Privacy
specialforce.info is an unofficial, non-commercial fan site. It collects as little as it can, sells nothing and shows no ads. This page says exactly what is kept, why, and for how long.
Who is responsible
The maker of specialforce.info, a private person in the Netherlands, is responsible for this site under the GDPR. For anything about your data — a question, a request, a complaint — write to contact@specialforce.info.
When you visit
The site counts visits without cookies and without following you. When a page opens, your browser tells the site which page it is, its language, the site you came from (only its name, such as discord.com), a ?ref= tag if the link had one, your time zone, and later how many seconds the page was on screen. Clicks on links to other sites are counted too, with where they went.
Your address (IP) is used for a moment and never written down: it is looked up in a country list kept on our own server (so only the country, such as PH, is kept), and mixed with your browser type and a random code that changes every day into a short code. That code tells us one visitor is one visitor within a day; the random code is thrown away after a day, after which nobody, including us, can tie the code back to you or to your other visits. From your browser we keep only the kind of device, browser and system (for example Phone, Chrome, Android).
Why: to know which parts of the site are used and where players come from, so the site gets better (legitimate interest, Art. 6(1)(f) GDPR). These numbers are not tied to a person. They are removed after 25 months.
To stop the site being flooded, the number of requests per address is counted in memory for at most a minute. Our server does not keep access logs.
When you log in with Discord
Logging in is optional. If you do, Discord gives us your Discord user id, username, display name and profile picture; we never see your email address or password. We keep those, when you first and last logged in, how often, your role on the site, and the characters you save. A visit made while logged in is linked to your account.
Why: to give you an account and keep what you save (Art. 6(1)(b) GDPR). When someone makes an account, the site posts their Discord name and picture in the private Discord channel of the people who run it, so they know who joined (legitimate interest).
You keep your account until you delete it. The button is on your profile page; it removes your account and saved characters right away. Visits stay counted, but no longer point to you.
When you write to us
Mail to contact@specialforce.info is received and sent through Resend (servers in the EU, Ireland). We keep your address, name, the subject and the text of the conversation, so we can answer and see what was said before. The people who run the site read and answer it on this site and in a private channel of their Discord server, so Discord also holds a copy. A conversation is deleted two years after its last message, or earlier if you ask.
Cookies and storage in your browser
No tracking or advertising cookies. Only these, all needed for what you ask the site to do:
sf_session — keeps you logged in, for 30 days or until you log out. sf_oauth — used for ten minutes while you log in, to check the answer from Discord is really for you. lang — remembers the language you picked. sf_nc — only if you ask not to be counted (the site admins get it automatically). In your browser’s storage, sf_loadouts keeps characters you made before logging in; it never leaves your device unless you log in.
Other parties
The site runs on our own server at Hetzner in Germany. The 3D files come from Cloudflare R2 (assets.specialforce.info), so Cloudflare sees your address when your browser fetches them, as with any website. Profile pictures are loaded from Discord. When you log in you use Discord’s own page, under Discord’s privacy policy. Mail to us goes through Resend and our Discord (see above). Fonts are served from this site itself; nothing is loaded from Google. The country list (by DB-IP) is a file on our server: your address is not sent to anyone to look it up.
We do not sell or give your data to anyone else.
Your rights
You can ask to see, correct or delete what we have about you, object to how we use it, or ask for a copy, by writing to contact@specialforce.info. You can delete your account yourself on your profile page. Visit counts cannot be traced to you, so we cannot find or remove them per person. If you think we handle your data wrongly, you can complain to the Dutch data protection authority (Autoriteit Persoonsgegevens) or the one in your own country.
Logging in requires a Discord account, and Discord is for people of 13 and older.