Privacy Policy

2TUN is a gaming, entertainment and community platform. It provides access to gaming-related experiences, tournaments and player records, creator content through the CC Content Lab, streaming and creator discovery, virtual coins and other interactive features.

Website: https://2tun.com Legal operator: [TO CONFIRM: registered legal name of the 2TUN operator] Registered address: [TO CONFIRM: registered business address] Privacy contact: everything2tun@gmail.com

The operator of 2TUN is the data controller for the personal information described in this policy. Where a phrase in this policy is marked as requiring confirmation, it means the detail has not yet been verified and is not being asserted as fact.

You provide information when you register, sign in, build an avatar, join a tournament, submit content, send a report, or buy coins.

Account information: - Username, email address and registration details. - Password and authentication information, handled through our authentication provider. - Account preferences, such as language and interface choices. - Account security information, such as sign-in method and security settings.

Avatar and profile information: - Your avatar's appearance and customisation choices (for example character, skin tone, hair, kit colours and equipped cosmetics). - Player card details and cosmetic slots you have equipped. - Your public display name, gamertag, console or platform, country, position and short biography where you choose to provide them. - Profile visibility and privacy settings, including the option to hide your public avatar.

Creator content (CC Content Lab) information: - Content submissions, file details and installation notes you provide. - Creator profile details, such as creator name, username, biography, links and supported games. - Submission descriptions, preview images, compatibility notes and moderation notes. - Download, like and save counts associated with your submissions.

Promotional information: - Tournament promotions, creator promotional material, stream links, promo graphics and event details you submit. - Contact details you give us for that promotion.

Support and reporting information: - Messages you send through the Contact page, the Help Desk, the reception desk, private messages to staff, reports and removal requests. - Any information you include in those messages, which you choose to send.

Some information is created or recorded automatically when you use 2TUN:

• Technical information: IP address, browser type, device type, operating system and approximate region derived from your connection.
• Session and security information: sign-in records, authentication sessions, security logs and records of suspicious or blocked activity.
• Platform activity: playroom, Arcade and game-discovery interactions, tournament entries and results, rankings, trophies, Watch and Live interactions, Music Box and DJ Station activity, and community interactions such as posts and reactions.
• Coin and purchase records: coin balances, coin purchase and spend history, transaction records, order references and payment status.
• Cookie preferences: the choice you record in our cookie notification, the date and time of that choice, and the policy version you agreed to or rejected.

We do not receive or store your full card details. Card details are entered on and handled by the payment provider.

We use personal information to operate 2TUN, and each use rests on a specific lawful basis under the UK GDPR. We do not rely on consent as a blanket basis for everything.

Performance of our contract with you: - Creating, maintaining and authenticating your account. - Saving your avatar, player card, inventory and account preferences. - Maintaining your individual coin balance and processing coin purchases, spends and refunds. - Registering you for tournaments and maintaining your player records. - Operating the CC Content Lab submission, review and publication process. - Providing the features you use and responding to support requests.

Legitimate interests: - Keeping the platform secure, preventing abuse, fraud and manipulation of coins or tournament results. - Investigating technical problems and improving reliability and performance. - Moderation of community content, promotions and submissions. - Protecting the rights of 2TUN, our users, creators and rights holders. We only rely on legitimate interests where our interest is not overridden by your rights, and you may object at any time (see your rights below).

Legal obligation: - Keeping transaction and accounting records where the law requires it. - Responding to lawful requests from regulators, courts or law enforcement. - Handling copyright, trademark and privacy complaints.

Consent: - Optional analytics or marketing cookies, where we introduce them and you opt in. - Any other optional use where we specifically ask you and you agree. You can withdraw consent at any time through Cookie Settings.

Every 2TUN user has their own individual account and account-specific information. We take measures designed to ensure that:

• Each account's details, avatar, coin balance, transaction records, private settings, authentication information and account activity are kept separate from every other account.
• A signed-in user can access and change only their own account information. Profile changes run through server-side checks that confirm the account making the request is the owner of that record.
• Administrative access to account data is limited to authorised personnel who need it to operate, support or secure the platform.

Public information is different from private information. Player cards, gamertags, tournament results, trophies and avatar appearance are designed to be publicly visible, and may be seen by signed-in members and by visitors who are not logged in. Your email address, coin balance, inventory, private messages, security settings and transaction records are not part of that public view.

Deactivating your public avatar hides it from the 3D world and from public player displays. Deactivation does not remove your account or your records; it only changes what is shown publicly.

Coin purchases are processed through Base44 Payments, the payment service integrated into 2TUN. Card details are entered on and processed by the payment provider and its payment infrastructure; 2TUN does not store your full card number.

We do receive and keep the records needed to run the platform: - The product and coin package purchased, quantity and amount. - Currency and payment status. - A payment provider reference (checkout and order identifiers) that links the payment to your account. - The email address used at checkout.

We use these records to credit your individual coin balance, to verify that a payment was genuinely approved and paid before any coins are granted, to handle disputes and refunds, and to keep accounting records.

Coins are a virtual platform currency. They are not money, cannot be exchanged for cash and cannot be withdrawn.

Creators may submit custom content, modifications, artwork and other materials to the CC Content Lab. We process the information necessary to review, moderate, publish, distribute, promote or remove a submission, including the submission itself, its files, its description and its moderation history.

Authorised personnel can access creator information and submitted content where necessary to operate the CC Content Lab, review a submission, respond to a complaint, or apply these documents.

Submissions are not automatically public. A submission may be a draft, awaiting review, approved, rejected, quarantined or removed. Only content in a published state is shown publicly.

Early Access and paid content arrangements may apply to certain submissions. Where they do, the additional information needed to operate them (such as an External Access link you supply) is processed for that purpose.

Creators keep ownership of their original work. Submitting content does not transfer copyright to 2TUN.

2TUN relies on service providers to run the platform. The providers verified as part of the current implementation are:

• Base44, which provides the platform infrastructure used by 2TUN: application hosting, the database that stores platform records, file storage, authentication, backend functions and payment integration.
• Base44 Payments, which processes coin purchases and provides the payment infrastructure behind them.
• Google, where you choose to sign in with a Google account.
• Email delivery, used to send account emails such as verification and password reset messages.

We share personal information with these providers only as needed to provide the relevant function, and they process it on our instructions or as independent controllers of their own services.

2TUN also links to and references external services that we do not operate, including Discord, video and streaming platforms, social media platforms, gaming platforms and console services, external content hosting services, and external tournaments or creator promotions. Those services have their own privacy policies and act as independent controllers of the information they collect. We do not control how an independent third-party service processes personal information. If you follow a link to an external service, that service's own policy applies.

No analytics provider, advertising network or advertising pixel is currently integrated into 2TUN. If one is added, this policy and the Cookie Policy will be updated before it is activated.

2TUN uses a small amount of browser storage that is strictly necessary to work: keeping you signed in, remembering your language and interface preferences, and remembering your cookie choice. Optional categories (analytics and marketing) are switched off unless you opt in, and none are currently active. Full detail, including how to change your choice, is in our Cookie Policy.

We keep personal information only for as long as reasonably necessary for the purpose it was collected for, and to meet legal, tax, accounting and safety obligations. Retention differs by type of information:

• Account information: kept while the account exists, and for a limited period afterwards where needed to resolve disputes, prevent abuse or meet legal obligations.
• Security and sign-in logs: kept for a limited period to detect and investigate abuse.
• Transaction and accounting records: kept for the period required by tax and accounting law.
• Tournament records, results, rankings and trophies: treated as part of the platform's permanent competitive record, because they form part of other players' and the community's history.
• Content submissions and moderation history: kept while the content is published and afterwards where needed to handle complaints and repeat submissions.
• Moderation and support reports: kept while the report is open and for a limited period afterwards.
• Legal correspondence, including copyright and privacy complaints: kept for as long as needed to handle the matter and demonstrate compliance.

Specific maximum retention periods for each category: [TO CONFIRM with the owner before publication]. We have not invented fixed periods here; until they are agreed, information is kept for as long as necessary for the purpose concerned.

You have the following rights over your personal information:

• Right of access: to be told what we hold and to receive a copy of it.
• Right to rectification: to have inaccurate information corrected, and incomplete information completed.
• Right to erasure: to have your information deleted where there is no continuing lawful reason for us to keep it. Some records, such as completed tournament results and financial records, may need to be retained.
• Right to restrict processing: to limit how we use your information while a concern is investigated.
• Right to object: to object to processing based on legitimate interests, and to direct marketing at any time.
• Right to data portability: to receive information you provided to us in a structured, commonly used, machine-readable format, where the right applies.
• Right to withdraw consent: where we rely on consent, at any time, without affecting processing that already happened.
• Right to complain: to complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/.

To make a privacy request, email everything2tun@gmail.com with enough detail to identify your account and what you want. We may need to verify your identity before acting, and we will respond within the time the law allows. Making a request is free.

The 18+ Lounge is a restricted area of 2TUN intended for adults aged 18 and over. It is a separate, optional area with an entry fee; the rest of 2TUN is not an 18+ area.

For the 18+ Lounge we check age at the point of entry using the date of birth you enter. That check is performed in the moment and 2TUN stores only the result: a flag on your account showing that you have verified your age. Your date of birth is not stored.

Access may be refused or withdrawn where there is reasonable evidence that the age requirement has not been met or that the check has been misused.

Minimum age to register a general 2TUN account: [TO CONFIRM with the owner before publication]. 2TUN's general registration requirement is separate from the 18+ Lounge restriction.

2TUN's service providers may process or store information outside the United Kingdom, including in the European Economic Area and the United States. Where information is transferred outside the UK, we rely on the provider's appropriate safeguards, such as an adequacy decision or the UK's International Data Transfer Addendum to standard contractual clauses. You can ask us for more detail about the safeguards used for a particular provider.

We take organisational and technical measures intended to protect personal information, including:

• Individual accounts with authentication through our authentication provider.
• Server-side checks that confirm a request to change account information comes from the owner of that record.
• Restricting sensitive administrative actions to the platform owner's authorised account.
• Keeping sensitive values such as payment keys in server-side configuration rather than in the browser.
• Keeping optional tracking off until consent is given.

No online service is completely secure. If you believe your account has been accessed without your permission, change your password and contact us at everything2tun@gmail.com.

We may update this policy as 2TUN develops, for example when a feature, provider or legal requirement changes. The current version and revision date are shown at the top of this page. Where a change materially affects how we use your information, we will give notice on the platform and, where the law requires it, ask for your consent again.

Questions about this policy: everything2tun@gmail.com.

Revision date: 2026-11-10 · Version 1.1