Privacy

Who is responsible for the data

The controller of personal data is Carbon Stealth VCC — the publisher of the server and of the website. The company details are in the imprint; for any question about your data, write to us through the contact page.

What we record when you play

• SteamID64 — your Steam account number; stats and penalties are kept against it.
• Your in-game name (Steam nickname) at the time you play.
• Your IP address when you join the server — to protect against abuse and to enforce bans; we keep it for 30 days.
• Stats: kills, deaths, assists, shots fired and hits, streaks, XP, time played and kills per weapon.
• Every kill with the weapon, the time and the map coordinates — for the kill maps; we keep them for 90 days.
• SourceTV recordings (demos) of matches while people are on the server: nickname, SteamID64, movement, shots and chat messages — to review reports of cheating and rule breaking; voice chat is not recorded. We keep them for up to 14 days.
• If you mute the kill-streak sounds (!qs) or change the language (!lang), the server remembers your SteamID64 with that choice until the next update of the server mods.
• Penalties: type, category, expiry and an internal reason that only admins can see.
• Roughly the last 2000 server events (joins, kills, chat) are held briefly in working memory for moderation and are overwritten continuously; chat is not stored in the database.

What we record when you browse the website

• The website uses no cookies, analytics, ads or trackers — which is why there is no consent banner either.
• Your IP address is only used to limit the number of requests (overload protection); it is held in memory for up to 1 minute and is not written to any log.
• If a player has signed in to the website with Steam, their avatar is loaded from Steam's servers (Valve) — your browser then connects to them.

Why, and on what legal basis

• Running the game, stats and the public leaderboard — legitimate interest (Art. 6(1)(f) GDPR): players want to see their results. You can object — we then hide you from the leaderboards and your profile.
• Security, protection against cheaters (including the demo recordings) and enforcing bans (including the IP address) — legitimate interest.
• A public ban list with minimal data (name, SteamID64, category, date and expiry) — legitimate interest: transparency and protecting the community. The reason is not public.
• VIP — performance of a contract (Art. 6(1)(b)) and the legal obligation to keep accounting records (Art. 6(1)(c)).
• Appeals and notices — legitimate interest: a decision on every case.

How long we keep the data

• IP addresses when joining (sessions) — 30 days, then they are deleted automatically.
• Kills with coordinates — 90 days, then they are deleted automatically.
• Demos (SourceTV recordings) — up to 14 days, then they are deleted automatically (sooner if they take up too much space).
• Appeals and notices — 1 year after the decision, then they are deleted automatically.
• Stats — for as long as the server runs or until you ask for them to be deleted.
• Penalties — for as long as they are needed for the security of the server.
• Invoice details for VIP — as long as the Bulgarian Accountancy Act requires.

Who else sees the data

• Every visitor sees the leaderboard, player profiles (except hidden ones) and the ban list — with the data described above.
• The provider of the server that runs the game and the database processes the data on our behalf. The server is located in the EU.
• Valve (Steam) processes your account data under its own policy — we do not pass anything to them.
• We do not sell data, do not use it for advertising and do not transfer it outside the EU.

Data from Steam

• Right now the website reads nothing from the Steam Web API — it only uses the SteamID64 and nickname the game server sees when you join.
• When we introduce Steam sign-in (for appeals and VIP), we will read only your public name and avatar from the Steam Web API — and only after you sign in yourself.
• This data is stored on our server in the EU, is not passed to third parties and is used under the Steam Web API Terms of Use.

Your rights

• Access — to find out what data we hold about you and to get a copy.
• Rectification and erasure, when the data is inaccurate or no longer needed.
• Restriction of processing.
• Portability — your stats in a machine-readable format.
• Objection — including being hidden from the leaderboards and your profile.
• A complaint to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or to the supervisory authority of the country where you live.

For any request, write to us through the contact page with your SteamID64. We may ask you to confirm that the account is yours. We reply within one month.

Changes

If we change this text, the date at the top changes, and we will announce significant changes on the website.