Skip to content

Privacy Policy

Last updated 26 October 2026

This page explains what personal data Apex Legends Renders (“ALR”, “we”) collects, why, who helps us process it, how long we keep it, and your rights. Questions or requests: support@apexlegendsrenders.com.

Browsing the site

You can browse renders, updates and Creator Tools pages without an account. We use Vercel Web Analytics and Speed Insights to understand page views and page performance. They don't use cookies and report aggregate figures, not profiles of individual visitors. Our hosting providers keep short-lived server logs (including IP addresses) for security and reliability.

The site stores a few things in your browser's local storage: your sign-in session if you sign in, and small preferences such as notices you've dismissed. These aren't used for advertising or tracking. If you start writing a comment, the draft is kept in that browser tab until you post it or close the tab.

Your ALR account

When you create an account with an email and password, or sign in with Discord, we keep:

  • Your email address, display name and username.
  • If you use Discord: your Discord user ID, username and avatar, as provided by Discord.
  • Your account role and status, when the account was created and when you last signed in.

Sign-up and sign-in forms are protected by hCaptcha, which runs a check in your browser to stop automated abuse.

We keep a record of changes to accounts (for example a role change, or a linked Patreon membership) and of privileged staff actions, so that we can investigate problems and misuse. Staff see these records without email addresses or Patreon identifiers.

Patreon supporters

If you link Patreon, we receive from Patreon your Patreon user and member IDs, the email on your Patreon account, your membership status and tier, and your billing-cycle dates. We use these to give you your supporter benefits, such as render credits, and keep them in sync through Patreon's notifications. We don't receive your payment details.

Render requests

When you request a render we keep the details you give us (legend, skin, pose, notes and any reference images you upload), its status and history, and the credits it used. Staff working on requests can see them. We may email you, or message you on Discord if your account is linked, when a request's status changes.

Applications to join ALR

If you apply to join the team or one of our programmes, we keep your name, email, Discord username and the answers you give in the form (for example about you, your availability and your channels), plus the outcome and any reviewer notes. Only staff who review applications can see them.

Creator Tools downloads

When you download a Creator Tools release while signed in, we record which release you downloaded and when, so we can count downloads and support you with that version.

Comments and reactions on Updates

Signed-in members can react to and comment on articles on our Updates page. Anyone can read them without an account.

  • What others see. Your comment's text, when it was posted and whether it was edited, shown with your public member profile: your display name with a link to your profile, and your avatar and featured badge if your profile settings show them. If your profile isn't published, your comments say "ALR Member" instead. Comments by our team carry an "ALR staff" or "Owner" mark. Reactions are shown only as totals; nobody else can see who reacted.
  • What we keep. Each comment's text, author, article, times, whether and how often it was edited, and its moderation status; the reactions you've added; and counters of your recent comments, edits, reactions and reports, which stop spam and are deleted after a day.
  • Reports. If you report a comment, we keep who sent the report, the reason and any note you add, and a copy of the comment's text at that moment, so a later edit can't hide what was reported. Moderators see the reason, the note and the copy, but not who sent the report, and the comment's author is never told.
  • Who can see more. Our Moderators and the Owner can see comments in every state, including hidden ones, the reports on them, whether the author's account is active, and a record of moderation actions (who did what, when and why). They see the author's public profile name, never their email address. Other staff can't see any of this.
  • Deleting your comment. Its text is removed from the site straight away; a "This comment was deleted" note stays only while other people's replies need it. If the comment had a report that was still open or had been upheld, or our moderators had hidden it, we first keep a private copy of its text so Moderators and the Owner can finish reviewing it. That copy is kept for 90 days after you deleted the comment. After that Moderators and the Owner can no longer see it, and an automatic daily clean-up permanently deletes it, normally within a day after the 90 days end. It is deleted sooner if the reports are dismissed or the Owner deletes it. We keep a note that a copy was kept and when it was deleted, without the text.
  • Moderation. Moderators can hide comments that break our rules, and the Owner can remove a comment permanently, which erases its text and every copy of it. If we delete an article, its comments, reactions and reports are deleted with it. If your account is deleted, the text of all your comments is erased, including any copy kept for moderation.
  • Comments and reactions are never sent to Discord or by email.

ALR announcements by email

If you choose to subscribe on our Updates page, we email you occasional ALR announcements: new features, Creator Tools releases and community news. Having an ALR account never subscribes you. You're only added after you tick the consent box and confirm by clicking the link we email you.

  • We keep your email address, when and where you subscribed and confirmed, the version of the consent wording you agreed to, and whether and how you've unsubscribed.
  • We keep delivery events for the emails we send you: delivered, bounced, or marked as spam.
  • Sign-ups are protected by Cloudflare Turnstile, and we count sign-up attempts using one-way keyed hashes of your IP address and email address. We don't store your IP address, and these counters are deleted after 24 hours.
  • Unconfirmed sign-ups are deleted after 7 days. If you unsubscribe, we keep your address and opt-out status so we don't email you again.
  • If you ask us to erase your details, we delete them from ALR and from our email provider and keep no record of your address, so if you sign up again you'll be asked to confirm again. Our email provider may keep a minimal record of addresses that bounced or reported spam, to protect email deliverability.

Why we use your data (lawful bases)

  • To provide what you ask for (your account, render requests, supporter benefits, applications, and the comments and reactions you post): this is necessary for our agreement with you (UK GDPR Article 6(1)(b)).
  • To keep ALR secure and working (spam and abuse checks, moderating comments and reviewing reports, including keeping a reported comment's text for 90 days after its author deletes it and then deleting it in a daily clean-up, audit records, logs, aggregate analytics): our legitimate interests in running a safe, reliable site and community (Article 6(1)(f)).
  • Email announcements: your consent (Article 6(1)(a)), as the Privacy and Electronic Communications Regulations require. You can withdraw it at any time.
  • Emails about your account or requests are service messages, not marketing.

Who processes data for us

  • Supabase: database, sign-in and file storage (including request reference images).
  • Vercel: website hosting, Web Analytics and Speed Insights.
  • Resend: sending emails, and storing email subscribers.
  • Cloudflare: DNS, email routing, image storage and delivery, and the Turnstile check.
  • hCaptcha: the check on sign-up and sign-in forms.
  • Discord and Patreon: only if you choose to sign in with or link them; they share the data described above with us under their own privacy policies.

Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the UK, it is protected by the safeguards set out in each provider's data processing agreement, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework. We don't sell your data or use it for advertising.

How long we keep it

  • Account, request, supporter and download records: while your account is open. When you ask us to delete your account, we delete or anonymise these, except records we must keep for security (such as the audit records above).
  • Applications: while the application is being considered and for as long as you're part of the programme you joined. You can ask us to delete an application at any time.
  • Comments, reactions and reports: until you delete them, we remove them, the article is deleted or your account is deleted. A private copy of a reported comment you deleted is kept for 90 days and then permanently deleted by the daily clean-up, normally within a day, as described above. Records of moderation actions are kept without the comment's text, so that we can review our decisions.
  • Email announcements: as described in that section.

Your rights

  • Ask for a copy of your data, or for it to be corrected or deleted, by emailing support@apexlegendsrenders.com.
  • Object to how we use your data, or ask us to restrict it.
  • Withdraw consent for email announcements at any time using the link in every email.
  • Complain to the Information Commissioner's Office (ico.org.uk (opens in a new tab)) if you're unhappy with how we handle your data.

Changes

If we change how we use personal data, we'll update this page and the date at the top.