Live 12 humans online 4 active servers Peak online today 13 Record 102

Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains what personal data SOF2MP.COM collects, why we collect it, how long we keep it, who can see it and what choices you have. It applies to the website at www.sof2mp.com and its related services (the “Site”).

If you are in the UK or the European Economic Area, our GDPR Privacy Notice gives extra detail on the legal basis for each use and on your rights. Our Cookie Policy lists every cookie we use.

1. Who is responsible for your data

SOF2MP.COM is a non-commercial fan site run by BuLly in the United Kingdom, who is the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Contact for anything in this policy: [email protected].

2. The short version

  • We build game statistics from information SoF2 game servers already publish: in-game names, scores, teams, pings, maps and times. Servers do not tell us your IP address, email address or real name, and we do not try to find out who is behind an in-game name.
  • An account needs only a username and password. Giving an email address is optional.
  • We do not use advertising, analytics or tracking cookies, and we do not sell or rent your data to anyone.
  • You can download your data, edit it or delete your account yourself from My SoF2. If you do not have an account, you can still ask us to remove an in-game name and stop tracking it.

3. What we collect and where it comes from

3.1 Game statistics (anyone who plays on a tracked server)

Every couple of minutes our tracker asks the SoF2 servers on the public master server list for their status, which is the same information shown in any in-game server browser. From the replies we record:

  • in-game names (including any clan tags in them), scores, teams and pings;
  • which server and map you were on, the game mode, and when.

From this we build player pages, name history, match results, leaderboards, clan pages, achievements, records, seasons and activity charts. Players with a ping of 0 are treated as bots. Names containing blocked words, and names that are being used to verify an account (claim codes), are hidden from public pages.

3.2 Accounts

If you sign up we store your username, your password (as a one-way scrambled “hash”, so even we cannot read it), the date you joined, your role on the Site and, only if you give it, your email address.

3.3 Verified names, aliases and profiles

  • When you verify an in-game name or a server, we link it to your account and store the claim (what you claimed, when, and its status). Claim codes are never shown publicly.
  • Older names you attach (aliases) have their statistics combined with yours.
  • Anything you add to your player profile is shown publicly: profile picture, tagline, bio, country, favourite weapon, playstyle, Discord name and website link. All of it is optional.
  • If you report a claim that you think is wrong (a dispute), we store your report, who sent it, the reason and the outcome. Only site administrators can see it.

3.4 Booked games and predictions

  • When you book (RSVP) a game we store the name you enter and the time. If you are signed in we link it to your account. If you are not, we store a one-way scrambled code made from your IP address and browser so that you can cancel; the IP address itself is not stored.
  • Match predictions are stored with your account so that we can score them on the leaderboard.

3.5 Map downloads

We count how many times each map is downloaded, per day, without recording who downloaded it. To enforce the fair-use limit, we keep a scrambled form of your IP address and a download count for the length of the limit window (normally 15 minutes), after which it is deleted automatically.

3.6 Security and spam protection

  • To stop automated sign-ups and abuse, we keep a scrambled form of your IP address for up to one hour after you submit certain forms.
  • Our web host keeps standard server logs (such as IP address, date and time, page requested and browser type) for security and troubleshooting.
  • Cloudflare, which protects and speeds up the Site, processes your IP address and request information to block attacks and bots. See section 6.

3.7 When you contact us

If you email us or message us on Discord, we keep the message, your contact details and our reply so that we can deal with your request.

3.8 Things we do not collect

We do not collect payment details (the Site is free), we do not use analytics or advertising services, and we do not buy data about you from anyone. We do not knowingly collect sensitive (“special category”) data. Please do not put any in your profile.

4. How we use your data

  • To run the Site’s statistics, leaderboards, achievements, match pages and community features.
  • To provide your account and the features you choose to use (verification, profiles, aliases, bookings, predictions).
  • To send emails you need, such as password resets and important account or policy notices, but only if you gave us an email address. We never send marketing emails or newsletters.
  • To post community updates to our Discord, such as “game on” alerts, records and, where enabled, match results. These can include in-game names.
  • To keep the Site secure, prevent spam, cheating, impersonation and abuse, and enforce our Terms and Use Policy.
  • To deal with requests, disputes and complaints, and to meet our legal obligations.

Rankings, ratings and achievements are calculated automatically. They are for fun and have no legal or similarly significant effect on you.

5. What is public

The purpose of the Site is to publish game statistics, so the following is visible to anyone, including through our public data feeds and widgets: game statistics linked to in-game names; clan pages; match results; verified names and the “Verified” badge; and everything on your public profile. Your email address, password, claims, disputes and IP-based codes are never public.

6. Who we share data with

We never sell your personal data or share it for marketing. We share it only as follows.

  • Service providers who help us run the Site and may only use the data on our instructions:
    • WPX: web hosting and the database, located in United Kingdom;
    • Cloudflare, Inc.: security, bot protection and content delivery (global network);
    • your email provider and ours, when we exchange emails.
  • Content loaded from other websites. When you view the Site, your browser fetches some items directly from other services, which therefore receive your IP address and browser details:
    • Google Fonts (Google LLC): the Site’s fonts;
    • 1fxmod.org: country flag images shown next to servers;
    • WordPress.org (s.w.org): emoji images in some browsers.

    These services do not receive any account information from us.

  • Discord, when our community announcements are posted to our Discord server, and when you follow a link to Discord.
  • Legal reasons. If we are required to by law, or where it is necessary to protect the rights, safety or property of our users, the public or us, for example to respond to a valid court order or to report a serious threat to the police.
  • A new operator. If the Site is handed over to another person or group to keep it running, your data may be transferred to them, but only if they agree to protect it in line with this policy. We will post a notice on the Site first.

7. International transfers

Some of our service providers (Cloudflare and Google) are based in the United States or operate worldwide, so your data may be processed outside the UK. Where that happens we rely on the safeguards UK law requires, such as UK adequacy regulations (including the UK–US “data bridge” for certified companies) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

8. How long we keep data

Data How long
Raw server snapshots 2 days
Per-server hourly activity 180 days
Live activity feed (joins, records, events) 90 days
Detailed play sessions 12 months after the session ends
Player totals, name history, match results, achievements, seasons While the Site runs, unless you ask us to remove them or delete them yourself
Account, profile, verified names, aliases, predictions Until you delete your account
Pending name or server claims Expire after 2 days; expired claims are deleted after 30 days
Resolved disputes 12 months
Bookings (RSVPs) Deleted 2 days after the booked game
Scrambled IP for sign-up and abuse protection Up to 1 hour
Scrambled IP for the map download limit For the length of the limit window (normally 15 minutes)
Web server logs 30 Days
Emails and support messages Up to 12 months after the matter is closed

Backups of the Site may hold copies of data for up to 30 days after it is deleted from the live Site.

9. Your choices and rights

  • See your data: on My SoF2, use “Download my data” to get a copy in a machine-readable (JSON) file.
  • Correct it: edit your profile and email address on My SoF2.
  • Remove your email: you can delete it at any time on My SoF2. Without one we cannot help with password resets.
  • Delete your account: use “Delete my account” on My SoF2. You can also choose to delete the game statistics of your verified names; they are hidden immediately, the names are added to our do-not-track list, and the statistics are permanently deleted after 14 days.
  • No account? Email [email protected] with the in-game name(s) you use. We will remove their statistics and add the names to our do-not-track list so they are not recorded again. Because anyone can type any name in-game, we may ask a few questions to make sure the request is genuine.
  • You also have the right to object to our use of your data, to ask us to restrict it, and to complain (see below).

We will reply to requests within one month. We do not charge for this. If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, or to the data protection authority where you live.

10. Children

You must be 13 or over to create an account. We do not knowingly collect personal data from children under 13 through accounts. If you believe a child under 13 has created an account, contact us and we will delete it. In-game names of all players are recorded from public game servers in the same way, so if you are a parent and want a child’s in-game name removed, email us.

11. Security

The Site is served only over an encrypted (HTTPS) connection. Passwords are stored as one-way hashes, access to the database and admin area is restricted, and IP addresses used for spam and download limits are scrambled and deleted automatically. No website can be completely secure, so please use a unique password for your account. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

12. Other websites

The Site links to game servers, clan and server websites, Discord and other sites that we do not control. Their own privacy policies apply when you visit them.

13. Changes to this policy

We will update this policy when the Site or the law changes. The “Last updated” date shows the latest version. If a change significantly affects how we use data we already hold, we will highlight it on the Site and, where you have given us an email address and the change requires it, tell you by email.

14. Contact

Questions or requests about your data: [email protected].