Registration, competition and website data.

Privacy and contact

Privacy and data-subject requests may be sent to contact@utduel.com. Use this address for access, correction, deletion or anonymisation requests.

Data we handle

The Registration Desk collects:

• player nickname;
• selected competition record and requested division;
• application status;
• submission and, after review, update timestamps.

If an application is approved, the player nickname, league placement, match scores, standings and related tournament record may be made public. Tournament matches may be streamed, recorded and included in public archives. Public competition data may also appear in the Statistics report.

The application record does not include an IP address or user-agent field. To limit repeated submissions, the registration endpoint temporarily keeps the apparent client IP address and attempt times in process memory. A rolling one-hour window determines whether a new submission is accepted. Expired attempts no longer affect that decision; their memory entry is cleared during a later rate-limit check or when the application restarts. This information is not written to the application or its persistent store. Website and hosting systems may separately process request and security data such as IP address, request time and path, user agent, referrer and relevant infrastructure events.

DML Cups player access and beta-test

For private-code access, you create a player account with a nickname; no email address is required. The site shows the private account code once and stores its hash. Keep it safe: whoever has the code can sign in to that account, enter more than one Cup and see its applications, match history and Duel Elo. Replacing the code revokes earlier account sessions. A matching nickname alone cannot recover an account or link an earlier player record. The separate private TEST beta-password session expires after one hour.

When player email sign-in is available, we use the address you enter to send a one-time code. A code request records an attempt; it does not create an account. Successful email sign-in verification creates or opens your player account. The eight-digit code is valid for 10 minutes and has at most five verification attempts. A player session expires after seven days. The separate private TEST beta session expires after one hour. Your account may then link your chosen nickname and Cup applications.

You may optionally add email inside your account after a recent sign-in. Enter the address and confirm the one-time code sent to it. After confirmation, email and your private code open the same account; its applications, player identity and sporting history are preserved. We store the verified address in your account for future sign-ins. An email already attached to another account does not merge the accounts; a matching nickname does not prove ownership. You can continue using the private code without adding email.

On a published Cup page, all visitors can see applicants' nicknames, admission and check-in status. When immediate admission is enabled for a Cup, new account applications appear as “Admitted” immediately while places remain, and the organizer may exclude an ineligible player before the bracket is frozen and the Cup starts. If that mode is not enabled, applications may show “Under review” while the organizer decides; an earlier unresolved application may still show that status afterward. After seeding, the bracket may show players, pairings, maps, scores and match outcomes. Other players do not receive private recovery or sign-in codes in these Cup views. Where email accounts are used, other players do not receive their addresses. This beta-test has free entry, no prizes and no monetization. Each Cup page is available only after publication. Played official results may affect Duel Elo for the participant linked to the account; a matching nickname alone does not link an earlier player record. Questions and correction requests may be sent to contact@utduel.com.

Why we use the data

We use registration and competition data to review applications, organise competition divisions and league participation, publish results and tournament history, respond to participant requests, and prevent abuse or security incidents. Technical data is used to deliver, operate and protect the website and its administration area.

Hosting, recipients and external services

Timeweb Cloud hosts the application and its primary registration store. The primary store is configured on the Timeweb project server at public IP 104.171.136.193; Timeweb's public geofeed associates that network with Moscow. This location statement is limited to the configured primary server and does not mean that every provider-managed copy or service component is located in Moscow or Russia.

As hosting provider, Timeweb Cloud processes website requests, registration data and relevant infrastructure logs.

To deliver a player sign-in or email-attachment confirmation code, the recipient's email address and a message containing the one-time code are sent to Yandex Cloud Postbox. The Cloud Services Offer identifies ООО «Яндекс.Облако» as the provider; its Data Processing Agreement describes personal-data processing on the customer's instructions.

The Statistics page embeds Google Looker Studio from datastudio.google.com. Loading the report may send browser technical data, including IP address, user agent, referrer and cookies where applicable, to Google. Public competition data may be displayed in that report.

Boosty, DonationAlerts, Discord, T-Bank and other outbound services are opened only when a visitor chooses to follow or use them. Those services process data under their own policies. The application does not send Registration Desk fields to them.

Official competition record

When a participant enters a competition, its official public record may include the participant's in-game nickname, season, region or division, opponents, maps, published match results and scores, standings, rating, placements and competition history. Duel Masters League keeps this minimum official record long-term as its sporting archive. Access to the record does not depend on a separate registration checkbox or an account claim. Requests to correct the record or anonymise a participant identifier are reviewed through contact@utduel.com without erasing the underlying match or tournament result.

Processing outside Russia

Loading Google Looker Studio or voluntarily opening an external service may cause that provider to process browser data in the countries where it operates, under its own policies. This notice does not state that all processing takes place only in Russia.

Retention

The following periods and criteria cover existing Registration Desk records, the competition archive, and the site's established logs and local backups. They do not establish deletion periods for the player account, private-code hashes and session records, Cup entries, their security records, or protected PostgreSQL backups.

• pending applications: no more than 90 days;
• rejected or withdrawn applications: no more than 30 days;
• approved applications and season operational data: through the end of the relevant season plus one year;
• the minimum official competition record is kept long-term as the Duel Masters League sporting archive while it is needed to preserve an accurate history of the competition. It may include an in-game nickname, season, region or division, opponents, maps, score, result, standings, rating and placement. Records may be corrected, and a participant identifier may be anonymised where required after a verified request or takedown review, without deleting the underlying match or tournament result;
• ordinary server and access logs: no more than 30 days;
• incident-specific logs and evidence: up to one year;
• Registration Desk local backups: a 14-day rotation, with deletion propagated within that period.

Correction, deletion and requests

A participant may request access to or correction of their registration data, or ask for deletion or anonymisation. Send the request to contact@utduel.com. Public results and tournament history are reviewed under the same correction, anonymisation and takedown procedure. Where appropriate, the participant identifier can be changed or anonymised while the underlying match or tournament result remains in the sporting archive.

Age requirement

Registration is limited to participants who are at least 18 years old when they apply. The application asks the participant to confirm this eligibility rule. Duel Masters League does not request a date of birth or guardian information for this registration.

Cookies, local storage and embedded content

The site stores the selected language in the first-party utduel-language cookie and in local storage. The cookie lasts for up to one year. The administration area uses an HttpOnly, SameSite=Strict session cookie that lasts no more than eight hours and is necessary for authenticated administration.

The Google Looker Studio embed described above is present on the Statistics page and may use Google cookies or similar browser storage where applicable.

Related documents

See the League Rules, Legal Notice and Takedown process.