2. Outside services
- Cloudflare Turnstile – the anti-bot check on sign-up and contact. Cloudflare sees your IP address and browser details there.
- Google Fonts – typefaces are loaded from Google’s servers, so Google sees your browser’s IP address. No cookies come from there.
- Thumbnails in News – images are shown straight from the site the story comes from (we don’t copy them). Those sites see your browser’s IP address.
- buycoffee.to – donations from the Support page are handled by Coffee Media Sp. z o.o. on their own site, under their own terms and privacy policy. We never see card or bank details – we get the amount and whatever you choose to enter there (such as your name and a message). The link itself loads nothing until you click it.
We have no Google Analytics, no social pixels and no ad networks, and we don’t plan to add any.
3. What data we keep
- Account: login, nickname, e-mail address (needed to activate the account and reset the password) and a hashed password – we never hold your password in readable form. We also record the date of your last login and last visit – only the administrator sees them, in the site statistics.
- Avatar (optional): a small picture you upload in your profile – it appears next to your nickname on player lists (tournaments, skirmishes, the ranking, campaigns). You remove it in your profile and the file is deleted from the server.
- Where you play (optional): city, club name and club contact – collected for a map of players. On the public Player map we count you under your city and show your club and club contact, without your nickname – the contact is the club’s public address (Facebook, Discord, website), not your private one. You enter and delete all of it in your profile.
- What you enter while playing: campaigns, armies, orders, battles, skirmishes, tournaments, impressions, lists saved in the builder and uploaded files (maps, table photos, army-list PDFs).
- Collection (optional): a list of your miniatures – units, games, groups, number of models and painted models, statuses (e.g. sold) and prices and notes if you enter them. Only you can see it; you edit and delete every entry yourself. We also remember your last collection filters and your painting goal, if you set one.
- Contact: the message you send through the contact form – it goes to our mailbox.
- Protection against password guessing: a count of failed logins, new password requests and contact form messages – kept against the IP address (and login). The count disappears on its own after a quarter of an hour or an hour and says nothing else about you. Separately, for 30 days we keep a log of login attempts and new password requests: the time, the login or e-mail typed, the IP address and the result (e.g. “wrong password”). Only the administrator sees it – to help when someone cannot log in.
- Visits without logging in: to know how many people visit the site, for each page view – once you do something on the page, such as scrolling or clicking – we record the IP address, the time and the address of the page viewed. From the IP address we read an approximate location (country, region, city) – from the DB-IP database on our own server, so the address never leaves it. No cookies are used for this, and logged-in users are not counted. Only the administrator sees it, in the site statistics; entries older than 30 days are deleted.
We don’t sell your data and don’t pass it to anyone for marketing. Your skirmishes and campaigns are visible only to the people taking part in them. You appear in the public Ranking only after you switch it on in your profile – and it shows nothing but your nickname and numbers.
We keep account data for as long as the account exists. If you want it deleted or want a copy, write to us through the contact form.