Privacy

What we store

Signing in with Steam creates an account. Depending on what you do with it, scrim.tf may hold:

• Your SteamID64, and the Steam persona name, profile URL and avatar Steam gives us when you sign in.
• Your scrim.tf nickname, once you choose one.
• Your TF2 playtime as Steam reported it, read once when your account is checked against the 250-hour minimum. If your Steam game details are private, we simply do not have it.
• ETF2L profile and team information — your league id, your teams, their rosters and divisions — synced from ETF2L so listings can say who is playing.
• Your Discord account id and username, but only if you choose to link Discord.
• The things you create here: listings, proposals, lineups, agreed matches, merc posts, merc offers and invites, and the contact details you attach to them.
• Notifications, and whether you have read them.
• Sessions: a hashed sign-in token, its expiry, and the browser user agent and IP address recorded when the session was created.
• Server reservations you make through scrim.tf, and the connection details serveme.tf returns for them.

Signing in with Steam

scrim.tf uses Steam’s own OpenID sign-in. You type your password on Steam’s site, never on ours — we never see or store your Steam password, and we cannot act on your Steam account. What comes back from Steam is a confirmation that you are a particular SteamID64, which is the identity everything here hangs off.

We also read your public Steam profile — persona name, avatar, profile link — and your TF2 playtime, to show your account and to check the playtime minimum.

Linking Discord

Linking Discord is optional. scrim.tf asks Discord for the identify scope only: your account id and username. Not your email, not your servers, not your messages.

It is used to recognise you, and to send you a direct message when something happens that you would want to know about — a proposal, an accepted scrim, a merc offer.

Linking Discord does not make your Discord username public. Your profile does not show it, and it is not revealed by the badge that says you have linked one. A Discord handle is shared only when you add it yourself as a contact on a listing, a proposal or a merc post — and then only to the people that thing’s own rules allow.

What other people can see

Public on scrim.tf, to anyone, signed in or not:

• Your scrim.tf nickname and avatar, and your player profile
• Your TF2 hours, scrims arranged, merc spots and badges, on that profile
• Your Steam, ETF2L and logs.tf links
• Your teams, their rosters and their team profiles
• Listings you post, and merc posts you put on the board
• Agreed matches: who played whom, when, on which maps, and the frozen lineups

Not public — and gated in the query rather than hidden in the page:

• Contact details. Listing and proposal contacts follow that listing’s own rules; merc contacts are visible to signed-in players, and to nobody who is signed out unless you marked one public.
• Server connection details, passwords and RCON. Connect and SDR details go to the people in that match; RCON goes only to the side whose listing opened it. Nobody else’s page contains them at all.
• Your Discord identity, and your sessions
• Proposals you sent that were not accepted
• Your scrim alerts. What you are watching for — the mode, the level, the regions and the maps — is yours alone. Nobody can see who is waiting for a Highlander scrim, and an alert never appears on your profile or anywhere else. The notifications it sends you link to listings that were already public.

Reserving a server

If you reserve a game server from a match page, scrim.tf asks serveme.tf to make that booking. To do it, we send them what the booking needs: the Steam identity it is for, the time window, and the server and config you chose. serveme.tf handles that request under their own terms and privacy policy.

Nothing is sent to them unless somebody presses the button, and no reservation is ever made on your behalf without it.

Cookies

scrim.tf has no advertising and no analytics, and sets no cookies for either. There are two, both strictly so the site can work:

• scrims_session — your sign-in. HttpOnly, SameSite=Lax, and secure over HTTPS. It holds a random token; the database stores only a hash of it, so a database leak cannot be replayed as your session. It lasts 30 days, and signing out deletes it at both ends.
• scrims_discord_link — a short-lived value used only while you are linking Discord, to prove the request coming back is the one you started.

Your light or dark theme preference is kept in your own browser’s local storage and is never sent to us.

What we use it for

• Running your account and keeping you signed in
• Finding opponents, and arranging and showing scrims
• The merc board, and offers and invites between players
• Player and team profiles, and badges
• Notifying you, in-site and on Discord if you linked it
• Reserving a server when you ask for one
• Keeping the site usable: rate limits, moderation, and spotting abuse
• Keeping it running: diagnosing errors and fixing them

We do not sell anything to anybody, and there is no advertising on the site.

How long we keep it

Honestly: most of it stays, because it is the history the site is made of. A scrim you played last month is part of both teams’ match history and both players’ profiles, so listings, proposals, matches and merc posts are kept rather than deleted — an expired listing leaves the marketplace, but the record remains.

The parts that do expire on their own:

• Notifications — read ones after 7 days, unread ones after 30.
• Sessions — after 30 days, or immediately when you sign out.

There is no automatic account deletion today. If you want your account removed, ask us on Discord and we will deal with it by hand — bearing in mind that a scrim you played is also part of somebody else’s match history, so the frozen record of a fixture may remain.

Other services involved

• Steam — sign-in, your public profile, and TF2 playtime.
• ETF2L — profiles, teams, rosters and divisions.
• Discord — only if you link it, for identity and direct messages.
• serveme.tf — only when you reserve a server.
• logs.tf — profiles link out to it. We send them nothing; following the link is between you and them.

Asking us something

Questions about any of this, a correction, or a deletion request: say so in the scrim.tf Discord. It is the fastest way to reach a human, and for now it is the only one — if a dedicated privacy address is added later, it will appear here.

scrim.tf is in beta and changes often; the changelog says what has shipped. When something on this page changes, the date at the top changes with it.