PRIVACY POLICY

The X-Wing Alliance (“XWA”, “we”) is a voluntary, not-for-profit fan community. This policy describes the information collected by the website at xwing.life and how it is used. Questions about this policy can be directed to contact@xwing.life.

We only collect what is necessary to operate the site:

• Account information when you sign in with Discord or Google: your account identifier, display name, email address, and avatar URL as provided by the chosen identity provider.
• Content you create: forum threads, replies, edits, reactions, bookmarks, reports, and any profile information you choose to set (display name override, subtitle, faction).
• Server logs: standard request metadata (timestamp, route, status, user agent, truncated IP) retained briefly for operational and abuse-prevention purposes.

We do not sell personal information. We do not run third-party advertising trackers. We do not share your data with third parties except the limited cases listed below.

• To authenticate you and keep you signed in.
• To display your contributions on the forum and attribute them to your account.
• To enforce our community rules and investigate abuse.
• To notify you (in-app) about replies and mentions you receive.

We use a small number of cookies. A session cookie holds your signed-in identity (HTTP-only, secure, signed JWT) so you do not have to log in on every page. A short-lived cookie stores OAuth state during sign-in. We do not use third-party analytics or advertising cookies.

• Discord and Google for sign-in (OAuth). Their privacy policies govern any data they hold about you.
• Vercel for site hosting and Neon for the forum database.
• Klipy when you use the GIF picker (queries you type and your IP are sent to Klipy to fetch results).
• Twitch and YouTube APIs are used server-side to display public live-stream and video information; no personal data is sent on your behalf.

Account and forum content are retained as long as your account exists. Server logs are retained for a short rolling window (typically up to 30 days). Reports and moderation log entries are retained as long as needed to maintain a community-safety record.

You may at any time:

• Update your profile information from /forum/profile.
• Unlink an OAuth provider from your account (provided at least one remains linked).
• Request a copy of your data, request correction of inaccurate data, or request deletion of your account and associated content. Send requests to contact@xwing.life. We will respond within a reasonable time. Note that posts which form part of a public conversation may be retained in anonymised form (your identifier removed) so that surrounding replies remain intelligible.
• Lodge a complaint with your local data-protection authority if you are an EU/UK resident.

The site is not intended for children under 13. Do not create an account or submit content if you are under 13.

We will update this policy as the site evolves. Material changes will be announced on the site. The effective date at the top reflects the most recent revision.