Privacy policy

Esport Arena (org. no. 935 533 937) is a voluntary association providing a digital platform for esports: tournaments, news, social features and, in time, payments. The site is available at www.earena.no. Other domains (such as norgesligaen.no, esportarena.no and esportarena.org) redirect here.

Esport Arena is the data controller for the personal data processed through the platform. You can reach us at support@earena.no.

Fair competition (fair play) is a core value for Esport Arena. To prevent and detect cheating we process certain information on the basis of legitimate interest.

In concrete terms this means:

• The interest: ensuring fair tournaments and protecting the community against cheating, account sharing, VPN use and circumvention of exclusions.
• The data: IP address at registration and during tournaments, game account ID, and information from the anti-cheat built into the game or platform as well as from an approved third party (eWave/Overwatch for PUBG).
• Retention: anti-cheat related logs are kept for as long as the account is active, and deleted within 12 months of the account being closed.
• Third party: eWave makes an independent assessment of cheating for PUBG. We share the game account ID only where cheating is suspected.
• Akros (planned for CS2): Akros Anti-cheat LLC is an independent controller, not our processor. You install the software yourself and consent directly to Akros. It runs at kernel level (Ring 0) and collects, among other things, hardware identifiers, running processes and drivers, file paths containing your OS username, screenshots during gameplay, and mouse and keyboard telemetry. Akros states neither a storage region nor a retention period in its policy. If you prefer not to install it, you cannot take part in tournaments that require Akros.
• Human review: an automated flag never leads to a sanction without a subsequent human assessment, in line with the case handling set out in the overall regulations.
• Your rights: you may object to processing based on legitimate interest, and you may complain to the Norwegian Data Protection Authority.

We have assessed this processing: because no sanction is ever imposed by automated means alone (a human assessment always takes place), the rules on purely automated decisions in Article 22 of the GDPR do not apply, and we do not consider a full data protection impact assessment (DPIA) to be required. A legitimate interests assessment (LIA) has been carried out and documented internally.

Personal data is stored in databases held by our processors (see the overview above) and in backups, to a professional security standard. We use technical and organisational measures to protect data against unauthorised access, loss and alteration.

We keep personal data for as long as it is needed for the purposes described above, or for as long as the law requires. Note that content you have published may remain even if you delete your account.

We recommend choosing a strong password that you do not use anywhere else, as we do not offer two-factor authentication for email and password sign-in.

You have the right to:

• Access the personal data we hold about you.
• Have inaccurate information corrected – optional information you can edit yourself.
• Request the deletion of your data (the “right to be forgotten”), with some exceptions.
• Request that processing be restricted, for example by declining non-necessary cookies.
• Data portability – you can download a copy of your profile-related data.
• Object to processing based on legitimate interest (for example anti-cheat and logging).
• Withdraw your consent at any time, without affecting processing already carried out.

You can download a copy of your profile-related data and request the deletion of your account under Settings → Privacy. Some information may be retained where we have a lawful basis for it – for example security logs, accounting records, tournament history, published content, or information needed to handle claims, abuse or exclusions.

For access requests, deletion or any other enquiry, contact us at support@earena.no. You may also complain to the Norwegian Data Protection Authority (datatilsynet.no).

Download your data

Under Settings → Privacy you can download a copy of your profile-related data (profile, game identities, clubs, teams and tournament registrations) as a JSON file at any time.

Delete your account

You can delete your account under Settings → Privacy (or through Clerk). When you do, the following happens:

• Your Clerk user is deleted – email, sign-in and connected accounts are removed.
• Your profile is anonymised: name, profile and banner image, biography, location and social links are removed, and the profile is hidden from the player pages, from search and from the market.
• Results and history (tournaments, teams and clubs) are kept pseudonymously, so that competitive history and other participants’ data remain correct.
• Anti-cheat links (Steam/Discord/player ID, tied to the IP log) are kept for up to 24 months so that cheating and circumvention of exclusions can be dealt with, and are deleted thereafter. Basis: legitimate interest and the establishment or defence of legal claims (Art. 17(3)).

Some information may be kept longer where the law requires it (for example accounting records) or where it is necessary in order to handle claims or abuse.