Privacy Policy

What data we collect, why we store things like IP addresses, how long we keep them, and what you can ask us to do.

Last updated 27 October 2026

Who we are

California State Roleplay ("CSRP", "we") is a volunteer-run ER:LC roleplay community based in the Netherlands. We are responsible for the personal data described on this page. This policy follows the General Data Protection Regulation (GDPR).

What we collect

We only collect what we need to run and protect our community:

Discord account data: your Discord user ID, username, avatar and your roles in our Discord server, when you use our bot or log in to this website.
Roblox data: your Roblox username and user ID when you play on our ER:LC server, as provided by the ER:LC API.
Moderation records: warnings, infractions, bans, promotions and retirements, including the reason, the staff member involved and the date.
Technical data: your IP address, browser type and the time of your visit or login.
Content you send us: suggestions, tickets, appeals and messages in our Discord server.

Why we store IP addresses

We store IP addresses to keep our community safe. Specifically, to:

detect and block people who create new accounts to get around a ban (ban evasion);
enforce global bans that apply to all CSRP services at once, including features we are building for this;
protect our website, bot and staff area against abuse, spam and attempts to break in;
investigate serious incidents, such as threats, doxxing or raids.

How we handle IP addresses

Our legal basis is our legitimate interest in keeping the community safe and enforcing bans (Article 6(1)(f) GDPR). We weighed this against your privacy, which is why we limit what we do:

IP addresses are only visible to a small number of senior staff and developers.
We never use them to find out who or where you are, and we never publish them.
We do not sell them or share them with other communities.
Normal visit and login records are deleted after 90 days.
If an IP address is linked to a ban, we keep it for as long as the ban is active, and delete it at the latest 12 months after the ban ends.

Why we use your other data

To run our services: logging you in, showing your profile and giving staff the right access (needed to provide the service).
To moderate fairly: keeping records so decisions are consistent and appeals can be reviewed (legitimate interest).
To show live server information on this website (legitimate interest).

How long we keep data

Moderation records are kept while you are part of our community and for up to 24 months after the last record, so repeated behaviour can be recognised. Login data is removed when you no longer have access to the staff area, unless it is part of a moderation record.

Cookies

This website does not use advertising or tracking cookies. When you log in, we use one essential cookie to keep you logged in. You can delete it at any time by logging out or clearing your browser data.

Your rights

You have the right to see the data we hold about you, to correct it, to have it deleted, to limit how we use it and to object to how we use it. Some data, such as records linked to an active ban, may be kept when we have a valid reason, and we will explain why.

To use your rights, open a ticket in our Discord server. We respond within one month. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Younger players

Many of our players are young. We collect the minimum data needed and do not use it for anything else. Parents or guardians can contact us to see or delete their child’s data.

Changes to this policy

We will update this policy when we change how we use data. The date at the top of this page shows the latest version, and important changes will be announced in our Discord server.