WKSR privacy notice

What the White Knuckle SpeedRun (WKSR) match server stores about you, why, and for how long.

What is stored

• Your player: a random player id, your player name, your rating, wins, losses and best time, when your player was created and when you last connected. From version 0.9.3 your player name is your Steam name (with a number added when another player already has it); your game sends it when it connects.
• Your key: only a one-way hash of the secret key WKSR keeps on your PC. The key itself is never stored here.
• Your Steam account: only a keyed hash of your Steam account number, used to recognise the same account again. Your Steam name is used as your player name (above). Your Steam profile, friends and password are never seen or stored.
• Finished 1v1 matches: both players' ids and names, the seed, times, outcome, rating change and artifact bans. Party matches are not stored: their results are only sent to the players in them.
• Leaderboard times: your fastest finished run in ranked 1v1, your fastest in ranked solo and your fastest of each segment (one of each), with its time, seed, modifiers and artifact bans, the WKSR and game versions it was played on, and when you set it. A faster run replaces it; slower runs are not kept.
• Replays: while one of those times is among the 20 fastest on its leaderboard, a recording of the run is kept with it: where you were in the levels over time, and your split times. It is deleted as soon as the time is no longer among the 20 fastest, and replaced when you beat it.
• Mods: while your game is running, WKSR tells the server which other mods (BepInEx plugins) it has loaded: their ids, names and versions. The server checks them against its list of approved mods and keeps your list in memory only while you are connected. What it stores is a list of the mods it has seen, not who had them. The server log can name the mods in your game.
• Server logs: technical events such as failed connections and temporary blocks, with a shortened IP address (see Your IP address below). They are deleted automatically after 21 days.
• Bug reports (only if you send one from WKSR): your title and description, the files you attach, the contact you give (optional), your WKSR name and player id, the WKSR, mod and game versions, and WKSR's event log for that session if you leave it ticked. A report is emailed to the operator at the contact address below and deleted from this server once sent; the email is kept only as long as the bug needs.

During a match, your position and progress are sent to the other players' games. Chat lines are passed to the players in the same chat room: in the Global room everyone who has it open, in the Match room your lobby or match. So that players who join can read back, the server keeps the lines of the last 24 hours in its memory, with the name of who said them (the Global room's, and a lobby's while it is open). They are never written to disk or to the logs, and a restart of the server forgets them. Voice chat (when you turn it on) is relayed live, encrypted, to the players in your lobby, or in a match to the players near you; it is never recorded, stored or logged. Lobbies exist in memory only, while they are open. Nothing is sold, shared with advertisers or used for anything except running the matches.

Your IP address

Your game connects to this server directly, so the server sees your IP address, as every internet service does. It is not stored with your player, it is not in the database or its backups, and other players never see it: matches, chat and voice all pass through this server, and players' games never connect to each other.

• While you are connected the server holds your address in memory, to limit how many connections and connection attempts one address can make, and, with voice chat on, to know where to send the voice.
• Temporary blocks: an address that floods the server or keeps breaking the protocol is refused for a while. The block is in memory only, and a restart of the server forgets it.
• New players: to limit fake accounts, the server remembers how many new players an address created, in memory only, for 24 hours.
• Logs: from version 0.9.5 the server log holds only a shortened address: the last number of an IPv4 address is left out (203.0.113.x), and of an IPv6 address only the first three groups are written. That names a network, not a connection. Log lines written before 0.9.5 hold the full address until they are deleted, 21 days after they were written.
• This page and bug reports go through a web server on the same machine. It keeps no record of visits; when a request fails, its error log can hold the full address of that request for a short time.

The company that hosts the server carries the traffic and can see addresses, as any network provider can.

What other players can see

The leaderboards in WKSR can be read by everyone who uses this server. They show your name; your rating with your wins and losses, once you are past your first 10 ranked matches; your fastest times with the version they were played on; and, for the 20 fastest times of a leaderboard, the replay, which other players can download and run against as a ghost. You are only listed once you have played ranked on version 0.9.1 or later. Lobby matches and unranked runs are never listed. Replays you save yourself in WKSR stay on your PC and are never sent here.

Why

• To run matches and keep ratings and records (that is the service you use).
• To keep ranked play fair: only approved mods are allowed in it (the mods list).
• To keep the server safe from abuse and cheating (logs, limits, Steam link, which ranked matches require).
• To fix the bugs you report.

Where and how

On a server in the European Union. The database is encrypted as a whole, and its backups are encrypted too. Connections to the match server use TLS. Bug reports and server alerts are delivered by email, through the operator's email provider, which may store them outside the EU.

Steam sign-in

From version 0.9.3 there is nothing to press: when your game connects, it tells this server which Steam account it is running under and your Steam name. The account number is stored only as a keyed hash, as described above, so that your rating and times stay yours on another PC. In older versions, linking happened on Steam's own website, under Valve's privacy policy, with the same result.

How long

Your player, match history and leaderboard times are kept until you ask for them to be deleted. A replay is kept only while its time is among the 20 fastest. Logs are kept for 21 days. IP addresses are not stored with your player (see Your IP address).

Your rights

You can ask for a copy of everything stored about you, for a leaderboard time (and its replay) to be removed, or for your player to be deleted. When a player is deleted, their leaderboard times and replays are deleted too, and their matches stay in the other players' history with the name and id replaced by "deleted player". Contact: wksrun@gmail.com. Mention your WKSR name.