1. Introduction
#The 47th Joint Operations Unit ("47th JOU", "we", "us", or "our") is committed to protecting the privacy of our members and website visitors. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use our website and related services.
By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy.
2. Who we are
#The 47th JOU is a volunteer Arma 3 gaming community, not a company. The unit's Command Staff run the Site and are responsible for how it handles personal data (the "controller" in data protection terms).
To reach them, email [email protected] or message Command Staff in our Discord server.
3. Information we collect
#Information you provide
- Account information: Discord username, Discord ID, and any display name or callsign you choose when joining the unit.
- Communications: Messages or feedback you send to us through the Site or Discord.
Information collected automatically
- Log data: IP address, browser type, operating system, referring URLs, pages visited, and access timestamps.
- Cookies & similar technologies: As described in our Cookie Policy.
- Device information: Device type and language preferences.
Staff sign-in
Only unit staff sign in to the Site, to reach its admin area. Sign-in uses Discord and asks for the identify, email, guilds and guilds.members.read permissions. When a staff member signs in, we store:
- Discord profile: your Discord user ID, display name, avatar image link, and the email address on your Discord account, with whether Discord has verified it.
- Discord tokens: the access and refresh tokens Discord issues at sign-in, and the permissions granted. We use them only to check your membership and roles in the 47th JOU Discord server.
- Sessions: for each sign-in, your IP address, browser user agent and when the session expires. Sessions last 7 days.
The guilds permission would let us see the list of servers you are in, but the Site never reads or stores that list. It only reads your member record in the 47th JOU server.
4. How we use your information
#We use the information we collect to:
- Operate, maintain, and improve the Site and our services
- Manage member accounts, roles, and permissions
- Coordinate operations, events, and scheduling
- Communicate announcements, updates, and important notices
- Protect against abuse, fraud, and unauthorised access
We do not make automated decisions about you or build profiles.
5. Legal basis for processing (GDPR)
#Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Legitimate interest (Art. 6(1)(f)): Operating and securing the Site, processing server logs and IP addresses for security purposes, and maintaining operation archives. Our legitimate interest is balanced against your rights and does not override your fundamental freedoms.
- Contract performance (Art. 6(1)(b)): Managing staff accounts and giving signed-in unit staff access to the admin area of the Site.
- Consent (Art. 6(1)(a)): Where we rely on your consent (for example, optional communications), you may withdraw it at any time by contacting unit leadership through Discord. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Data sharing & disclosure
#We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
- Unit leadership: Authorised unit leadership and staff may access member information as required for unit administration.
- Service providers: Third-party services that help us operate the Site (e.g., hosting providers), bound by data protection obligations. Every request to the Site passes through Cloudflare, which provides content delivery and attack protection; it sees IP addresses and request details, and may receive network error reports from your browser. Requests then reach our server, hosted by netcup in the EU.
- Legal requirements: When required to comply with applicable law, regulation, or legal process.
7. Live data sources we read from
#The Site surfaces live information by reading from a small set of public, third-party endpoints. We do not store the data those endpoints return; we cache the responses on our server for 1 to 5 minutes and discard them.
| Source | Used for | Where fetched |
|---|---|---|
| discord.com/api/invites/... and .../widget.json | Approximate Discord member and online counts (numbers only, no usernames) for the join page. | Server-side, 5min cache |
| operations.47thjou.co.uk | Public Mission Board HTML, parsed to surface the next open op on the home page. That op's card image is loaded by your browser. | Server-side, 5min cache |
| api.twitch.tv | Whether member Twitch channels are live, for the Live now section on the Operations page. | Server-side, 60s cache |
| cdn.discordapp.com | Images hosted on Discord that an op report links to (rendered as standard images by your browser). | Browser-side image load |
| img.youtube.com | Video thumbnails on the home page and the Operations page. | Browser-side image load |
What this means for you: server-side fetches happen from our host, so those services never see a visitor's IP for the data API calls. The image loads (Mission Board card images, Discord-hosted images, YouTube thumbnails) are made directly by your browser, so those CDNs do see your IP and may set their own cookies under their own privacy policies.
8. International transfers
#Our server is in the EU. Cloudflare, Discord, Google (YouTube) and Twitch are based in the United States and may process data there under their own safeguards for international transfers.
9. Data retention
#We retain your personal information for as long as your account is active or as needed to provide services. If you leave the unit or request account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law or for legitimate administrative purposes (such as maintaining operation archives).
Specific periods:
- Server access logs: IP address, date and time, page requested and browser, kept for up to 14 days for security and troubleshooting.
- Sign-in sessions: 7 days.
- Sign-in state: the short-lived check that protects the Discord sign-in lasts 5 minutes in your browser, and its record on our server expires after 10 minutes.
- Cached live data: data cached from Discord, the Mission Board and Twitch is kept for 1 to 5 minutes.
- Op reports and photos: kept as the unit archive until removed. Removed items stay in a bin only staff can see for 90 days so they can be restored, then are deleted for good. We can delete them sooner if you ask.
10. Data security
#We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Your rights
#Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Request a portable copy of your data
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email [email protected], or contact unit leadership through our Discord server. We aim to respond within one month.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
12. Children's privacy
#The Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information as soon as possible.
13. Changes to this policy
#We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the Site after changes constitutes acceptance of the updated policy.
14. Contact us
#If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to the 47th JOU leadership team through our Discord server. You can also email [email protected].