Terms and privacy

These terms govern your use of mmapromoter.com and of the MMA Promoter alpha. The privacy policy in Part Two explains what we hold about you and what you can make us do with it. The two are published together because they are read together.

MMA Promoter is made and operated by Athletic Algorithms, registered in France under SIREN 897 676 250 — “we” and “us” throughout. You can reach a person at [email protected], and that address is monitored. The publisher, the registration and the host are identified in full in the legal notice at the foot of this page.

Part One — Terms of Service

1. What you are agreeing to

Using this website, or signing in to the alpha, means you accept these terms. Joining the mailing list does not: that rests on your consent alone and is governed by Part Two, which also tells you how to withdraw it. If you do not accept these terms, do not sign in. There is nothing to pay and nothing to cancel.

2. This is an alpha, and it will behave like one

MMA Promoter is unfinished software offered free of charge for testing. It will contain defects. Features will change or be removed. The game may be unavailable without notice, and the test may end at any time.

We provide the alpha as it is. To the fullest extent the law allows, we give no warranty that it will work, that it will keep working, that it will suit any purpose you have in mind, or that defects will be corrected.

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot lawfully be limited. Subject to that, we are not liable for lost saves, lost time, or any indirect or consequential loss arising from your use of a free, unfinished game.

3. Who may take part

You must be at least 15 years old to take part, and by signing in you confirm that you are. That is our own eligibility rule for this alpha, not a statement about the age of digital consent where you live — across the European Union that age is set anywhere between 13 and 16.

Access is personal to you. Do not share your sign-in, and do not sell or transfer your access to the alpha.

4. How you get in

The alpha is reached through an email address and a password, a Discord account, or a Google account. If you take the password door, keep both the password and the recovery code you are shown once: we store only fingerprints of them, cannot read either back, and send no email at all, so neither can be restored to you — the other two doors stay open to you in that case. Your access lasts as long as the sign-in session is valid, and we may end it as described in section 8.

Signing in with Discord adds your account to the MMA Promoter server and grants you the alpha-tester role. That is the point of it: the server is where builds are announced and where bugs get fixed. You authorise this on Discord’s own consent screen, and leaving the server ends your alpha access with it.

5. Your saved game lives on your machine

Your career is stored in your own browser and is never uploaded to us. We cannot read it, restore it, or move it between your devices — those are consequences of the same design decision, and you get the good half and the bad half together.

Clearing your browser data deletes your save. An update to the game world may also invalidate it: during an alpha the world itself is still being rebuilt, and when it changes shape, saves made against the old one stop loading. Export your save if it matters to you. We are not able to recover one.

6. Custom databases, and what you put in them

The game lets you import your own fighter data and portraits. Anything you import stays on your device and is never sent to us.

That freedom is yours to use responsibly. If you import real people’s names, likenesses or a real promotion’s branding, you are the one doing it, and you are responsible for having the right to. MMA Promoter ships no real fighters and no real organisations, and is not affiliated with the UFC or any other promotion. UFC is a trademark of Zuffa, LLC.

7. What belongs to whom

The game, its code, its artwork, its fighter portraits, its written content and the MMA Promoter name are ours or our licensors’. Testing the alpha gives you permission to play it, and no other rights.

When you send us a bug report, post feedback in the testers’ server, or otherwise tell us how to make the game better, you allow us to use that feedback to do exactly that, without owing you payment or credit. You keep whatever rights you have in anything you wrote; we simply need to be able to act on it.

That permission covers playing the game, and stops there. Do not decompile the build, deobfuscate it, or work backwards from it to its source; do not copy, mirror, rehost or redistribute it, whole or in part, on another site, service or domain; and do not remove or work around the technical measures protecting it. Where the law gives you one of those rights regardless — as EU law does for interoperability — the law wins, and this paragraph does not ask you to give it up.

8. Suspension and ending access

We may suspend or end your access to the alpha at any time, and will normally say why. The reasons that would actually lead us to are: attacking or attempting to break the site or the game; using automated means to access it at scale; circumventing the sign-in; harassing other testers or the developer; or importing and distributing content you have no right to.

You can leave whenever you want. Deleting your access is described in Part Two, section 9.

9. Changes

We will change these terms as the game changes. When we do, the date at the top moves and the current version is always the one on this page. If a change materially affects you, we will say so in the testers’ server and on the mailing list rather than relying on you to notice.

10. Law and disputes

These terms are governed by French law. If you are a consumer resident in the European Union, this does not deprive you of the protection of the mandatory rules of your own country’s law, and you may bring proceedings in your own courts.

If something goes wrong, write to [email protected] first. Almost everything is quicker to fix that way.

Part Two — Privacy Policy

1. Who is responsible for your data

Athletic Algorithms, registered in France under SIREN 897 676 250, is the data controller. Questions, requests and complaints: [email protected]. The postal address and the telephone number are in the legal notice at the foot of this page.

2. The short version

The game runs in your browser and your saved career never leaves your machine — we could not read it if we wanted to.

We store what is needed to let you in, to write to you when the alpha opens, and to see where the game breaks.

Nothing is sold, shared for advertising, or handed to a tracking company. There are no third-party trackers on this site.

3. What we hold, and why

If you join the mailing list

Your email address, the language you were reading in, a two-letter country code derived from your connection, and the dates you first and last signed up. We use it for one thing: telling you the alpha is open. Legal basis: your consent.

If you enter the alpha with an email address and a password

We store your address, the dates of your first and most recent sign-in, a two-letter country code derived from your connection, and the language you were reading in. Your password is not stored: what we keep is a PBKDF2-SHA256 fingerprint of it, salted and repeated 100,000 times. We hold no password in plain text and cannot read yours back out of the fingerprint. The recovery code you are shown once is kept the same way. Legal basis: performance of these terms — it is how we give you the access you asked for.

This door involves nobody but us: no third party sees your address, and no email is ever sent to it — this service has no mail sender at all, which is also why the reset is a code you write down rather than a link we send you. The address is not added to the mailing list either; signing in is not signing up, and only the form on the home page does that. Ask us to delete the account and both fingerprints go with it.

If you enter the alpha with Discord

Discord gives us your account id, your username and your display name. We store those, a two-letter country code, and the dates of your first and most recent sign-in. With the permission you grant on Discord’s screen we add your account to our server and give it the alpha-tester role. We never read your messages, your other servers or your friends. Legal basis: performance of these terms — it is how we give you the access you asked for.

If you enter the alpha with Google

Google gives us your account’s permanent identifier and your email address, and nothing else; we request no other permission. Your session is keyed on the identifier rather than the address, so changing your Google address does not cost you your access. We store both, a two-letter country code, and your first and most recent sign-in dates. The address is not added to the mailing list — signing in is not signing up, and only the form on the home page does that. Legal basis: performance of these terms.

The sign-in cookie

Entering the alpha sets one cookie, and it says no more than “this browser is allowed in”. It is signed, unreadable to other sites, expires after thirty days, and is the only cookie this site sets. It follows you nowhere, which is also why there is no cookie banner to click through: a cookie strictly necessary to deliver a service you asked for does not need one. A second, short cookie exists for ten minutes during sign-in to protect the exchange against forgery, and is discarded immediately afterwards.

While you play

The alpha records how far people get, so that a two-week test produces more than anecdotes. One row per week you play — the week number, your promotion and its tier, your cash, your roster size, how many events you have run, your language, and the build and world version you are on — plus sparse markers for crashes, tutorial steps and milestones such as your first completed event.

Those rows are keyed by a code derived from your session inside our own server. They are pseudonymised, not anonymous: the code carries no name, no address and no social-account identifier, but we are the ones who operate the sign-in it is derived from, so the rows remain personal data under the GDPR and we treat them as such. We store your IP address nowhere. Cloudflare, which serves the site, processes it to deliver pages and block abuse, as any host must. Legal basis: our legitimate interest in knowing whether the game we are building actually works. You can object; see section 8.

If you report a problem

The report carries what you typed plus the technical context listed on the form itself: build number, world version, database version, the week you are on, your promotion, your language, your browser’s user-agent string, and the last few screens you opened. It goes to a private channel where bugs are triaged. Do not type anything into that box you would not want read there.

The same thing in one table

Nothing here is new — it is section 3 again, arranged so you can check it at a glance.

Where each of these comes from

You give us your email address, your password, and anything you type into a report. Discord and Google give us the account details listed above, and only those, when you choose their door. Your two-letter country code is inferred from the IP address your connection presents to the server; the address itself is used for that and then not stored. Everything else — the weekly rows, the build and world version, the browser string attached to a report — is generated automatically while you play.

Automated decisions

We take no automated decisions about you. Nothing we hold is used to profile you, and nothing here produces a legal effect on you or anything similarly significant. The game is full of automated decisions about fighters; none of them are about the person playing.

4. Who else touches it

One company processes data on our behalf: Cloudflare, which hosts and serves the site, blocks abuse, and stores everything described above on our instructions. It is our processor and acts only as we tell it to. Discord and Google are not our processors. If you pick their door they authenticate you as controllers in their own right, under their own privacy policies, which govern your relationship with them; they pass us only what section 3 lists. Where personal data reaches the United States we rely, as applicable, on the European Commission's adequacy decision for organisations certified under the EU–US Data Privacy Framework, or on Standard Contractual Clauses together with any supplementary measures the law requires. For Cloudflare, our only processor, the mechanism is the adequacy decision: it is certified under that Framework.

We use no advertising network, no analytics product that profiles you, and no social pixels. We do not sell your data, and we never will. Page views are counted by Cloudflare Web Analytics, whose small script Cloudflare injects at the edge from static.cloudflareinsights.com — it is in none of our files, which is why you will not find it in the page source we wrote. It sets no cookie, stores nothing on your device, and builds no profile of you; we use it for one purpose, measuring aggregate traffic to this site, and it follows you to no other.

5. How we protect it

We use technical and organisational measures appropriate to a project of this size. Connections are encrypted in transit. Passwords and recovery codes exist only as salted hashes. The sign-in cookie is signed and readable by nobody else. Gameplay rows are keyed by a pseudonym rather than by your account. Operational data is reachable by one person, the one who writes to you when you ask a question. No system is perfectly secure, and we do not claim this one is; if a breach ever puts you at risk, we will tell you and the CNIL within the deadlines the law sets.

6. How long we keep it

Mailing-list entries: until you ask us to remove them, or until the launch they exist to announce has passed and the list is no longer needed. Alpha sign-in records: for the duration of the alpha and up to twelve months afterwards. Gameplay rows and crash reports: up to twenty-four months, after which they tell us nothing we did not already learn. Ask, and any of it goes sooner — unless we are required or entitled to keep something, to establish or defend a legal claim, or to stop an access we suspended under Part One, section 8 from simply signing in again. If that ever applies to you we will say which record it is and why.

7. Children

The alpha is open only to people aged 15 or over, and we do not knowingly collect data from anyone below that age. If you believe a child has signed in, write to us and we will delete the account and its data.

8. Your rights

You may ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable form, or to object to processing we carry out on the basis of legitimate interest. You may withdraw consent to the mailing list at any time, which does not affect anything done before you did.

To exercise any of them, write to [email protected], from or naming the address or account you signed in with, and say which right you want. We answer within one month. There is no form to fill in, no account to manage, and nothing to pay.

If you think we have handled your data badly, you can complain to your national data protection authority. In France that is the CNIL, at cnil.fr.

9. Deleting your access

Ask, and we delete your alpha record and your mailing-list entry. If you signed in with Discord you can also simply leave the server, which ends your access; tell us if you want the record gone as well, because leaving the server does not by itself erase it.

Your saved game is on your own machine and is yours to delete: clear the site’s data in your browser and it is gone, including from us, because it was never with us.

10. Changes to this policy

When what the code does changes, this page changes in the same breath — it is written as a description of the software, not from a template, and every claim in it maps onto a specific line of ours. The date at the top tells you when it last did.

Who to write to

Athletic Algorithms — [email protected]. One person reads that address.