer linked to an account, when deleting them would break discussions other members took part in; you can ask us to remove specific content.
Credit ledger, deposit, withdrawal and payment records: kept for as long as required for accounting, fraud prevention and legal obligations (generally 5 years after the transaction), even if the account is closed.
IP addresses: the ones linked to your account are deleted with it; the one recorded with each post stays with that post while it exists.
Server logs: up to 14 days. Backups: up to 14 days, after which they are deleted.
Records of bans, fraud and abuse: kept as long as necessary to prevent the same person from returning and to defend legal claims.
10.Your rights
Depending on the law that applies to you (for example the GDPR in the European Union), you may have the right to access your data, have it corrected, have it deleted, restrict or object to its use, receive a copy in a portable format, and withdraw consent where we rely on consent.
You can see and edit most of your data in your User CP. To exercise any other right, write to admin@bratan.gg from the e-mail address on your account; we may ask you to confirm your identity. We answer within one month.
Some data cannot be deleted while we need it for the reasons above (for example financial records or fraud prevention); we will tell you if that is the case.
You have the right to complain to the data protection authority of the country where you live or where you think your rights were breached.
11.Security
We protect your data with encrypted connections (HTTPS), hashed passwords, restricted server access, firewalls, protection against repeated login attempts, separation of secrets from the website files, daily backups and regular updates. Payment keys are kept outside the database.
No system is completely secure. Use a strong, unique password. If we become aware of a breach that puts your rights at risk, we will inform you and the competent authorities as required by law.
12.Children
The Site is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact admin@bratan.gg and we will close it.
13.Changes to this policy
We may update this Privacy Policy; the date at the top shows the latest version. Material changes will be announced on the Site.
14.Contact
Controller: Bratan.gg. Privacy questions and requests: admin@bratan.gg.