Legal
Privacy Policy
Last updated 7 September 2026
What we collect, why we collect it, how long we keep it, and what you can make us do with it. Written to be read rather than survived. If any of it is unclear, ask and we will answer plainly.
Who is responsible for your data
CUPIDCOACH LLC ("Iron Curtain", "we"), a limited liability company formed in the State of Wyoming, United States, is the data controller for the personal data described here. Reach us at support@ironcurtains.net, by phone on +1 775-380-0974, or by post at 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States.
We are based outside the UK and the EEA, and we have players in both. Where the UK GDPR or the EU GDPR applies to what we do with your data, we apply it — the rights set out below are available to you wherever you live, not only where the law compels them.
Payments are processed by Paddle.com Market Ltd, which is the merchant of record for every purchase and an independent controller of the payment data you give it. We never receive or store your card number. Paddle's own notice is at paddle.com/legal/privacy.
What we collect, and why
Your account
Email address, display name, password (stored only as a salted hash — we cannot read it), and optionally a country, a short biography and an avatar you upload. We need these to give you an account, sign you in, and show you to other players.
How you play
Match results, ratings, the maps and settings you played, and recordings of your matches — the commands issued, the replay, and the network traffic of the match itself. These exist so ladders can be ranked, so a disputed result can be settled with evidence rather than argument, and so matches can be watched back. Replays are visible to other players. That is what they are for.
Technical and anti-abuse data
This is the part most policies bury, so we will be direct. To run matches and to keep the ladder honest we collect and store:
- Your IP address, and latency measurements from your machine to our relay servers, so your match is routed through the nearest working one.
- A hardware identifier derived from your computer, which includes a network adapter (MAC) address. With IP address it is how we detect one person running several accounts on a ranked ladder. It is never used for advertising and never sold.
- A machine profile — the specification of the PC that played, such as processor, memory and graphics device — and the version of the client you are running.
- Diagnostic files produced when a match fails: engine logs, desynchronisation reports and, where the game crashed, a crash dump. A crash dump is a snapshot of the game's memory at the moment it failed, and can incidentally contain other data that was in memory at the time.
Our lawful basis for this category is legitimate interests: running a competitive service that works, and preventing the cheating and multi-accounting that would make ranked play worthless. You may object — see Your rights — but we cannot offer ranked play without it.
What we do not do
We do not sell your data. We use no advertising or tracking cookies. We do not profile you for marketing. We do not read private messages for any purpose other than acting on a report you or another player makes.
Who we share it with
Only where it is necessary to run the service: our hosting and relay providers, who process data on our instructions and nothing else; Paddle, for payments; and law enforcement where we are legally required to. Your display name, rating, match history and replays are visible to other players by design.
Our servers are in Europe, we are established in the United States, and relay servers that carry match traffic are in several regions because a player's connection has to reach one near them. So your data is transferred internationally by design — a match between continents cannot work any other way. Match traffic passing through a relay is not retained there after the match.
How long we keep it
- Account data — while your account exists, and briefly after deletion where we must keep a record, for example to stop a banned account returning the same day.
- Match results and ratings — indefinitely, because a ladder is a historical record. They become pseudonymous once an account is deleted.
- Replays — rated matches are retained; unrated matches are deleted automatically shortly after upload unless someone bookmarks them.
- Diagnostic files and crash dumps — kept only as long as needed to investigate the failure, then deleted.
Your rights
You have the right to obtain a copy of your data, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Exercise any of them by writing to support@ironcurtains.net. We respond within one month. We give every player these rights, wherever they live.
Deleting your account removes your profile, email address and hardware identifier. Match results stay in the ladder record, with your account no longer attached to them.
If you think we have handled your data badly, tell us first — we would rather fix it. If you are in the UK or the EEA you also have the right to complain to your national data protection authority, and nothing here asks you to come to us first before doing so.
Children
Iron Curtain is not intended for children under 16. We do not knowingly collect their data and will delete an account promptly if we learn it belongs to a child under 16.
Security
Traffic to our services is encrypted in transit. Passwords are stored only as salted hashes. Access to production data is limited to the people who operate the platform. No service is perfectly secure, and we will tell you promptly if a breach affects you.
Changes
If we change this policy in a way that materially affects you, we will say so on this site and in the client before the change takes effect.