Privacy policy
This template must be adapted to the operator, hosting provider and jurisdiction before production use.
Controller
[Insert operator's name and address] · Email: [insert privacy contact]
Data processed
- Account: Email address, display name, password hash (Argon2id or bcrypt), registration time and email verification.
- Content: uploaded tactic files, descriptions, forum posts, reports and moderation notes.
- Technical data: IP address and user agent in audit logs for security-relevant actions (sign-in, uploads and moderation), plus session and language cookies.
- Test data: Tactic metadata, test results and conditions. No saved games or personal game data.
Purpose and legal basis
Providing community features (Art. 6(1)(b) GDPR), security and abuse prevention (Art. 6(1)(f) GDPR), and consent for optional features if introduced (Art. 6(1)(a) GDPR).
Cookies
A session cookie is used, along with a language preference cookie when a language is selected. There are no analytics, advertising or tracking cookies.
Retention
Accounts are retained until deletion. Audit logs are deleted after [period]. Posts and tactic metadata may remain anonymised after account deletion to preserve discussion context.
Recipients
Hosting: [insert provider and location]. Email delivery: [insert provider]. Transfers to third countries occur only when required by the services used and subject to the applicable conditions.
Your rights
Access, rectification, deletion, restriction, data portability and objection. Contact: [privacy contact]. You may complain to the competent supervisory authority.
Security
Passwords are stored using a strong hash. Session cookies are HTTP-only and SameSite=Lax; production traffic uses TLS. Uploaded files are not executed and are reviewed before approval.
As of 10 November 2026. This page is a technical template and does not constitute legal advice.