Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains what information this service may collect, why it may be used, who may access it, and how to contact the operator with privacy-related questions.

Who controls this data

For the purposes of this service, the operator of the service acts as the data controller for the personal data described in this policy.

Privacy contact: skap@skap.uk

What data may be collected

This service may collect and store the following categories of data:

• Account data, such as usernames, hashed passwords, account access level, clearance level, and account creation time.
• Authentication and session data, such as session tokens, session state, and login attempt tracking data.
• Watchlist and moderation data, such as subject identifiers, usernames, group names, reasons, timestamps, and who created or updated records.
• Internal abuse records, including records used for moderation, investigations, and enforcement decisions, such as subject identifiers, usernames, notes, evidence references, tracking history, and related operational data.
• Search and activity records, such as searches performed through the service, search type, and timestamps.
• Operations and case-management records, such as operation names, descriptions, status, folders, notes, chat messages, evidence metadata, membership information, suspects, and internal audit or history events.
• Subject intelligence records, including titles, notes, content, author or editor identity, and update times.
• Tracking and history data, such as presence checks, game or service history, place or universe identifiers, session start and end times, and group snapshot information where applicable.
• Tagging and classification data, such as internal tags, codenames, descriptions, creator identity, and related metadata.
• Technical and server data, such as IP addresses, browser or device information, cookies used for authentication, timestamps, and web server access logs.

How data is used

Data may be processed for purposes including:

• operating and securing the service;
• authenticating users and managing access permissions;
• recordkeeping, moderation, investigations, and enforcement decisions;
• maintaining internal operational records;
• reviewing abuse, safety, or policy issues;
• debugging, auditing, and improving the service.

Legal basis for processing

This service may process personal data where it is necessary to operate the service, provide access to authorised users, maintain security, investigate abuse, enforce service rules, keep internal records, or pursue legitimate administrative and operational interests.

Who may access the data

Data may be accessible to authorised operators, administrators, moderators, or other authorised users of the service, depending on their role, permissions, and clearance level.

Evidence and external links

The service may store metadata and references relating to evidence, including labels, descriptions, and external URLs. The service may not host all referenced files directly, but references submitted through the service may still be treated as operational or moderation-related records.

Cookies and session data

This service may use cookies or similar technologies that are necessary to maintain login sessions, authenticate users, and support core site functionality.

Retention

Retention periods may vary depending on the type of data and the reason it was collected. Current intended retention periods include:

• Account data: until account deletion.
• Session and authentication logs: 90 days.
• IP and server logs: 90 days.
• Abuse and moderation records: retained while relevant to enforcement and community safety.
• Banned-user records: retained as long as necessary to prevent ban evasion.

Other records may be retained for as long as reasonably necessary for operational, administrative, moderation, security, investigative, or legal purposes.

Data sharing

Data is intended primarily for internal use within the service. It may be accessible to authorised users based on role, permission, and clearance. Data may also be disclosed where reasonably necessary for security, abuse review, legal compliance, or protection of the service and its users.

Security

Reasonable technical and organisational measures may be used to help protect stored data. However, no system can be guaranteed to be completely secure.

Deletion requests

You may request deletion of your personal data by contacting skap@skap.uk. Deletion requests will be reviewed and, where applicable, acted on within a reasonable period, normally within 30 days.

Some information may be retained where necessary for security, abuse prevention, enforcement, recordkeeping, legal compliance, or other legitimate operational reasons.

Your rights

Depending on your circumstances and applicable law, you may have rights to request access to your personal data, request correction of inaccurate data, request deletion or restriction of certain data, or object to certain processing.

You may also have the right to raise a complaint with the UK Information Commissioner's Office if you believe your personal data has been handled unlawfully.

Important note

This service is not a law enforcement body, public authority, or government agency. Any moderation, abuse review, investigation, or enforcement carried out through this service is conducted privately for service safety, moderation, and enforcement purposes only.

This may include information submitted by users or collected from public or external online sources where relevant to moderation, abuse review, or enforcement.

Your privacy questions

If you have privacy-related questions, requests, or concerns about this service, contact: skap@skap.uk