Firebolt

1.1 Account data

When you register, we collect:

• Username (display name) — shown publicly on listings, messages, and your profile
• Password — stored as a one-way hash; we never see or store your plaintext password

You may also optionally provide:

• Email address — used for account verification, password resets, and email-change confirmations; not shown publicly
• Avatar image — resized to a maximum of 256 × 256 px and stored on our servers; shown publicly on your profile
• Other information — such as custom information about yourself, contact information, and your homecity which is stored on our servers; shown publicly on your profile

Legal basis: performance of a contract (account registration and use of the service).

1.2 Listing data

When you post a game listing, we collect:

• Listing title, game system, language, play format (online/in-person/hybrid), payment arrangement, number of seats, and a description
• Scheduled game date and time
• Location (latitude and longitude) — optional; used to display a map pin so players can see the approximate venue. This data is publicly visible on the listing.

Legal basis: performance of a contract (providing the matchmaking service).

1.3 Event registration without an account

Some events allow players to register for games without creating an account. When you register this way, we collect:

• Name (required) — the name you provide to appear on the player list. Player lists are public until 14 days after the event ends (see section 3); you may use a nickname or alias.
• Email address (required or optional, depending on the event) — required when the event lets players cancel their own registrations, so that we can email you your cancellation links when you ask for them; otherwise it is not asked for. An event organizer who registers you on your behalf may also enter it. It is also used to warn you when you register for more than one game at the same event. It is never shown publicly.
• Additional information (optional) — free text you provide in response to a prompt set by the event organizer (e.g. a phone number or dietary restrictions). The event organizer may pass this on to the game master of the game you registered for — leave it empty if you do not wish to be contacted.

Your email address is deleted automatically 14 days after the event ends (the event's end date, or its start date if no end date is set). After that, only the name you chose remains.

Your name, your email address and any additional information you provide are shared with the event organizer — a third party who manages the event. Site administrators and moderators can see them too. The event organizer may use this data to contact you or manage event logistics. You should direct any questions about how the event organizer handles your data to the organizer directly.

The event organizer may also hand the additional information for a single game to the game master who runs it, so that the game master can contact you about that game. This is a deliberate, per-game action by the organizer; it is recorded, and the organizer can withdraw it at any time. Game masters are asked to use the information only to contact you about the game they run, to ask your permission before contacting you about anything else, and to delete it once the event is over.

Additional information stops being displayed to everyone — the game master, the event organizer and site staff alike — 2 hours after the event ends, and is deleted from our database 14 days after the event ends, together with your email address.

firebo.lt can relay a request regarding your data (removal, correction, etc.) to the event organizer on your behalf, but we cannot guarantee that such a request will be honoured by the organizer.

Legal basis: performance of a contract (event registration).

1.4 Private messages

Messages you send to other users are stored in our database. You can delete messages you have sent. Message content is not shown publicly and is only accessible to the sender and recipient.

Legal basis: performance of a contract.

1.5 Analytics (server-side)

We run our own analytics system — we do not use any third-party tracking service.

For each visitor we store:

Legal basis: legitimate interests (security, spam/bot prevention, understanding site usage). We balance this against your privacy interests by hashing IP addresses rather than storing them in plain text.

1.6 Contact form

When you use the contact form, we collect your name, email address, and message text. This information is forwarded to the site administrator by email and is not stored long-term in the database.

Legal basis: legitimate interests (responding to user enquiries).

1.7 Session cookie

After you log in, we set a session cookie that keeps you authenticated for up to 30 days. This cookie contains a session token — not personal data in itself — and is used only to maintain your login state. No advertising or tracking cookies are set.