Privacy Policy for the Echelon4 network

This Privacy Policy explains how echelon4 (“we”, “us”, “our”) processes personal data when you connect to and use our IRC services.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

---

LEGAL BASIS FOR PROCESSING

We process your personal data under the following legal bases as defined by GDPR Article 6:

---

YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access Article 15

  You may request a copy of the personal data we hold about you.

• Right to Rectification Article 16

  You may request correction of inaccurate data. Update most information via NickServ or by contacting us.

• Right to Erasure Article 17

  Request deletion of your data ("right to be forgotten"). Delete your account using /msg NickServ DROP or contact us.

• Right to Restriction Article 18

  You may request that we limit how we process your data.

• Right to Data Portability Article 20

  Request your data in a structured, machine-readable format.

• Right to Object Article 21

  You may object to processing based on our legitimate interest.

To exercise any of these rights, contact us via email or IRC. We will respond to all valid requests within 30 days. If we cannot fulfil your request, we will explain why.

You also have the right to lodge a complaint with a supervisory authority. If you are in the EU, you may contact your local Data Protection Authority.

---

International Data Transfers

We do not routinely transfer personal data outside the European Economic Area (EEA). In the event that a transfer becomes necessary, such as where required by applicable EU or Member State law, we will ensure that appropriate safeguards are in place. These may include Standard Contractual Clauses approved by the European Commission or adequacy decisions where applicable.

---

1 What Personal Data We Collect

When you connect to or use our IRC services, we process the following categories of personal data:

1.1 Connection and Technical Data

• IP address
• Hostname
• Ident response
• Connection time, disconnection time, and connection status
• Server logs and error logs

1.2 IRC Usage Data

• Nicknames and account names
• Channel membership
• Mode changes, joins/parts, and other standard IRC activity events

1.3 Services Data (NickServ, ChanServ, etc.)

• Email address (if provided)
• Account passwords (stored securely as salted hashes)
• Metadata (e.g., last login time, registered channels)
• Memos (for storage and access by the recipient)

---

2 How We Use Your Data

We process your data only for legitimate and necessary purposes:

• To operate and maintain the IRC network
• To prevent abuse, spam, and network attacks
• To ensure the security of our infrastructure
• To provide account-based features (NickServ, ChanServ, MemoServ, etc.)
• To enforce network rules and ban evasion protection
• To comply with legal obligations

---

3 Do We Log Messages?

However, users may independently log conversations on their own systems. Such user-generated logging is entirely outside our control and is the responsibility of the individuals performing it.

Private Messages

We do not store private messages, except:

• If the receiving user uses a logging bot (outside our control), or
• If they appear in automatic spam-detection systems (temporary, minimal retention)

---

4 Data Retention Periods

We keep data only as long as necessary:

Data Type	Retention Period
NickServ Accounts	Until deletion or ~90 days inactivity. Deletion removes all associated data (channels, memos, etc.)
Connection Logs	Up to 90 days for abuse prevention, unless longer required for ongoing investigation
Services Backups	Daily backups kept for up to 1 week

---

5 Who We Share Data With

5.1 Servers Within the IRC Network

Standard user data (nicknames, IP masks, messages) is exchanged between linked servers as part of normal network operation.

5.2 Trusted IRC Operators (IRCOps)

For enforcing rules and preventing abuse.

5.3 External Parties

We may share data with external parties only when necessary:

• Law enforcement agencies, when legally compelled
• Hosting providers, who process basic technical data necessary to operate the servers

---

6 IRC Network Server Transfers

Where linked IRC servers in the network are located outside the EEA, technical data necessary for IRC operation may be transferred with appropriate safeguards in place.

Any such transfer is necessary for service operation and is carried out in accordance with applicable GDPR requirements.

---

7 Children's Privacy

Our IRC network is not directed to children under the age of 16.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information.

---

8 Security Measures

We implement appropriate technical and organizational measures:

• TLS/SSL encryption available and strongly encouraged for all connections
• Restricted operator access
• Strong hashing for passwords
• Abuse detection and mitigation
• Sensitive data secured behind firewalls

---

9 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.