Privacy Policy — TacForce Hub

1. Data Controller

Responsible for data processing on this website is the operator of TacForce Hub, reachable at:

2. Overview of Processing

TacForce Hub is a private fan project for the Delta Force community. Personal data is mainly collected where you actively create an account, log in, or publish your own content (Community Builds). Simply reading Meta Builds, Maps, News, Guides, and the Database does not collect any account or profile data from you.

3. Hosting and Server Log Files

This website and its database run on our own server rented from netcup GmbH (Karlsruhe). The server is located in a data centre in Nuremberg, Germany. When you access the website, the server automatically processes technical connection data (including your IP address, date and time of access, page accessed, browser used) to ensure the operation and security of the website, e.g. to limit repeated login attempts. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Cloudflare (Domain, Delivery, Statistics, Email)

The domain tacforcehub.com is managed through Cloudflare, Inc. (USA). Visits to the website are routed through Cloudflare's network, which protects the website against attacks and delivers content faster. In doing so, Cloudflare processes technical connection data including your IP address and may set technically necessary cookies for security purposes. For anonymous usage statistics (e.g. number of page views, country of origin, device type) we use Cloudflare Web Analytics. It sets no cookies and, according to Cloudflare, neither stores IP addresses nor tracks visitors across websites. Emails to the address in item 1 are forwarded via Cloudflare Email Routing. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, fast website and in knowing how it is used). More information: cloudflare.com/privacypolicy.

5. Cookies and Local Storage

The website stores purely technical settings in your browser's localStorage, e.g. your selected language. This data never leaves your device. When you are logged in, a login token is also stored there so you don't have to enter your credentials on every page load. It is only ever sent to our own server. For cookies set by Google reCAPTCHA and Cloudflare, see the respective items.

6. Google Fonts

To display fonts consistently (Oswald, Inter, JetBrains Mono), this website loads Google Fonts directly from servers operated by Google Ireland Limited or Google LLC. In doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent visual appearance). More information: policies.google.com/privacy. The font "Nasalization", on the other hand, is served locally from our own server — no connection to third parties occurs here.

7. Registration and Login

Accounts are stored on our own server (see item 3). When you register, we process your email address and your password. The password is stored only as a non-reversible hash; we have no access to your plain-text password. Your email address is not publicly visible. Password reset emails are sent via Resend (Resend, Inc., USA); for this, your email address and the content of the email are transmitted to Resend. The legal basis is Art. 6(1)(b) GDPR (performance of the user agreement you enter into by registering).

8. User Profile

After registering, you can voluntarily add to your profile: display name, in-game ID, profile picture URL, and links to YouTube, TikTok, or Twitch channels. This information is stored on our own server and is publicly visible on your profile page. The legal basis is Art. 6(1)(a) GDPR (your consent by actively filling in these voluntary fields). You can change or remove this information in your profile at any time.

9. Community Builds and Image Uploads

When you create a Community Build, the content you enter (title, weapon build code, category, and optionally an uploaded image up to 5 MB) is stored on our own server and publicly displayed to other visitors. Your build is linked to your profile via your user ID. The legal basis is Art. 6(1)(a) GDPR (consent by actively publishing).

10. Google reCAPTCHA

To protect login and registration against automated abuse (bots, spam), we use Google reCAPTCHA (v2, checkbox), a service provided by Google Ireland Limited / Google LLC. In doing so, information such as your IP address and mouse movements is transmitted to Google, and a cookie is set. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse). More information: policies.google.com/privacy.

11. Moderation

For community moderation purposes (e.g. suspending accounts for rule violations, removing impermissible builds), only manually designated administrators have access to display names, email addresses, and ban status of user accounts. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning, rule-compliant community).

12. Recipients and Data Processing

We use the following service providers as processors: netcup GmbH (Karlsruhe, Germany) for the server (item 3), Cloudflare, Inc. (USA) for domain, delivery, statistics and email forwarding (item 4), Resend, Inc. (USA) for sending password emails (item 7), and Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, possibly with data processing by its parent company Google LLC, USA) for Google Fonts and reCAPTCHA (items 6 and 10). For data transfers to the USA, these providers state that they rely on the EU-US Data Privacy Framework or standard contractual clauses.

13. Storage Duration

We store account and profile data for as long as your account exists. If you delete your account or request deletion by email (see item 1), we remove your personal data unless statutory retention obligations require otherwise. Server log files are deleted after 30 days at the latest. Encrypted database backups are kept for at most three months, after which data deleted in the meantime is removed from them as well.

14. Your Rights

You have the following rights regarding your personal data:

Right to access the data we process about you (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure of your data (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interest (Art. 21 GDPR)
Right to withdraw consent already given, with future effect (Art. 7(3) GDPR)

To exercise these rights, an informal email to the address given in item 1 is sufficient. You can also edit or delete much of your profile and build data yourself directly in your profile.

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

16. Changes to this Privacy Policy

We will update this policy whenever data processing on TacForce Hub changes, for example due to new features or services. The version current at the time of your visit applies.