Privacy policy
AXI-VR is a competitive platform, so a lot of what happens here (teams, matches, standings, honours) is public on purpose. This page covers everything else: what we collect, why, who it goes to, how long we keep it, and what you can ask us to do with it.
Last updated 11 October 2026
Who we are
AXI-VR is run by its platform operators from the United States. In this policy, "we" and "us" means them. We decide what personal data the platform collects and why, which makes us its controller under laws such as the GDPR. For anything on this page, including requests and complaints, email support@axivr.com. A person reads every message.
What we collect
Your account. A username and a password, which we store only as a one-way hash. You can add a Discord tag, a country and an avatar. We do not ask for your email address, your real name or your date of birth.
Discord. If you sign in with Discord or link it to your profile, Discord shares your Discord id, your username and the list of servers you belong to. We do not ask Discord for your email address.
What you do here. Teams, rosters, matches, results, scheduling replies, match reports, display names, avatars, logos and banners. We also keep league records: penalties, moderation cases, support tickets and their transcripts, ban appeals and staff applications, including the ones made through the AXI-VR bot in a league's Discord server.
Purchases. A record of each order: what was bought, the amount, the currency, the date, its status and Stripe's reference for it. Stripe collects your card and contact details on the checkout page. We never receive your card number.
Technical and device information. We record the IP address you sign in from. Your browser keeps a random device token for us, and at sign-in the page works out a short code from your browser's settings and stores a hash of it. We use these only to keep accounts secure and to spot one person running several accounts. Our servers also keep the routine logs any website keeps.
Connected channels. If a league connects a YouTube or Twitch channel, we keep the channel's name and id and an encrypted token that lets us create broadcasts on it. For YouTube we can also read the channel's analytics (watch time and audience figures) to show the league how its broadcasts did.
The broadcast tools. Casters use our broadcast service at vault.axivr.com. For each machine a caster pairs, it keeps the IP address and browser details the machine last checked in from, a record of security events such as sign-ins and refusals with their IP address, the IP address and browser a broadcast licence was accepted from, and a report of the casting setup (whether a camera and microphone are present, canvas size, frame rate, replay buffer) that the league's staff can see, to help a caster get on air. The OBS script and the setup page keep a device key on the caster's machine so it stays paired.
The league assistant. Questions members ask and the answers they get, without recording who asked.
Why we use it, and our legal basis
Running the platform and its competitions: accounts, leagues, rosters, scheduling, results and broadcasts. This is the service you signed up for (contract).
Taking payments and keeping the records the law requires us to keep (contract and legal obligation).
Keeping the platform fair and secure: preventing fraud, cheating and abuse, and enforcing bans and our rules. We may use technical and device information for this. This is our legitimate interest, and yours, in a competition that can be trusted.
Broadcasting and channel analytics, only for channels a league chooses to connect. You can withdraw this at any time by disconnecting the channel.
Answering support requests and contacting you about your account (contract and legitimate interests).
Decisions made automatically
Most decisions here are made by people: league staff and platform operators. A few things happen automatically, and you should know which:
Penalty points are given by staff, but reaching a set total suspends an account automatically for a set time. The highest step is always reviewed by a person and never becomes a permanent ban on its own.
A league's Discord bot can mute, kick or ban someone automatically for flooding a channel or for raid-style joining.
If we switch on VPN screening, a sign-in or registration from an address flagged as a VPN or proxy is refused.
Team ratings and the divisions they decide are calculated from results.
The checks for one person running several accounts only flag a match for a person to look at. They never act on their own. If an automatic decision affects you, you can ask for a person to review it: appeal it to your league's staff, or email us.
Who we share it with
We don't sell your personal information, we don't share it with advertisers, and we don't run third-party analytics or trackers. It leaves the platform only to the services that run it, each of which gets only what its job needs:
DigitalOcean hosts our servers and backups. Stripe processes Store and league payments. Anthropic processes assistant questions, and support tickets for summaries, in leagues that switch those features on. Google (YouTube) and Twitch receive what is needed to broadcast to channels a league connects. Discord handles Discord sign-in and runs the bot in the servers that add it. proxycheck.io checks the IP address of a sign-in, and only if we switch VPN screening on.
We will also disclose information if the law requires it, or where it is needed to protect someone's safety or rights. If AXI-VR is ever sold or merged, your data would move with it under this policy, and we would say so here first.
YouTube and other connected channels
AXI-VR uses YouTube API Services. When a league owner connects a YouTube or Twitch channel, we receive the channel's identity, permission to create and manage the league's live broadcasts and streams on it, and, for YouTube, read access to the channel's analytics. With that permission we set each broadcast's thumbnail and captions, edit the title and description of the league's broadcasts and their recordings, add them to a playlist for the league on the channel (public, unless the league turns the playlist off), and update the channel banner when league staff ask us to. For Twitch we also read the channel's stream key, so a broadcast can start. We do not access watch history, subscriber lists, or videos other than the league's broadcasts. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect a channel at any time from the league's Channel connections page (League admin, Broadcast connections), and you can also revoke AXI-VR's access from Google's security settings or Twitch's connections page. Google's own handling of your data is covered by the Google Privacy Policy.
Where your data is
Your data is stored on servers in the United States, wherever you play from. If you are in the European Economic Area, the United Kingdom or another country with transfer rules, we rely on the standard contractual clauses in our providers' data processing terms for that transfer.
How long we keep it
Your account: for as long as it exists. When you ask us to delete it, we remove your account details.
The public record (results, standings, honours and season history): permanently. It is the league's history, not only yours, the same way a trophy stays engraved.
Security records (sign-in IP addresses, device data, bans and penalties): for as long as we need them to enforce bans and stop ban evasion, which can be after an account is deleted.
Orders: for as long as tax and accounting law requires, which can be up to seven years.
Assistant questions: a league keeps its most recent 200 that staff have not reviewed. Usage counts are deleted after 30 days.
Backups are overwritten on a rolling basis within about two weeks.
Your rights
You can change your display name, avatar and account details anytime from your profile.
Depending on where you live, you can ask us to: tell you what we hold about you and give you a copy; correct it; delete it; restrict or object to how we use it; and give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Californians and residents of other US states with privacy laws have the same rights to know, correct and delete, and we will never treat you differently for using them.
To use any of these, email support@axivr.com with your username. Because we do not hold your email address, we may ask you to confirm the request from your signed-in account or your linked Discord. We reply within one month, or 45 days where US state law sets that period. You can also send a request through someone you authorise to act for you.
Some things stay after a deletion, and the law allows both: the public match record, and the security records described above. If you are not happy with how we handle a request, you can complain to your local data protection authority.
Children
You need to be at least 13 to have an account, or 16 in countries whose law sets it there. We don't ask for a date of birth and we don't verify anyone's age, so we rely on being told. We don't knowingly keep an account for anyone under the minimum age: if you believe one exists, email support@axivr.com and we will look into it and remove it if it's confirmed. A parent or guardian can ask the same way, and can ask to see or delete what we hold about their child. The code of conduct covers how adults are expected to behave around younger players.
Security
Passwords are stored as one-way hashes, channel tokens are encrypted, and every connection to the site is encrypted in transit. Only the platform operators can reach the servers. No system is perfectly secure, and if a breach puts your data at risk we will tell you and the authorities the law requires us to.
Cookies
The site only sets the cookies it needs to work: keeping you signed in, protecting forms and keeping accounts secure. There are no advertising or analytics cookies. The cookie policy explains them.
What's public
Your username, display names, avatar, team, match results, standings and honours are part of the league's public record, and anyone can see them.
Your public profile also shows, to anyone with the link: your Discord tag and country if you have set them, the year you joined, your prediction record, any penalty points while they are active, with the reason and when they expire, and any platform suspension or ban, with its reason.
Do Not Track and Global Privacy Control
We don't sell or share personal information for advertising, and we don't track you across other sites, so there is nothing for these browser signals to switch off here.
Changes
If this policy changes, the new version goes up here with a new date. Significant changes are announced in News before they take effect.