Privacy Policy

Last updated: 12 August 2026

1. About This Website

This website is operated by Nr.1 Schwarze Braunschweiger Schar (Nr1 SBS), a non-profit online gaming community centred around Mount & Blade: Warband — Napoleonic Wars. The site exists solely to support the community's internal organisation — tracking events, members, ranks, and medals. No commercial activity takes place.

Contact: admin@nr1sbs.eu

2. What Data We Collect

When you create an account we collect your e-mail address and a hashed password (we never store passwords in plain text). No other personal data is required.

When you submit an enlistment application via the Enlist page, we additionally collect your contact details (Steam URL, e-mail address, or Discord username), your stated motivation (optional), confirmation of the agreements you ticked, and your IP address (used solely to prevent spam submissions). By submitting the form you consent to this data being stored and processed for the purpose of evaluating your application. Applications are retained until manually deleted by a staff member.

3. Purpose and Legal Basis

We process your e-mail address for one purpose only: creating and maintaining your user account so you can access member-only sections of the site. The legal basis is performance of a contract — by registering you agree to use the account functionality we provide.

We do not use your e-mail for newsletters, marketing, or any third-party sharing.

4. How Long We Keep Your Data

Your e-mail is retained for as long as your account exists. You can request deletion of your account and all associated data at any time by contacting us at admin@nr1sbs.eu.

5. Third-Party Processors

  • Hosting provider — the server where the application and database run. Your data is stored on infrastructure operated by our hosting provider under a data processing agreement.
  • Google Analytics — anonymised, aggregate page-view statistics. No personal account data is shared. You can opt out via the Google Analytics opt-out browser add-on.
  • Microsoft Clarity — anonymised session heatmaps and analytics. No personal account data is shared. See Microsoft's privacy statement.

6. Your Rights

Under the GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your account and personal data.
  • Objection — object to processing where the legal basis is legitimate interest.

To exercise any of these rights, e-mail admin@nr1sbs.eu. We will respond within 30 days.

7. Security

All traffic is encrypted via HTTPS/TLS. Passwords are hashed with bcrypt before storage and are never accessible in plain text — not even to administrators.

8. Cookies

We use a single session cookie required for login functionality. Google Analytics and Microsoft Clarity set their own analytics cookies; these are anonymised and do not identify you personally.