The Citadel - Privacy policy

This policy explains in detail how “The Citadel” (hereinafter “we”, “us”, “our”, “The Citadel”, “https://thecitadel.forum”) and phpBB (hereinafter “they”, “them”, “their”, “phpBB software”, “www.phpbb.com”, “phpBB Limited”, “phpBB Teams”) use any information collected during your use of this forum (hereinafter “your information”).

What Data We Collect
Your information is collected in two ways. Firstly, by browsing “The Citadel” the phpBB software creates a number of cookies (small text files) stored in your browser’s temporary files. These cookies contain a user identifier and session identifier automatically assigned to you, and a record of which topics you have read to improve your experience.

Secondly, we collect information you submit to us. This includes anonymous posts, account registration details (username, email address, password), and posts you create while logged in. Additional profile fields are optional unless specifically marked mandatory during registration.

Legal Basis for Processing
We process your data on the basis of contract (to provide you with a functioning forum account) and our legitimate interests (maintaining security, preventing spam and abuse, and operating the community).

How Your Data is Used
Your account data is used only for operating the forum and communicating with you about forum-related matters. IP addresses are logged with posts to help enforce forum rules and protect against spam and abuse.

Cookies
Cookies are required for login sessions and to track topic read/unread status. By using this forum you consent to these essential cookies. If we use analytics or advertising cookies in the future, we will provide additional notice and consent options.

Data Security
Your password is stored as a one-way hash and cannot be recovered, only reset. You are responsible for keeping your password confidential and should not reuse it across multiple sites.

Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the right to request access to your personal data, correct inaccuracies, request deletion ("right to be forgotten"), and object to certain processing. To make a request, contact us at forum@thecitadel.forum. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

Data Retention
Your account data is retained while your account is active. Posts remain part of public discussions unless removed manually. If you request account deletion, your account will be anonymised and personal data removed where feasible.

Contact
For privacy questions or data requests, email us at forum@thecitadel.forum.