Privacy
There are two things here: this website, which asks you for nothing, and the member portal at portal.boets.world, which has accounts and therefore holds real information about you. Both are covered below, separately, because they are very different.
This website
boets.world has no login, no form and no database. There is nowhere to type anything, so we hold no account details, email addresses or passwords from anyone who only reads this site. One third-party measurement script runs, described next. There is no general analytics platform — no Google Analytics, no Meta pixel, nothing else.
The Whop conversion pixel
Whop’s pixel (t.whop.tw) loads on this site. It exists so we can tell how
many people who became supporters arrived from here, and it is the only third-party script we
run. It sets its own identifiers and reports page views back to Whop, who are the data
controller for what it collects — their privacy policy governs it.
Blocking it changes nothing about how the site works. A content blocker, a strict-mode browser, or Do Not Track will all stop it loading and every page still functions.
The member portal
portal.boets.world is a separate application with accounts. Everything below applies only if you sign up for one.
Your account
- Email address. It is your identity here, used to sign you in, confirm your account and reset your password. We also send the occasional community email — an event tonight, a giveaway, server news — which every such email lets you turn off in one click, and which you can switch on or off from your profile. It is never sold or shared, and never used for anyone else’s marketing.
- Password. Stored only as an Argon2id hash. We cannot read it, recover it or tell you what it is, and neither can anyone who steals the database.
- Display name and timezone. Whatever you choose. Your display name is visible to admins and, if you publish a creator profile, to the public.
- When you joined and last signed in.
Sign-in and security
- A session cookie when you sign in, valid for 30 days and renewed as you use the site. Signing out deletes it. It is not an advertising cookie and it tracks nothing off our own site.
- Your IP address and browser user-agent are recorded against each session, and used to rate-limit sign-in attempts. This is to stop somebody brute-forcing their way into your account. Rate-limit records identify you by a hash, not by your address in the clear.
- Short-lived cookies during a Discord or Steam sign-in, holding a random value that proves the request came from us. They last ten minutes.
If you connect Discord
Optional, and you can disconnect it at any time from your profile page. When connected we store your Discord user ID, username, avatar URL, the email address on your Discord account, and a refresh token so the link survives. We do not store an access token beyond the moment it is used.
We read one thing from the Boet’s World Discord server: whether you hold the supporter role. That is how your supporter status appears in the portal. We cannot read your messages — on our server or anywhere else — and we cannot post as you. Connecting also adds you to the server, which is the point of it.
If you connect Steam
Optional. We store your SteamID64, which is public information. We never see your Steam password: signing in through Steam happens on Steam’s own site and they tell us only that number.
We use it for three things: giving supporters priority when the game server is full, matching you to your stats on the leaderboard, and showing your WARDOGS playtime and achievements.
For the last of those, if you confirmed your account through Steam, we ask Steam’s official Web API about once an hour for your WARDOGS hours played (all time and the last two weeks), when you last played, and which of the game’s achievements you have unlocked and when. Steam only gives us this if your Steam Game details are set to public, and it is only ever shown to signed-in members. If you make them private, what we had is deleted at the next refresh. If you disconnect Steam, it is deleted straight away and you come off the priority list.
We do not fetch anything for a SteamID that was typed in rather than confirmed through Steam, because a typed-in ID could be anybody’s.
The leaderboard
While our game server is running we read its player list about once a minute and record, for each match, every player’s SteamID64, in-game name, faction, kills, deaths and how long they were in the match. That is recorded for everyone who plays on the server, whether or not they have an account here, because faction totals would be wrong otherwise.
The leaderboard is only visible to signed-in members. A player is only shown by name if they have a portal account with Steam confirmed; everyone else is counted in faction totals and never named. Players banned from the server, or taken off the board by an admin, are excluded. Your own stats are on your leaderboard page. The one exception is the end-of-match recap: a summary of each match — the top players by kills, top earner, best K/D — is posted to our Discord and sent to each player in the in-game chat, naming players by their in-game handle, which everyone on the server’s own scoreboard already sees.
If you enter a tournament
Entering a tournament records the faction you chose, the optional group code you typed, the SteamID64 on your account at the time, the rules version you accepted, and when you entered, checked in or withdrew. Your SteamID64 is sent to the game server host on the night so the reserved slots and, where one is set, the server password work for you. Entrants get a small number of emails about that tournament — confirmation, a seat opening, a reminder, and check-in opening — whether or not community emails are turned off, because a missed check-in email costs a seat. Withdraw and they stop. The public tournament page shows seat counts only, never names; admins see the full roster.
If you set up a creator profile
Creator profiles are public by design. Your creator name, tagline, description, channel links, featured game and profile picture appear at portal.boets.world/creators, are visible to anyone, and are indexed by search engines. Do not put anything there you would not want published, because publishing it is the whole idea.
Pictures you upload are resized in your own browser before they are sent to us, which also removes the EXIF data that cameras and phones attach — including GPS coordinates. The resized image is stored on our server and served publicly. Nothing is uploaded until you save.
A profile is reviewed by a moderator before it goes public, and again when you change the risky parts of it. You can take it down by asking us.
If you become a supporter
Payments are taken by Whop, not by us. We never see your card details at any point. From Whop we read your membership status, the email address on your Whop account, your renewal date, and any answers you gave to the questions at checkout — which is how we match your payment to your portal account. Whop’s own privacy policy governs everything you give them directly.
If you contribute through SnapScan
Contributions are paid to us through SnapScan, who handle the payment; we never see your card or bank details. If you contribute from your portal account, the link you use carries your account id so the payment can be credited to you, and we record the amount, the date and SnapScan’s payment reference against your account. Your name appears on the month’s list of contributors only if you tick the box to show it. A contribution made from the public link without signing in is recorded as an amount with nobody attached.
Our record of what happened
We keep an append-only log of consequential actions — sign-ins, account changes, role grants, moderation decisions — recording who did what, when, and from which IP address. It exists so that if something is changed on your account, there is a record of who changed it. It is visible to admins only.
The petition
If you sign our petition asking BULKHEAD for African WARDOGS servers, we store the name you give, your email address, and optionally your country and your reason for signing, along with whether you agreed to be named and the IP address the signature came from. The IP address is only used to spot fake or bulk signatures.
Your email address is used once, to confirm the signature, and is never published and never sent to BULKHEAD. Signatures that are not confirmed within 48 hours are deleted. If you sign in the Discord instead, an admin enters your signature as confirmed and no email is sent. If you agreed to be named, your name, country and reason appear on the petition page and are included in what we send to BULKHEAD; if you did not, your signature still counts toward the total but your name is not shown or sent. Ask us and we will remove your signature.
Who else sees any of this
We do not sell your information and we do not share it for advertising. It is handled by:
- Verpex, who host the site and the database, in their data centre.
- Discord, Steam and Whop, but only for the connections you choose to make, and only what is described above. For Steam that includes our hourly requests for your WARDOGS playtime and achievements.
- BULKHEAD, the studio behind WARDOGS, who receive the petition: the names, countries and reasons of people who agreed to be named, and the total count. Never email addresses.
- Our email provider, to deliver confirmation and password-reset messages.
- The game server host, who receives the SteamID64s of supporters so the priority queue works.
Some of these are outside South Africa, which means your information is processed abroad.
How long we keep it
Your account and its information are kept while the account exists. Ask us to delete it and we will, which removes your account, your connections, your creator profile and your uploaded images. Expired sessions and used sign-in links are cleared automatically. The audit log is deliberately kept even after an account is deleted — but with the account gone it no longer identifies you.
Match statistics from the game server are kept for about thirteen months and then deleted; the running counters used to calculate them are cleared after thirty days without being seen. Steam playtime and achievements are kept only while your Steam connection exists and your game details are public. Confirmed petition signatures are kept until the campaign ends or you ask us to remove yours. Tournament entries are kept with the tournament’s results.
Other cookies
Aside from the sign-in cookie and the short-lived ones described above, we set none of our own. No advertising cookies, no cross-site tracking, no consent banner — because there is nothing to consent to beyond the pixel, which a blocker handles.
Server logs
Our host keeps standard web-server logs — IP address, time, page requested, browser user-agent. Every website has these. They are used for security and for working out what broke, and we do not mine them.
The live counters
The player count and Discord member count on the front page are fetched by our own server, not by your browser. Discord is not told anything about you when you load this page.
Leaving for Discord
Once you are in the Discord, Discord’s own privacy policy applies to what happens there. That is between you and them, and it is worth reading.
The game server
Connecting to our WARDOGS server means your IP address and in-game name are visible to the server and its admins, as with any game server anywhere. We use that to run the server and enforce the house rules. We also record match statistics for everyone who plays, as described under The leaderboard above. We do not use any of it for advertising and we do not sell it.
Children
This is not a service for children. The game is rated for adults and we do not knowingly collect information from anyone under 18. Tell us if you think we have and it will be removed.
Your rights
Under South Africa’s Protection of Personal Information Act (POPIA) you can ask us what personal information we hold about you, ask for it to be corrected or deleted, and object to its processing. If you have a portal account, most of it is on your profile page already and you can change it yourself. For anything else, ask.
You can also complain to the Information Regulator of South Africa if you think we have handled your information badly.
Getting hold of us
Questions, complaints, a request for your data or a request to delete your account: privacy@boets.world. A real person reads it.
Last updated 18 September 2026 — added contributions through SnapScan. 17 September: added tournament entries and the end-of-match recap posted to Discord and in-game chat. 14 September: added the leaderboard (match statistics recorded from the game server), WARDOGS playtime and achievements fetched from Steam, and the petition to BULKHEAD. The version before that said we store only your SteamID64 and use it for one purpose, which stopped being true when the leaderboard launched.