Privacy Policy

SCRMaps ("SCRMaps," "we," "us") is a free, individually-operated directory for StarCraft: Remastered map creators. This Privacy Policy explains what information we collect when you use scrmaps.com (the "Service"), why we collect it, and the choices you have. It applies to everyone who visits or uses the Service, regardless of location.

We collect only what the Service needs to function - four items in total: your username, your email address, the account identifier Blizzard issues, and a hashed record of the IP you sign in from.

We never ask for and never store your real name, date of birth, phone number, postal address, payment or card details, government ID, or your BattleTag. There is no password on your account. SCRMaps is free and supported by advertising - see Section 6 for what our ad provider collects and how to opt out of personalised ads.

In detail:

• Account sign in information. Battle.net is the only way to sign in. Blizzard's OAuth service shares your BattleTag (your public in-game name) and a Battle.net account identifier with us - Blizzard does not share your email address, real name, or password with SCRMaps, and we never see your Battle.net credentials. Of those two, we keep only the account identifier: your BattleTag is not stored, for the reasons set out in Section 4. There is no password to create or store on SCRMaps.
• Email address. We ask for an email address once, and keep it for one purpose: recovering your account. Battle.net is the only way to sign in and we store no password, so if Blizzard ever withdraws access - or you lose your own Blizzard account - that address is the only way we can confirm the account is yours and return it to you. We do not send newsletters, notifications, or marketing of any kind to it, and we do not share it.
• Username. The username you choose during onboarding, shown publicly next to anything you post.
• Content you submit. Project and map listings, descriptions, external links, comments, reports you file, and the map files (.scx) you upload. This includes the Public Map upload feature, which lets you optionally enter the name of a map's actual creator (who may not be an SCRMaps user) so the listing can credit them - that name is displayed publicly on the listing.
• Hashed IP addresses. We hash (not store in plain text) the IP address of each visit to power a daily visit counter, to help enforce our sign-up cap against abuse, and to rate-limit submissions to map leaderboards. A hash is a pseudonymization technique, not full anonymization - it is theoretically possible for a hashed IP to be matched back to an address, so we treat this as personal information and discard these records on an ongoing basis rather than retaining them indefinitely.
• Contact form submissions. If you use our Contact page, the name, email address, and message you enter are delivered to our inbox via FormSubmit.co, a third-party form-processing service. That address is used only to reply to you and is destroyed once the matter is resolved.
• Cookies. Authentication cookies that keep you signed in, and a cookie that remembers your English/Korean language preference. See Section 5.

We use this information to operate your account, let you create and manage listings, recover your account if Battle.net sign in becomes unavailable, prevent abuse of the visit counter and rate limits, respond to enquiries sent through the Contact page, and moderate content under our Terms of Service. We do not sell your personal information, and we do not use the information listed above to target advertising. The account data we hold is never passed to our ad provider - ads are served from the page itself, not from your account.

We rely on the following infrastructure and service providers, each of which processes limited data (such as connection logs) as part of delivering their service to us:

• Blizzard Entertainment (Battle.net) - authentication
• Resend - one-off confirmation email when a username is transferred between accounts
• Vercel - application hosting
• Neon - database hosting
• Cloudflare - map file storage (R2)
• FormSubmit.co - contact form email delivery
• Google (AdSense) - advertising; see Section 6

Each provider is bound by its own privacy policy and terms. We do not share your account information with any other third party, and we never sell your personal information. Our advertising provider does not receive your account data - it collects its own data directly from your browser, as described in Section 6.

Signing in uses Blizzard's Battle.net OAuth service, which we access under Blizzard's Developer API Terms of Use. Those terms place obligations on us, and this is how we meet them:

• We do not store your BattleTag. Blizzard's terms limit how long data pulled from their APIs may be retained to 30 days. Rather than keep your BattleTag and expire it on a schedule, we do not keep it at all - it is discarded at the moment you sign in and never written to our database. What we do keep is the opaque numeric account identifier Blizzard issues for your account. It contains no personal information, and it exists for one reason: so that signing in again returns you to your own account. Without it, "Sign in with Battle.net" could not recognise you as a returning user.
• Minimum scope. We request only the openid scope - enough to confirm who you are and nothing more. We do not request or retrieve your game data: no characters, match history, profiles, or purchases, from any Blizzard API.
• No access tokens are retained. The tokens Blizzard issues during sign in are used to complete that sign in and are not stored afterwards.
• We never see your password. Authentication happens on Blizzard's own domain. We do not collect, store, or intercept your Blizzard password at any point.
• Nothing is sold or handed on. We do not sell, license, or otherwise transfer any data obtained through Blizzard's APIs - including anonymous, aggregated, or derived data - to any advertising network, data broker, or other monetisation service.
• The Service is free. We do not charge to use SCRMaps or any feature of it, and no feature is ever gated behind watching or clicking an advertisement. The Service is funded by ordinary display advertising, which Blizzard's terms permit; what they prohibit - and what we do not do - is using Blizzard data to target ads or handing that data to an ad network.
• Deletion on request. If you ask us to delete your account, the Blizzard account identifier is deleted along with it.

SCRMaps is an independent fan project. StarCraft and Battle.net are trademarks of Blizzard Entertainment, Inc., and SCRMaps is not affiliated with, endorsed by, or sponsored by Blizzard Entertainment, Inc.

We use cookies required to run the Service: session and authentication cookies that keep you signed in, and a cookie that remembers your language preference. In addition, our advertising provider sets its own cookies and similar identifiers in your browser to serve and measure ads. These are described in Section 6, along with how to turn personalised advertising off.

SCRMaps is free to use and is funded by advertising. We use Google AdSense in its standard configuration to serve ads, which means Google may show you targeted ads. Google performs that targeting itself, using the content of the page you are on and data it has collected about your browsing across the web. We do not do it, and we give Google nothing to do it with.

• We collect nothing for advertising. We run no analytics or tracking scripts of our own and build no advertising profiles. Nothing in Section 1 - your username, email address, Battle.net account identifier, or hashed IP - is used to select, target, or measure ads, and none of it is passed to Google or to any advertiser.
• What Google does. To serve and measure ads, Google and its partners set cookies and similar identifiers in your browser and receive your IP address, an approximate location derived from it, browser and device information, and the page you are viewing. Google may combine this with data from your activity on other sites to personalise the ads you see. This happens directly between your browser and Google; we neither see nor receive it.
• Blizzard data is walled off. Blizzard's Developer API Terms prohibit using data obtained from their APIs to target advertising or transferring it to an ad network, and that is the line we hold: nothing derived from Battle.net sign in ever reaches our ad tags. Letting Google apply its own targeting to a page is a different thing entirely, and is permitted.
• No feature is gated behind an ad. You are never required to watch, click, or dismiss an advertisement to use any part of the Service - which Blizzard's terms also prohibit.
• Your controls. You can turn off personalised advertising from Google at adssettings.google.com, opt out across participating vendors at youradchoices.com or youronlinechoices.eu, and block or delete advertising cookies in your browser. Turning personalisation off does not remove ads; it makes them non-personalised. None of this affects your ability to sign in or use the Service.

Google's handling of this data is governed by its own privacy policy (policies.google.com/privacy) and its advertising notice (policies.google.com/technologies/ads).

We keep your account and content for as long as your account is active. Content you or a moderator removes is hidden from public view but may be retained internally for a limited time for moderation history, unless you request full deletion under Section 8. Daily visit-counter and rate-limit records are tied to a specific calendar day and are not used to build a profile of your activity over time. Data obtained from Blizzard's APIs is not retained at all beyond the sign in that produced it, apart from the account identifier described in Section 4.

Depending on where you live, you may have rights to access, correct, or delete your personal information - for example under South Korea's Personal Information Protection Act (PIPA), Canada's PIPEDA, or applicable U.S. state privacy laws. To exercise any of these rights, reach out through our contact form. We will delete your account, username, and personally identifying content within a reasonable time, except where we need to retain limited records for legal compliance or an active moderation investigation.

SCRMaps is not directed at children. Signing in requires a Battle.net account, and Blizzard does not allow anyone under 13 to create one, so the age check happens before anyone reaches us. We do not knowingly collect information from anyone under 13, and if we learn that a child under 13 has an account here, we will delete it.

We use industry-standard practices - encrypted connections, hashed identifiers, and access-restricted infrastructure - but no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your Battle.net credentials secure.

Our infrastructure providers may process and store data in the United States or other countries outside your own. By using SCRMaps, you understand that your information may be transferred to and processed in these locations.

We have designated a privacy officer, responsible for protecting your personal information and handling any related complaints:

• Name / position: SCRMaps Operator (SCRMaps 관리자)
• How to get in touch: requests to access, correct, or delete your personal information, including account deletion, can be submitted through our contact form. It does not require you to be signed in, so it remains available if you have lost access to your account.

The email address you enter on that form is used only to reply to your enquiry and is destroyed once the matter is resolved.

You can have your account deleted at any time by submitting a request through the contact form - no sign in required. When we act on it, your username, email address, Battle.net account identifier, and the hashed record of the IP you signed in from are permanently erased, along with your projects, legacy map uploads, comments and leaderboard entries. Public Map uploads remain, because they credit a different creator, but the link to your account is removed. We do not retain a copy.

We may update this Privacy Policy from time to time. If we make a material change, we will let you know through the Service.

Questions about this Policy or your data can be sent through our contact form.