Who we are
The website and Reforgedmin Admin Tools are made by HousoMods, an independent developer. We're the ones responsible for the data described here. For anything on this page, write to [email protected].
When you sign in
You sign in with Steam or Discord. We never see your password - you type it on their site, not ours.
- Steam tells us your SteamID64. We then look up your public profile name and avatar picture through Steam's own API.
- Discord gives us your user ID, username and avatar. We only ask for the
identifypermission, so Discord doesn't share your email address, servers or messages with us.
We store those details, the time your account was made and when you last signed in. If you link both accounts, both sets are kept under the one Reforgedmin account. The name and picture you see on the dashboard come from whichever one you signed in with last.
When you link a server
Linking a game server to your account is optional. If you do, the server sends us:
- its name, and which version of Reforgedmin Admin Tools it runs
- how many players are online, and its player limit
- the time of its latest check-in, every 15 seconds (every 2 seconds while you have its manage page open, so what you do there happens quickly), so the dashboard can show whether it's online
We also keep the requests you send the server from the dashboard, and its replies, so you can see them.
While you have a server's manage page open, the server also sends us the names of the players on it right now, each with the number the game gave them for this session, so you can see who's on and act on them. We keep only the current list, replace it on every check-in, and delete it within a minute of you closing the page or switching away from it. We never keep a history of who played, and we never get their Steam IDs, GUIDs or chat.
When you use a tool on the manage page (kicking a player, for example), the request we pass to your server includes your SteamID64 and your Reforgedmin name. Your server checks that Steam ID against its own staff list and uses your permissions from there, so you can only do what you could do in game. The request holds what you typed, such as the reason and the player's name, and is kept with its reply for 7 days like any other request.
Each linked server holds a key that proves it's yours. We only store a scrambled fingerprint of that key (a SHA-256 hash), never the key itself, so even we can't read it back.
What we don't collect
- No player history. Apart from the live list on an open manage page (above), we only see a count of how many are online. Never their Steam IDs, GUIDs or chat.
- Nothing from your server's files. admins.json, logs and settings stay on your server.
- No email address, no payment details, no friends lists or game libraries.
If a future dashboard feature needs more than this, this page will be updated to say exactly what and why before that feature goes live.
Where it's kept
A few companies are involved in running the site. None of them may use your data for their own purposes.
- Supabase hosts the database that holds your account and linked servers.
- Cloudflare sits in front of the site to keep it fast and fend off attacks. Like any such service, it sees your IP address when you visit.
- Our hosting provider runs the web server. Its access logs record IP addresses and which pages were requested, and are kept for a short time to deal with faults and abuse.
To stop abuse, the site also remembers IP addresses in memory for a few minutes to limit how often something can be tried. That list is never saved.
How long we keep it
- Your account and linked accounts: until you delete your account.
- A linked server: until you remove it on the dashboard, unlink it in game, or delete your account.
- Dashboard requests and replies: 7 days.
- Who's on a server: only while its manage page is open, gone within a minute after.
- Unused link codes: 10 minutes.
Deleting your account (Dashboard → Settings → Delete account) removes all of it straight away: your account, your linked Steam and Discord details, your linked servers and their history. Any server you had linked stops being able to reach us, and forgets its link the next time it checks in.
Your rights
You can ask us, at any time, to:
- show you everything we hold about you, or send you a copy
- correct something that's wrong
- delete it - or do that yourself from Settings, with no need to ask
Write to [email protected]. We may ask you to sign in, so we know the request is really from you. We'll reply within 30 days.
We use your data to provide the service you signed up for, and keep short-lived logs because we have a legitimate interest in keeping the site secure. If you're in the UK or the EU, you can also complain to your data protection authority - though we'd appreciate the chance to sort it out first.
Children
Reforgedmin is for people who run Arma Reforger servers. It's not meant for anyone under 16, and we don't knowingly keep data about them. If you think a child has signed up, tell us and we'll delete the account.
Changes
If we change what we collect or how we use it, we'll update this page and the date at the top. A change that matters - like collecting something new - will be pointed out on your dashboard before it takes effect.