The short version
BWRealm is a community fansite. We collect the minimum we need to run an account-based forum and mod library. We do not sell your data, run third-party advertising, or share your information with brokers. You can delete your account at any time.
What we collect
When you create an account
- Username — public, shown next to your posts and mods.
- Email address — private, used for password resets and account-related notifications.
- Password — stored hashed (bcrypt). We never see or store the plain text.
- Optional profile fields you fill in: avatar, bio, location, website, Discord handle.
When you sign in with Discord
We receive your Discord ID, username, and avatar URL from Discord's OAuth response — only what you approve in the consent screen. We do not read your messages, see your servers, or post on your behalf.
When you use the site
- A session cookie so you stay logged in (HttpOnly, secure, ~30 days).
- Server logs: IP address, user-agent, request path, timestamp. Kept for ~30 days for abuse prevention and debugging.
- An audit log of moderator actions (bans, removals) for accountability.
What we do NOT collect
- No third-party advertising trackers.
- No analytics SDKs that fingerprint you.
- No social-media share pixels.
- No payment information — the site is free.
How we use it
- To run your account and let you post, upload, comment, and react.
- To send notifications you've opted into (replies, mod approvals, mentions).
- To moderate the site and enforce our Terms of Service.
- To debug problems and prevent abuse.
Cookies
We use a single first-party session cookie (bwrealm_session) to keep you logged in. It is HttpOnly, Secure, and SameSite=Lax. You can clear it any time from your browser, which logs you out. We do not use third-party cookies.
File uploads
Mods, screenshots, and avatars you upload are stored on Cloudflare R2 (an S3-compatible object store). Public files are accessible via their URL. Do not upload anything you would not want publicly accessible.
Sharing
We share data with third parties only in these limited cases:
- Infrastructure providers — PostgreSQL, Redis, Cloudflare R2 — purely to host data on our behalf, under their own data-processing agreements.
- Discord — only if you connect your Discord account, and only what OAuth requires.
- Legal requests — if compelled by valid legal process. We will push back on overly broad requests where we can.
Retention
- Account data is kept for as long as your account exists.
- When you delete your account, your profile is anonymized within 30 days. Posts and mods may remain — see below.
- Server logs are retained for approximately 30 days.
Your rights
You can:
- Access — view all your posts, mods, and profile data from your dashboard.
- Correct — edit your profile and most of your posts.
- Delete your account — from settings. Your username and profile are anonymized; your public contributions (forum posts, mods) may stay up under an anonymous handle so threads remain coherent.
- Export — request a copy of your data via contact.
If you are in the EU/UK, you also have rights under GDPR/UK-GDPR including the right to lodge a complaint with your local data-protection authority.
Children
BWRealm is not intended for users under 13. If you believe a child has registered, please contact us and we will remove the account.
Changes
If we change this policy in a meaningful way, we will update the “Last updated” date and post a notice in the forum. Continued use after changes means you accept the new policy.
Contact
Questions, requests, or concerns? Reach us through the contact page or via Discord. For copyright issues, see our DMCA policy.