Last Updated: October 25, 2026
This policy explains what INVASION collects when you visit this website, sign in, or buy something, why we hold it, who it is shared with, and how to get it removed. It covers this website only; it does not cover the DayZ game servers themselves, Discord, Steam, or any other service you reach from here.
When you play on our DayZ servers, the game server, our server host, DayZ’s built-in anti-cheat (BattlEye) and our ban management service (CFTools) process your Steam ID and IP address to connect you, protect the game from cheating and enforce bans. That happens in the game, not on this website.
INVASION is run from the United States. For visitors in the European Economic Area (EEA) and the United Kingdom, INVASION is the “controller” of the personal data described here, meaning we decide how and why it is used. Our contact details are in section 18.
We deliberately collect as little as possible. We never ask for your name, email address, postal address or payment details, and we could not give them to anyone if we tried, because we never receive them.
When you sign in with Steam, Steam confirms your identity to us and we hold, for the duration of your browsing session only:
If you also link Discord (optional, and only needed for perks delivered as a Discord role), we hold for the same session:
When you complete a purchase, the following is stored in our database until you ask us to remove it:
We do not store your email address, a receipt link, your real name, your billing address or any part of your card number.
Ban status. When you sign in or check out, your Steam64 ID is checked against the ban lists of our game servers and against our ban list on CFTools, a ban management service. A banned account is shown as banned on its profile and cannot check out. See section 10.
Your IP address. Like any website, your IP address passes through our hosting and security providers (Railway and Cloudflare) when you load a page. We do not store it with your account or orders. The site uses it only to slow down abuse and keep the site secure, and keeps only a scrambled, one-way version for a few minutes to count requests.
We do not collect any “sensitive” personal information (such as health, ethnicity, religion, precise location or government ID numbers). Please do not send us any in a support ticket.
Our leaderboards page publicly displays, for anyone who plays on our servers, the in-game character name recorded by the game server and gameplay statistics such as kills, deaths and longest shot. Your Steam64 ID is not shown. This information comes from the game servers, not from your purchase, and appears whether or not you have ever bought anything or signed in here. Names go through a filter before they are shown.
If you would rather not appear on the leaderboards, contact us and we will remove your entry.
This website sets one cookie, PHPSESSID. It holds a random session identifier so the site can remember that you are signed in and what is in your basket. It contains no personal information, expires when you close your browser, and is strictly necessary for the site to work at all. There is no consent banner because we set nothing that would require one.
Cloudflare, which protects this site from attacks, may set its own strictly necessary security cookie (for example cf_clearance) if it needs to check that a visitor is not a bot. It is not used to track you.
We use no analytics, advertising, tracking, session-recording or profiling tools of any kind. We do not track you across other websites, and nothing on this site records your keystrokes or mouse movements.
All fonts and icons are hosted on our own server. Loading a page does not send any request to Google Fonts or any other font or code provider.
The featured video on our home page is a link to YouTube, not an embedded player. Nothing from YouTube or Google is loaded on our pages. If you follow that link you leave our site and YouTube’s own terms and privacy policy apply there.
Do Not Track and Global Privacy Control. Because we do not track you across sites or sell or share your information, there is nothing for these browser signals to switch off. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing, which we do not do anyway.
All payments are processed by Stripe. When you check out, you are handed to Stripe’s own hosted payment page. Your card details are entered on Stripe’s systems, never ours, and we never see or store them.
To process your payment, Stripe collects information directly from you, which may include your name, email address, billing address, card details, IP address and device or browser information. Stripe acts as an independent data controller for that information and may share it with its own affiliates and service providers. We receive back only the transaction reference, the amount, the currency and whether the payment succeeded.
Stripe’s handling of your data is governed by its own privacy policy: stripe.com/privacy. To exercise your data rights over information held by Stripe, contact Stripe directly.
We do not use your information for marketing, and we do not send marketing messages.
Data protection law in the EEA and UK (the “GDPR”) requires a legal basis for each use of personal data. Ours are:
We do not rely on consent for anything, because we do nothing that would need it.
Session information is discarded when your browsing session ends. Purchase records are kept while the perk you bought is active and afterwards only as long as needed for support, accounting, tax and dispute resolution. A chargeback can be raised months after a payment, and we need the record to answer it. Server logs are kept only briefly. When we no longer need something, we delete it.
If the information is yours, you can have it deleted. Ask us and we will remove the personal data we hold about you (your Steam64 ID, Discord ID, order records and leaderboard entry) from our database. We will confirm when it is done.
Wherever you live, you can also ask us to:
We do not charge for this and you will not be treated differently for asking. We aim to answer within one month (and in any case within the time the law where you live allows, such as 45 days under US state laws). If a request is complex we may need longer, and we will tell you why.
We will only act on a request from the owner of the information. Because we hold no email address or real name, we verify ownership through the Steam or Discord account the data belongs to. Signing in with that account, or messaging us from it, is how we check. Where the law allows you to use an authorized agent, we will ask for proof that you gave them permission.
Two limits. Deleting your records removes any active perk with them, including priority queue access, and it cannot be restored afterwards without a new purchase. And we may need to keep a minimal record of a transaction where the law requires it, or where a payment dispute is still open; we will tell you if that applies.
If we say no, we will explain why. You can ask us to reconsider by replying to that answer, and we will review the decision. If you are in the EEA or UK and are not happy with our response, you have the right to complain to your local data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk). In the US, if we deny your appeal you can contact your state’s Attorney General.
To delete data held by Stripe, contact Stripe. We cannot do it on your behalf.
The only automatic decision the site makes about you is the ban check in section 2: a Steam account that is banned on our servers or our CFTools ban list cannot check out. Bans themselves are made by our staff, not by software. If you think the check is wrong, open a ticket in our Discord and a person will look at it. We do not profile you.
We do not sell your information, we do not share it for advertising, and we do not give it to anyone for their own marketing. We share it only with the providers we need to run the site and deliver what you bought:
We may also disclose information where the law requires it, to respond to valid legal process, to protect our rights or our players (for example when answering a chargeback), or to whoever takes over running INVASION if the community is ever transferred, in which case this policy continues to apply to it.
Residents of California and other US states with privacy laws have the rights in section 9. In the terms those laws use, over the last 12 months:
California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing. Nevada residents: we do not sell covered information.
We are based in the United States, and this website and its database are hosted there. If you visit from outside the US, including from the EEA or UK, your information is processed in the United States, whose data protection laws may differ from yours. Where our providers move personal data out of the EEA or UK, they rely on recognized safeguards such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
Connections to this site are encrypted. Payment happens on Stripe’s page, so your card details are never sent to us and we do not hold them. Access to our systems is limited to staff who need it. We take reasonable steps to protect the information we do keep, but no website can promise perfect security.
This site is not intended for anyone under 18, and we do not knowingly collect information from children. If we learn that we hold information from someone under 18, we will delete it. If you believe a child has provided us with personal information, please contact us.
This site links to services we do not run, such as Discord, Steam, YouTube and TikTok. What happens on those sites is governed by their own privacy policies, not this one.
If a breach affects your personal data, we will notify you and any applicable regulator as required by law.
We may update this policy as the site changes. The current version is always on this page, with the date it was last updated at the top. If we make a significant change, we will also announce it in our Discord.
For anything in this policy, including a request to see or delete your data, open a ticket in our official Discord server, or email [email protected]. Discord is the fastest route and lets us confirm the request came from you.