Privacy Policy

This explains what personal information L4D2 Rebirth collects, why, who we share it with, how long we keep it, and your choices. We don't sell your personal information, don't share it for targeted advertising, and don't show ads.

1. Who is responsible

L4D2 Rebirth runs L4D2 Rebirth and is responsible for your personal information (the "data controller" under EU/UK law). Contact: email support@l4d2rebirth.com or message a staff member in our Discord. We have not appointed an EU/UK representative or data protection officer, as our processing is small-scale.

2. What we collect

• From Steam, only when you sign in or play: your SteamID, Steam name, avatar and profile link; and, for fair-play checks, public account info (account age, level, Left 4 Dead 2 playtime, VAC/game-ban status, whether your profile is private). We never receive your Steam password.
• From Discord, when you link it: your Discord ID, username and avatar, and whether you're in our server. We ask Discord to add you to our server. We don't read your messages outside our server.
• Gameplay: matches, teams, results, ratings, in-game stats, match replays and demos, map votes, endorsements.
• In-game chat during matches (visible to staff only).
• Moderation: reports you make or that are made about you, warnings, bans, appeals, and your reliability record (finished matches, leaves, no-shows, missed ready checks).
• Verification and one-account checks: your game's language setting, the country your connection comes from and whether it looks like a VPN or proxy (checked with proxycheck.io), a random ID stored in your browser, and a scrambled one-way code (hash) made from your IP address. We don't keep your raw IP address for these checks; ordinary server logs may contain it briefly.
• Supporter: whether you're subscribed, until when, Tebex's subscription reference and your agreement to auto-renewal. No card or bank details; Tebex collects those.
• Things you choose to add: linked Twitch/Kick channels, banner and name-style choices, team names and mottos, coaching notes, clips, and what you write in reports, appeals or requests.
• Records of agreement: when you agreed to the Rules, Terms and auto-renewal, and which version.
• No biometrics: we don't collect face scans, fingerprints, voiceprints or any other biometric identifiers, and we don't record team voice chat.
• Technical: a sign-in session cookie, and basic server logs (IP address, browser, pages requested, errors) used for security and fixing problems.

3. Why we use it (and our legal bases)

We don't use your information for marketing, and we never use Steam data for unsolicited marketing.

4. What other players can see

Public: your Steam name and avatar, profile link, rank, rating, match history and stats, banner, medals and badges, team memberships, and active bans. Staff only: chat logs, reports, verification and account-check data, notes and appeals.

5. Who we share it with

Only service providers we need to run the service, and only what they need:

• Valve/Steam (sign-in and public profile data) and Discord (account linking, roles, bot messages).
• Tebex (subscription payments; they act as seller of record and have their own privacy policy).
• proxycheck.io (receives your IP address to check for VPNs).
• Twitch/Kick (only if you link a channel; their embedded players on our Streams page load from their servers).
• Our hosting provider (servers and backups), Cloudflare (domain name system) and Google Fonts (font files; your browser requests them from Google).

We may also disclose information if required by law, to enforce our terms, or to protect someone from serious harm, and to a successor if the service is transferred (they must honour this policy). We do not sell or "share" (for cross-context behavioural advertising) personal information, and haven't in the past 12 months.

6. Where it is stored

Our servers and backups are in Canada, and we store Steam data there only. Some providers above may process data in other countries. If you're in the EU/UK, your data is transferred to Canada because that's where we run the service and it's necessary to provide it to you; our providers use their own safeguards (such as Standard Contractual Clauses) for their processing.

7. How long we keep it

• In-game chat logs and IP-based codes: 90 days.
• Sign-in sessions and server logs: up to 30 days.
• Database backups: 14 days.
• Account, gameplay and subscription data: while your account exists. After deletion we keep only what we need: match results (anonymised, because other players' ratings depend on them), records of bans to stop ban evasion, and payment and consent records for as long as tax or consumer law requires.

8. Automated decisions

Matchmaking and ratings are calculated automatically from match results. Our system also flags possible alt accounts and VPN use; these flags are reviewed by staff before any ban or approval decision, and you can appeal. We don't make decisions with legal or similarly significant effects about you by automated means alone.

9. Cookies, tracking and Do Not Track

We use only necessary cookies: a sign-in session cookie and, if you used an invite link, a short referral cookie. A few display settings are saved in your browser's local storage. We don't use advertising or analytics cookies and don't track you across other websites, so there's nothing for browser "Do Not Track" or Global Privacy Control signals to switch off, and we don't change our behaviour when we receive them. Twitch/Kick players on the Streams page and Google Fonts may receive your IP address and set their own cookies under their own policies; we don't allow any other third party to collect information about your activity on our site.

10. Your rights and choices

You can ask us to:

• access the personal information we hold about you and get a copy (portability);
• correct it (your name and avatar come from Steam, so change those there);
• delete your account and personal information (with the exceptions in section 7);
• restrict or object to processing based on our legitimate interests;
• withdraw consent for optional features (for example unlink a stream) at any time.

To use these rights, email support@l4d2rebirth.com or message a staff member in our Discord. We'll check it's really your account (for example by asking you to message us from your linked Discord) and answer within 30 days (45 where US state law allows). We won't treat you differently for using your rights. If you're in the EU/UK you can also complain to your data protection authority (in the UK, the ICO). Residents of US states with privacy laws can make these requests too and may appeal a refusal by replying to our answer.

11. Children

The service is not directed to children and is not for anyone under 13. We don't knowingly collect personal information from children under 13. If we learn we have, we'll delete the account and its information promptly. If you believe a child under 13 is using the service, email support@l4d2rebirth.com or message a staff member in our Discord.

12. Security and breaches

We protect your information with HTTPS, secure sign-in cookies, protection against forged requests, strict access controls for staff, a locked-down server and regular security updates. No system is perfectly secure. If a breach affects your personal information, we'll notify you as quickly as possible and without unreasonable delay, and notify the Illinois Attorney General or other authorities where the law requires.

13. Changes to this policy

We'll update the dates at the top when this policy changes. For meaningful changes, we'll post on the changelog and in Discord, and ask you to confirm before you play again.

14. Contact

Privacy questions or requests: email support@l4d2rebirth.com or message a staff member in our Discord.