Privacy Policy

Last updated: 11 Sept 2026

The short version

• Browsing this site needs no account and sets no tracking cookies. Our page-view analytics are cookie-free and store nothing on your device; we run no advertising or profiling scripts of any kind.
• The only information you actively give us is what you type into the contact form. We use it to answer you, and for nothing else.
• We never store your IP address in our own database. Spam protection uses a one-way keyed hash that is deleted within minutes.
• Twitch streams and YouTube videos load only after you press play, so those platforms learn nothing about you unless you choose to watch.
• We do not sell personal data, and we do not share it with advertisers or data brokers.

Who is responsible for your data

EON Esports is an unincorporated esports organisation based in Belgium, and is the data controller for the personal data described in this policy. We are not a registered company, so there is no company number to quote; a postal address is available on request.

You can reach us about anything in this policy through the contact form or by email at contact@eonesports.gg. Because we are established in Belgium, the GDPR — Regulation (EU) 2016/679 — applies to everything below.

What we collect, and why

When you use the contact form

We collect your name, your email address, the type of enquiry, a subject, your message, and — if you choose to fill them in — your organisation and one reference link. Nothing else on the form is required, and there is no field anywhere on this site that asks for payment details.

We use it to read and answer your enquiry, and to keep a record of the conversation. Alongside your message we store the time it arrived, whether our internal notification email was delivered, and any notes our staff add while handling it. Your message is emailed to one internal address and is not published anywhere on this site.

Our legal basis is our legitimate interest in responding to people who contact us (Article 6(1)(f)). Where your enquiry is about a partnership, a trial or joining the organisation, we also rely on the steps taken at your request before entering into a contract (Article 6(1)(b)).

To stop the form being abused

To keep the form from being used to send bulk spam, we count recent submissions from the same source. That count is stored against a one-way cryptographic hash (HMAC-SHA-256) of your network address — or, where our server cannot see one, of the email address you entered — keyed with a secret only our server holds.

Your IP address itself is never written to our database, our logs or your submission. The hash cannot be reversed or looked up without that secret, and the row holding it is deleted as soon as the counting window — fifteen minutes by default — has passed. Our legal basis is our legitimate interest in keeping the service available and free of abuse (Article 6(1)(f)).

When you simply browse

Reading this site requires no account and writes nothing to your device. Two things are nevertheless recorded, and neither can identify you.

Aggregate page-view analytics. We count which pages are read, the site you arrived from, and general characteristics such as country, browser and device type. This is measured without cookies and without storing any identifier in your browser, so it cannot recognise you on a later visit or follow you to another site. It produces counts, not profiles, and gives us no means of identifying an individual visitor. Our legal basis is our legitimate interest in understanding which of our content is worth producing (Article 6(1)(f)) — you can object to it at any time, and any standard tracker blocker will also prevent it.

Technical server logs. Our hosting provider keeps short-lived logs of requests — the kind every web server produces — which may include an IP address, so the service can be operated and attacks investigated. We do not use those logs to build a profile of you and we do not combine them with anything else. Legal basis: our legitimate interest in running a secure service (Article 6(1)(f)).

If you play or work for EON

Public profiles on this site show the information needed to present a competitive roster: a player or staff member’s handle, their role, their country, a photograph, a short biography, the date they joined, and the teams they played for previously. Some people choose to have their real name shown as well. Match results, tournament placements and achievements naming them stay published as a competitive record after they leave.

Our legal basis is the agreement we have with the person concerned (Article 6(1)(b)), together with our legitimate interest in publishing an accurate record of the organisation’s competitive history (Article 6(1)(f)). If you appear on this site and want something corrected, reduced or taken down, get in touch and we will deal with it — see your rights below.

If you have a staff account

People who publish content here sign in to a password-protected admin area. We store their name, email address, role and hashed password, and their browser holds a session cookie that is strictly necessary for signing in. That area is not reachable by the public. Legal basis: Article 6(1)(b) and Article 6(1)(f).

Cookies and similar storage

This site sets no advertising or tracking cookies, and our analytics set no cookie either. The only cookie it sets of its own accord is the session cookie issued to staff who sign in to the admin area. Full detail, including what an activated video player may set, is in our Cookie Policy.

Third-party platforms

Our content pages can play streams from Twitch and videos from YouTube. Neither loads until you press the control that says so — arriving on the page or scrolling past a player contacts nobody, and no third-party frame exists in the page until you ask for one. Once you activate a player, the platform behind it receives your request directly and its own privacy policy governs what it collects. The YouTube player uses the privacy-enhanced youtube-nocookie.com host.

Instagram and X posts are shown as our own summary cards. They load no code and no images from those platforms, so those companies learn nothing unless you follow the link out.

Our server asks Twitch whether our own channel is currently live so the site can say so. That request is made by us, about our channel, and contains no information about you.

Who else sees your data

We do not sell personal data and we do not share it for advertising. A small number of service providers process it on our behalf, under contract and only on our instructions:

• Our hosting and database provider, which runs this site and stores submitted enquiries.
• Our email delivery provider, which carries the notification email containing your enquiry to our internal address.
• Our file storage provider, which serves the images used on the site.
• Our analytics provider — Vercel, who also host the site — which processes the aggregate page-view counts described above on our behalf.

We will also disclose data where the law requires it — for example a valid request from an authority — and we will tell you when we are allowed to.

Transfers outside the EEA

Some of those providers operate infrastructure outside the European Economic Area. Where data is transferred outside the EEA, it is covered by the safeguards in Chapter V of the GDPR — either an adequacy decision by the European Commission, or the Commission’s standard contractual clauses as included in the provider’s data processing agreement. You can ask us which providers we currently use.

How long we keep it

• Enquiries from the contact form: up to 24 months after the conversation ends, then deleted. If your enquiry leads to an ongoing relationship — a partnership, a trial, a contract — we keep it for as long as that relationship lasts.
• Spam-protection counters: deleted once the counting window has passed, normally within fifteen minutes.
• Player and staff profiles: published while the person is with the organisation. Afterwards the profile is unpublished or archived, while match results and achievements naming them remain as a historical record.
• Staff accounts: removed when the person no longer needs access.
• Server logs: kept for the short period our hosting provider retains them.
• Analytics counts: retained by our analytics provider for their standard period. They are aggregate totals that identify nobody, so there is no individual record in them to delete.

Your rights

Under the GDPR you can ask us to:

• Give you a copy of the personal data we hold about you, and tell you what we do with it.
• Correct it if it is wrong or incomplete.
• Delete it where we no longer have a good reason to keep it.
• Restrict what we do with it while a dispute about it is being resolved.
• Object to processing we base on our legitimate interests, including anything you consider unjustified.
• Receive it in a portable format, where we process it by automated means on the basis of a contract.

To make a request, use the contact form or email contact@eonesports.gg and tell us what you need. We answer within one month. There is no charge, and we will not treat you differently for asking. We make no automated decisions about you and carry out no profiling.

If you are not satisfied with how we handle it, you can lodge a complaint with the Belgian Data Protection Authority — the Gegevensbeschermingsautoriteit / Autorité de protection des données — or with the supervisory authority in the EU country where you live.

Children

This site is not directed at children under 16. If you are under 16, please ask a parent or guardian before sending us a message. If you believe we hold or publish information about a child that should not be there, contact us and we will review it promptly and remove it where appropriate.

How we protect it

The site is served over HTTPS. The admin area requires a password and grants access by role, so staff see only what their role needs. Enquiries cannot be created, read or altered through any public interface — only through the form on this site, which validates everything it receives. Credentials and provider keys are held server-side and are never sent to your browser. No system is perfectly secure, but we take these measures seriously and keep them under review.

Changes to this policy

We will update this page when what we do with personal data changes, and the “last updated” date above will change with it. If a change materially affects people who have already contacted us, we will make that clear rather than relying on a silent edit.

Contact us

Questions about this policy, or a request about your own data, can be sent through the contact form or by email to contact@eonesports.gg.