Privacy Policy
By connecting to and using the services provided by C&C:Online, you agree to the privacy policy outlined below.
C&C:Online is a community-operated online multiplayer service for supported Command & Conquer games.
C&C:Online only collects data necessary to operate, maintain, secure, and improve the service. User data is never sold under any circumstances and is never intentionally shared with third parties outside of the processors and infrastructure providers listed below.
Primary infrastructure and data storage are hosted within the European Union where possible.
Reasonable technical and organizational measures are taken to protect stored data. However, no online service can guarantee absolute security.
Users may request a copy of their stored personal data, request correction of
inaccurate data, or request deletion of their information by contacting:
privacy[at]cnc-online.net
Certain records may be retained where necessary for fraud prevention, ban enforcement, security, legal obligations, or backup integrity.
Data Collected
The following persistent user data may be stored by C&C:Online:
- Session ID
- A unique session identifier used to communicate with C&C:Online services.
- IP Address
- IP addresses used to register and/or log in to C&C:Online. These are used for network connectivity, security, troubleshooting, and ban enforcement purposes.
- User ID
- A unique identifier assigned to the user's C&C:Online account.
- Account Type
- A value indicating which authentication provider was used, such as Steam, Discord, or GameReplays.
- Steam ID
- The user's numeric Steam identifier, if logging in through Steam.
- Discord ID
- The user's numeric Discord identifier, if logging in through Discord.
- GameReplays ID
- The user's numeric GameReplays identifier, if logging in through GameReplays.
- Display Name
- The username or display name associated with the connected account provider at the time of login.
- User Statistics
- Gameplay statistics generated by supported games, including wins, losses, rankings, favorite factions, match history, and related gameplay information.
- Crash Dump Files
- Technical crash information generated by the game or launcher software to help diagnose and resolve crashes or software issues. Crash dumps may contain limited technical system information related to the state of the application at the time of failure.
- Connection Outcomes
- Diagnostic information relating to whether peer-to-peer or multiplayer connections succeeded or failed. This information is used to improve matchmaking, compatibility, and future network improvements.
- Service Logs
- Authentication logs, server logs, API logs, and other operational logs may be collected automatically for security, abuse prevention, troubleshooting, and service maintenance purposes.
All other temporary operational data, such as active lobbies and active match listings, is considered non-persistent and is automatically removed when no longer required for service operation.
Legal Basis for Processing
C&C:Online processes user data for one or more of the following purposes:
- Operation of multiplayer and online services
- Authentication and account management
- Security, fraud prevention, and ban enforcement
- Service stability and troubleshooting
- Improvement of connectivity and gameplay experience
Where applicable under European data protection law, processing is based on legitimate interest and the necessity of providing the requested online service.
Data Retention
Data is retained only for as long as reasonably necessary to operate and protect the service.
Retention periods may vary depending on the type of data, operational requirements, security concerns, legal obligations, and abuse prevention needs.
Users may request account and data deletion at any time, subject to operational, legal, or security-related retention requirements.
Third-Party Data Processors
The following third-party providers may process or transmit data through infrastructure used by C&C:Online:
- Cloudflare
- Content delivery, DDoS protection, and network infrastructure.
- HEZIO Technology Limited & Cosmicguard
- Server hosting and infrastructure services.
These providers may process technical data as necessary to provide their services to C&C:Online. Data is not sold or intentionally disclosed to these providers beyond operational necessity.
Children's Privacy
C&C:Online is not directed toward children under the minimum digital consent age required by applicable local laws.
Changes to This Policy
This privacy policy may be updated periodically to reflect operational, legal, or technical changes. Continued use of C&C:Online services after changes are published constitutes acceptance of the updated policy.