1. Data Controller

Responsible for data processing on this website is the operator of TacForce Hub, reachable at:

TacForce Hub
Email: kontakt@tacforcehub.com

2. Overview of Processing

TacForce Hub is a private fan project for the Delta Force community. Personal data is mainly collected where you actively create an account, log in, or publish your own content (Community Builds). Simply reading Loadouts, Maps, News, Guides, and the Database does not collect any account or profile data from you.

3. Hosting and Server Log Files

When you access this website, the hosting provider [insert hosting provider name] automatically processes technical connection data (including a shortened IP address, date and time of access, page accessed, browser used) to ensure the operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Cookies and Local Storage

The website stores purely technical settings in your browser's localStorage, e.g. your selected language. This data never leaves your device and is not transmitted to us. If you are logged in, Firebase Authentication (see item 6) additionally keeps a local session token so you don't have to re-enter your credentials on every page load.

5. Google Fonts

To display fonts consistently (Oswald, Inter, JetBrains Mono), this website loads Google Fonts directly from servers operated by Google Ireland Limited or Google LLC. In doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent visual appearance). More information: policies.google.com/privacy. The font "Nasalization", on the other hand, is served locally from our own server — no connection to third parties occurs here.

6. Registration and Login (Firebase Authentication)

For registration and login we use Firebase Authentication, a service provided by Google Ireland Limited (for users outside the EU/EEA: Google LLC, USA). During registration we process your email address and password (stored encrypted; we ourselves have no access to your plaintext password). The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement you enter into by registering).

7. User Profile (Cloud Firestore)

After registering, you can voluntarily complete your profile: display name, in-game ID, profile picture URL, and links to YouTube, TikTok, or Twitch channels. This information is stored in the Firebase database Cloud Firestore and is publicly visible on your profile page. The legal basis is Art. 6(1)(a) GDPR (your consent through actively filling in these voluntary fields). You can change or remove this information at any time in your profile.

8. Community Builds and Image Uploads (Firebase Storage)

When you create a Community Build, the content you enter (title, weapon build code, category, and optionally an uploaded image up to 5 MB) is stored via Firebase Storage and displayed publicly to other visitors. Your build is linked to your profile via your user ID. The legal basis is Art. 6(1)(a) GDPR (consent through actively publishing).

9. Google reCAPTCHA

To protect login and registration against automated abuse (bots, spam), we use Google reCAPTCHA (v2, checkbox), a service provided by Google Ireland Limited / Google LLC. In doing so, information such as your IP address and mouse movements is transmitted to Google, and a cookie is set. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse). More information: policies.google.com/privacy.

10. Moderation

For community moderation purposes (e.g. suspending accounts for rule violations, removing impermissible builds), only manually designated administrators have access to display names, email addresses, and ban status of user accounts. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning, rule-compliant community).

11. Recipients and Data Processing

For the services named in items 5, 6, 8, and 9, we use Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, potentially with data processing by its parent company Google LLC, USA) as a data processor or joint controller. For any transfer of data to the USA, Google states that it relies on Standard Contractual Clauses or the EU-US Data Privacy Framework, where applicable.

12. Storage Duration

We store account and profile data for as long as your account exists. If you delete your account or request deletion by email (see item 1), we remove your personal data unless statutory retention obligations require otherwise. Server log files are automatically deleted or anonymized after a short period.

13. Your Rights

You have the following rights regarding your personal data:

  • Right to access the data we process about you (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure of your data (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interest (Art. 21 GDPR)
  • Right to withdraw consent already given, with future effect (Art. 7(3) GDPR)

To exercise these rights, an informal email to the address given in item 1 is sufficient. You can also edit or delete much of your profile and build data yourself directly in your profile.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data, e.g. with the state data protection authority responsible for [insert state/country].

15. Changes to this Privacy Policy

We will update this policy whenever data processing on TacForce Hub changes, for example due to new features or services. The version current at the time of your visit applies.