This policy explains what Warhawk Division collects when you use this website, why, who can see it, and what you can do about it. The site is run by Warhawk Division, an unincorporated gaming community run by volunteers ("Warhawk Division", "we", "us"), which is the controller of the personal data described here.
The short version
- We collect only what the site needs to work. There are no ads, no analytics trackers, and no advertising cookies.
- We do not sell your personal data or share it for advertising. We never have.
- You sign in with Discord. We never see your Discord password, your messages, or your friends list.
- This is a public forum. Treat everything you post, upload, or do here as public, and do not post what you want kept private.
- You can download your data or delete your account at any time in your settings.
- Our game servers record kills and deaths for the service record leaderboard. Only signed in members see them, and only staff see teamkills.
1. What we collect
From Discord, when you sign in
- Your Discord user ID, username, display name, and avatar.
- The email address on your Discord account. It is held by our sign in system to identify your account. We do not show it to anyone and we do not send you email.
- Whether you are a member of our Discord server, and which roles you hold there. This sets your role and rank on the site, and any add-on role such as Creator.
- Whether two factor authentication is switched on for your Discord account. Staff and admins must have it.
We do not receive your Discord password, your messages, your friends, or your membership of any other server. We do not keep the access token Discord gives us at sign in.
What you give us
- Profile details: your callsign, bio, timezone, and whether your profile is public.
- An optional Steam ID, if you choose to add it. Your game account is linked through the game itself (see "From our game servers" below).
- Your notification preferences.
- What you post: forum threads and replies (including earlier versions of posts you edit), reactions, reports you file, your answers to operation invitations, images you upload and links to videos you add to the gallery, with their captions and tags, guides and edits you write for the Field Manual (including drafts), and applications to join the staff.
What staff record
- Your rank, unit, and role on the site, and any position you hold on the org chart. The roster shows positions to everyone. If your profile is hidden, your position shows as filled without your name.
- Moderation actions on your account or content, such as a timeout or a removed post.
- Private review notes on a staff application.
- A card on the Community page, if staff feature you as a developer or creator: the name, description, video, and links they enter. Ask staff to change or remove it at any time.
- Briefings that staff write for an operation: orders, map plans, and prep lists. An order shows the callsign and rank of the staff member who wrote it to the members who read it.
- An audit log of staff and account actions.
From our game servers
Our Arma Reforger servers run a mod, WD_ServiceRecord, that sends the site:
- When a player joins: their Bohemia account ID (a long code the game gives every account) and their in-game name.
- When a player dies, or kills someone: who killed whom (a player's Bohemia account ID and name, or "AI"), their sides, how far apart they were, which server, and when. Deaths where AI kills AI are not recorded.
- When you type a link code in game chat: the code, so the site can link that game account to your site account.
This covers everyone who plays on our servers, including players who never sign in to the site. A game account that is not linked to a site account is never shown by name to members. The mod does not record IP addresses, chat (other than a link code), or anything from your computer.
What is collected automatically
- Which threads you have read, which you follow, and your notifications.
- Counters that stop abuse of posting, uploads, search, and similar actions. For signed in users they are tied to your account. For signed out searches they are tied to your IP address. Counters are deleted after 2 days.
- Our hosting provider keeps standard request logs for security and reliability: IP address, browser type, the page requested, and the time. It also runs a firewall that screens automated traffic.
- When the site hits an error, we log the page address and the error message. We do not log cookies or sign in details.
Cookies and browser storage
We use only what is strictly necessary, so there is no cookie banner:
- Sign in cookies that keep you signed in.
- A cookie that remembers which page to send you back to after sign in. It lasts ten minutes.
- Your theme and time display preferences, and the prep items you tick off before an operation, kept in your browser's local storage and never sent to us.
2. Why we use it
| Purpose | Legal basis, where the law requires one |
|---|---|
| Signing you in and running your account | Performing our agreement with you (the Terms of Use) |
| Showing your profile, posts, uploads, and operation answers to the community | Performing our agreement with you |
| Setting your role and rank from your Discord roles | Performing our agreement with you |
| Sending notifications inside the site | Performing our agreement with you. You can mute them in your settings |
| Moderation, the audit log, abuse counters, security logs, and the two factor check | Our legitimate interest in keeping the community and the site safe |
| Answering your requests and complaints | Our legitimate interest, and legal obligations where they apply |
| Optional Steam ID | Your consent. Remove it at any time in your settings |
| Service records from our game servers: the leaderboard, member profiles, and the staff teamkill report | Our legitimate interest in running the community's servers, recognizing players, and moderating play |
We do not use your data for advertising, profiling, or automated decisions that have a legal effect on you, and we do not use it to train AI models.
3. Who can see what
Warhawk Division is a public, community run forum, and you should not expect privacy or confidentiality in what you post, upload, or do in it. The list below describes how the site is built to work today. It is not a promise that anything you post will stay limited to those people.
- Everyone, including search engines: your callsign, avatar, rank, unit, role, bio, and timezone if you set one, your public forum posts, your answers to operation invitations, and gallery images once staff approve them.
- If you make your profile private: your profile page is shown to signed in members only. What you have posted stays public.
- Staff only: reports, moderation records, the audit log, hidden content, and posts in staff areas. Earlier versions of an edited post can be seen by staff and by its author.
- Admins only: staff applications and the notes on them.
- Signed in members (the Verified role): the kills, deaths, and longest kill of members who have linked a game account, on the leaderboard and on their profiles. This includes members whose profile is private. Guests and signed out visitors cannot see them.
- Staff only, from the game servers: teamkills, the full record of deaths, and game accounts that are not linked to anyone.
- Only you: your Steam ID, notification preferences, notifications, and your game link code.
- Only you and staff: guides and edits you have written but that are not published yet. Once a staff member approves one, it is public with your callsign on it as its author or as a contributor.
- Nobody on the site: your email address.
Uploaded image files are stored at web addresses that are hard to guess but not locked. Anyone who has the address of an image can open it, including an image still waiting for approval. Uploaded images are re-encoded, which strips location and camera data from them.
The small number of people who administer the site's hosting and database can technically access everything stored there. They do so only when needed to run or fix the site.
4. Who we share it with
We do not sell personal data and we do not share it for advertising. We share it only with:
- Service providers that run the site for us: Vercel (hosting, request logs, and firewall), Supabase (database, sign in, and file storage), and Discord (sign in, and reading your roles in our server).
- Our Discord server: the site posts operations and announcements there. When you apply to join the staff, a notice with your callsign, the position, and the opening of your answer is posted to a private staff channel.
- Authorities or others, when we must: if the law requires it, or if it is needed to protect someone's safety or to deal with abuse of the site.
- A new operator: if someone else takes over running the community's site, the data moves with it under this policy.
Avatars are loaded from Discord's image servers. A page can include a YouTube video: opening that page loads the player from YouTube's privacy-enhanced address, which tells YouTube your IP address. Links you follow to Discord, the Workshop, BattleMetrics, official publication sites, or a tip page take you to services with their own privacy policies.
5. Where it is kept
Our providers store and process data in the United States and may use other countries. If you are outside the United States, your data is transferred there. Our providers offer standard contractual protections for such transfers.
6. How long we keep it
- Your account and what you post: until you delete it or delete your account.
- When you delete your account: your sign in record, profile, private details, operation answers, reactions, followed threads, notifications, and staff applications are deleted. Guide drafts and edits you sent for review are deleted. Your forum posts, published guides, and gallery uploads stay, with your name removed. Audit log entries stay without a link to you, and one entry records that an account with your callsign was deleted. Ask staff if you want specific posts or images removed as well.
- Removed gallery images: removing an image takes it off the site, but the stored file can remain until staff clear it. Ask staff if you want a file erased.
- Abuse counters: 2 days.
- Service records: kept while the community runs its servers. When you delete your account, your game accounts are unlinked from it and their records stay without your name. Ask staff to delete a game account's records entirely. A link code expires after 15 minutes.
- Hosting logs and database backups: kept by our providers on their own schedules, then deleted.
7. Your choices and rights
In your settings you can edit your profile, make it private, remove your Steam ID, mute notifications, download a copy of your data, and delete your account. You can also remove the site's access in Discord under User Settings, Authorized Apps.
Depending on where you live, the law may give you the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to how we use it, and to withdraw consent. To use any of these rights beyond what the settings page does, send a direct message to a staff member in our Discord server (invite link). We answer within 30 days and never treat you worse for asking. We may need to confirm that the request comes from the account holder.
If you live in the European Economic Area, the United Kingdom, or Switzerland, you can also complain to your local data protection authority. If you live in a US state with a privacy law: we do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use sensitive data for anything beyond running the site.
8. Children
The site is not for anyone under 16, and we do not knowingly collect personal data from children under 13. If you believe a child has signed in, tell staff and we will delete the account.
9. Security
Access to data is restricted row by row in the database, connections are encrypted, staff accounts need two factor authentication, and staff actions are logged. No site is perfectly secure, and we cannot guarantee that a breach will never happen. If one affects your data, we will tell you as the law requires.
10. Changes to this policy
When we change this policy we change the date at the top, and we announce changes that matter on the site or in our Discord server.
11. Contact
For anything about your privacy, send a direct message to a staff member in our Discord server (invite link).