Privacy Policy
This policy explains what personal data Third Infantry Division collects, why we use it, who else receives it, and what you can do about it.
Who is responsible for your data
Battalion Leadership decides why and how your personal data is used on this website.
- Contact
- 3rdivisioninfantry@gmail.com
What we collect
This is the personal data this website stores about you, why it is needed, and how long it is kept.
- Your account - Contract
- Used to create your account, sign you in, and show you to other members. This covers your username, your email address, your password (stored hashed), your display name, avatar, signature, language, timezone and any roles or badges you have. Kept for as long as your account exists. Accounts that are never verified are removed after two days.
- What you post - Contract
- Used to run the forum and deliver your messages. This covers topics, comments, reactions, private messages and files you upload. Kept after you delete your account, but no longer linked to you.
- How you use the site - Legitimate Interests
- Used to keep track of what is new for you, and to show other members whether you are online. This covers which topics you have read, what you follow, when you were last active and your notifications. Kept for as long as your account exists. Notifications are removed once seen, and after a year at the latest.
- Technical information - Legitimate Interests
- Collected automatically to keep this website secure and available, and to diagnose errors. This covers your IP address and the browser you use. Kept in server logs, normally for a few weeks.
- Audit logs - Legitimate Interests
- Records changes made on this website, including your own, so that they can be reviewed later. This covers what was changed, and by whom. Kept for one year.
- Linked accounts - Contract
- Stored when you choose to sign in using an account from another service. This covers your account identifier at that service and your username there. Kept until you unlink the account or delete your account.
Who else receives your data
These services receive personal data because of features this website uses.
- forumify
- Hosts this website and delivers its email. They receive everything stored on this website.
- Google reCAPTCHA
- Checks that sign-ins and registrations come from a person rather than a bot. They receive your IP address, the browser you use and signals about how you interact with the page.
- Discord
- Signs you in when you choose to use this service. They receive the fact that you are signing in to this website.
Google reCAPTCHA and Discord are based outside the European Economic Area, so using those features transfers your data outside the EEA.
Cookies
Cookies are small files your browser stores. This website uses these:
| Cookie | What it does | How long it lasts |
|---|---|---|
3rdinf-us-sessid |
Keeps you signed in while you browse. | Session |
REMEMBERME |
Keeps you signed in between visits when you ask to be remembered. | 7 days |
forumify_theme |
Remembers whether you chose the light or dark theme. | 1 year |
_GRECAPTCHA |
Tells people and bots apart. Set by Google. | Provider Decides |
Deleting your account
When your account is deleted, your profile, preferences, follows, reactions and notifications go with it. Topics, comments and messages you wrote stay, so that conversations other members took part in remain readable, but they are no longer linked to you.
Your rights
Depending on where you live, you have some or all of these rights:
- Ask for a copy of the personal data we hold about you.
- Correct anything that is wrong. Most of it you can change yourself in your account settings.
- Ask us to delete your data.
- Ask for your data in a portable format.
- Object to, or ask us to limit, uses based on our legitimate interests.
- Withdraw consent you gave earlier, without affecting what happened before.
- Use any of these rights without being treated differently for it.
To use any of these rights, email 3rdivisioninfantry@gmail.com. We reply within one month, or within 45 days for requests made under Californian law.
We do not sell your personal data, and we do not share it for advertising.
Children
This website is not meant for anyone under 15. If you think a child has created an account, contact us and we will remove it.
Keeping your data safe
Passwords are stored hashed. Access to member data is limited by roles and permissions, all actions are logged for auditing, and repeated sign-in attempts are rate limited.
When this policy changes
What this website collects, and who else receives it, follows the features it uses. If one is added or removed, such as a plugin or a new way to sign in, this policy changes with it straight away and without a separate announcement. Re-read this page if you want to be certain what applies today.