Marc Schulz
Butjadinger Straße 6c, 26419 Schortens, Germany
Email: schulzmarc@mail.de
Like virtually every website, this server automatically records a small amount of technical information for every visit in log files: IP address, date and time, the page requested, browser/user agent, and referring page. This happens automatically and is not linked to any other data. It is used solely to operate the site securely and stably (e.g. detecting abuse or technical faults) and is deleted after a short period. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
This website itself sets one functional cookie -- your login session, see Section 4 below -- and otherwise no cookies or user accounts beyond that, and no analytics or advertising cookies. (Player Steam IDs and match statistics are stored and displayed as part of the site's core purpose -- that's covered separately in Section 5 below, it has nothing to do with cookies.) Web fonts are loaded from Google Fonts (Google Ireland Limited) directly in your browser, which transmits your IP address to Google's servers so the correct font files can be delivered. See Google's privacy policy for details on their processing. Legal basis: your consent, Art. 6(1)(a) GDPR.
On your first visit you'll see a banner asking you to Accept or Decline. Your choice is stored in your browser's local storage (not a cookie) for 12 months, after which the banner appears again. You can also withdraw or change your choice at any time by clearing your browser's local storage for this site.
You can optionally log in using your Steam account via Steam's own OpenID sign-in page (steamcommunity.com) -- your Steam credentials are entered on Steam's site, never on ours, and we only ever receive your SteamID64 back once Steam confirms the login. This is entirely optional: without logging in you can still browse all public stats normally, you just can't edit your own settings or see admin-only actions on your own profile.
If you log in, we set one session cookie ("gd_session", valid 90 days, or until you log out). The cookie itself only contains a random, meaningless session token -- never your SteamID or name directly. Server-side, that token is linked to your SteamID64 in a sessions table so the site knows who you are on your next visit. This cookie is strictly necessary to provide the login feature you actively chose to use, so it does not require separate consent (unlike Google Fonts above). Legal basis: Art. 6(1)(b) GDPR (providing the service you requested) / Art. 6(1)(f) GDPR (legitimate interest in offering a login).
While logged in, you can view and edit your own in-game settings (e.g. HUD/gameplay options, your custom rank color) directly on the website -- these are the same settings already used by the in-game MOTD menu, just editable here too.
This site publishes statistics for the GDUELS EU Half-Life 2: Deathmatch server: your in-game name, Steam ID, Steam avatar (fetched from Steam's public API), country flag (derived from your connecting IP address via GeoIP), Elo/rank, and detailed match/weapon statistics (kills, deaths, accuracy, damage, and similar). This data results directly from playing on the public game server and is shown here so players can follow match history and rankings -- that is the purpose of the site. Legal basis: legitimate interest in operating a public competitive leaderboard for a public game server, Art. 6(1)(f) GDPR.
Your connecting IP address itself (not just the derived country) is also stored against your player record -- this is used for security and anti-abuse purposes (e.g. detecting ban evasion or multi-accounting). It is only visible to server administrators and is never published on the public website.
Demo recordings (match replay files) of played matches may be stored and made available for download from match pages.
In-game chat messages are logged together with your Steam ID and player name, for moderation purposes (e.g. investigating reports of abusive behavior). Chat logs are not published on the public website.
If you are banned or muted by a server administrator, that action is recorded (your Steam ID/name, the reason, duration, and which admin issued it) so bans can be reviewed, appealed, or lifted. This is not published publicly. Legal basis for both: legitimate interest in moderating a public multiplayer server and enforcing its rules, Art. 6(1)(f) GDPR.
Data is not sold or passed on for advertising purposes. It is shared only with: Google (Google Fonts delivery, see above) and Valve/Steam (the OpenID login round-trip when you log in, and avatar/profile data fetched from Steam's own public API using your Steam ID -- both standard for any Steam-integrated service).
Match and statistics data is kept as part of the server's ongoing match history and leaderboard. Web server access logs are deleted after a short, limited period. Login sessions expire automatically after 90 days, or immediately if you click Logout. If you'd like your player data removed from the tracker, contact me (see below) and I will handle it.
Under the GDPR you have the right to access, rectify, or erase your data, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise any of these rights regarding this site, contact: schulzmarc@mail.de.