Privacy Policy

Last updated: September 25, 2026

This policy describes how the community administrators operating PES 2013 Online handle information for the website, game server, and Discord account integration.

Information we collect

• Account information: email address, username, display name, account status, verification status, registration and update dates, and password hashes when a website or game password is set. Administrator accounts also store information needed for two-factor authentication.
• Discord information: when you authorize Discord, we receive your Discord user ID, username, and display name. Discord signup and sign-in also request your email and its verification status. We store the identity link and use a verified email to create a new account; connecting an existing account does not replace its email.
• Game activity: player profiles and avatars, friends and community relationships, rooms, match participation and results, rankings, tournaments, and moderation or diagnostic records generated by server activity.
• Technical and support information: connection IP addresses, request and game-protocol diagnostics, session and security records, account administration history, email delivery records, and information you provide when asking for help.
• Donations: if you donate through Ko-fi, Ko-fi tells us the name you gave, your email address, the amount, your message and whether you chose to be shown publicly. We use the email only to show a supporter badge on the account with the same confirmed email; donors who chose to be public on Ko-fi appear by that name on the supporter page, and a supporter star shows next to their player name on the leaderboard and tournament pages. Ko-fi and its payment providers process the payment under their own privacy policies; we never see card or bank details.
• Country: when you log in to the game, the country your connection comes from is looked up from its IP address in an offline database (IP Geolocation by DB-IP). Only the country is kept, with when it was first and last seen; it is visible to administrators and used for statistics about where players come from. A VPN shows the VPN's country.

How we use information

We use this information to create and verify accounts, authenticate website and game access, connect Discord identities with player accounts, operate matches and community features, display results, provide support, investigate abuse, and diagnose service problems. Where applicable data-protection law requires a legal basis, these purposes rely on providing the service you request, our legitimate interests in operating and protecting the community, compliance with legal obligations, or consent where required.

Discord authorization is optional: ordinary registration and login remain available when configured. We do not receive your Discord password, read your Discord messages, or request your Discord server membership through this integration. Discord access and refresh tokens are not stored. The integration does not automatically join servers. If you have linked Discord and have a Master League Online club, our bot gives your Discord account the MLO role in the community Discord server (and takes it back when you no longer have a club); unlinking Discord ends this.

Who can see information

Other players and public visitors can see information shown in game and community features, such as player names, rankings, tournament participation, and match results. When Discord announcements are enabled, player display names and game events may also be posted to the community Discord channel.

Your email address and stored Discord account link are not published on public player pages. If you connect Discord, match-result announcements can mention your Discord account in the community channel, associating it with your player name and result. Discord notification settings determine whether a mention notifies you. You and authorized administrators can see your connected Discord username and ID. Administrators can access account, support, and diagnostic information needed to manage the service.

Hosting and backup providers process information used to run the service. When email delivery is configured, Resend processes recipient addresses and email content. Discord processes authorization requests and any community announcements sent to it under its own Privacy Policy. These providers may process information in countries different from yours. We may also disclose information when required by law or necessary to address abuse or protect the service and its users. We do not sell personal information or use Discord data for advertising.

Cookies and security

The website uses essential cookies for login sessions, protection against forged requests, and temporary Discord authorization. Website sessions expire after 14 days for players and 12 hours for administrators; sessions may end earlier when revoked. Discord authorization and signup completion expire after ten minutes. The request-protection cookie lasts for the browser session. Blocking these cookies may prevent login and account features from working.

Analytics: on public pages (not account, admin, login-link or password pages) the website asks whether you accept analytics cookies. Only if you accept does it load Google Tag Manager, which runs Google Analytics to measure visits (pages viewed, device and approximate location); Google processes this under its own Privacy Policy. Advertising storage stays off. Your choice is kept in a cookie for a year and can be changed with "Cookie settings" at the bottom of every page. The website has no advertising cookies.

Passwords are stored as hashes. Access controls and transport protection help protect account data, but no service can guarantee absolute security.

Retention and deletion

Account information and Discord identity links are kept while needed to operate your account. Game history, moderation records, diagnostics, email records, and backups may have different retention needs. Session and authorization expiry ends their validity; it does not mean every underlying database record is immediately deleted. Expired Discord authorization records are cleaned up when new authorization flows start.

You may request account closure, deletion of personal data, or removal of your Discord link by contacting the administrators. There is currently no self-service account deletion or Discord disconnect button. We will review the request and explain any information that must be retained for security, dispute handling, legal obligations, or the integrity of shared match records. Backup copies may remain until the applicable backup rotation removes them.

Removing a Discord link can prevent Discord-only login, so an alternative login or account closure may be needed. You can also revoke the application's authorization in Discord; doing so does not automatically delete information already stored by this service.

Your choices and requests

Contact the administrators to request access to your information, correction of inaccurate information, deletion, or an explanation of its use. Depending on applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent, or a complaint to a data-protection authority. We may ask for enough information to verify that you control the account before acting on a request.

The service is not intended for children under 13 or any higher minimum age required locally. If you believe a child who is not eligible has provided personal information, contact us so we can review and address it.

Contact and updates

Contact the community administrators through our support channel and ask for a private conversation about a privacy or deletion request. Do not post your email address, passwords, authentication codes, or other private account details publicly.

We will update this page as our data practices change and show the revision date above. Material changes will be announced on the website or through the community support channel. See also our Terms of Service.