Privacy Policy

Last updated: February 2026

This policy explains how Dark Tether Games collects and uses your personal data when you use our website at darktethergames.com. We keep it simple: we only collect what we need to operate the site, we don't sell your data, and we don't use tracking or advertising cookies.

1. Data Controller

The data controller for this website is Dark Tether Games, operated by Gabriella. For any privacy-related questions or requests, contact us at: [email protected]

2. Data We Collect

We only collect data that you provide directly or that is necessary for the site to function:

Account information — when you register: username, email address, and a hashed (encrypted) password. We never store your password in plain text.
Profile information — optional details you choose to add such as a display name, bio, avatar image, and profile flair.
User content — forum posts, thread replies, chat messages, and any other content you submit on the site.
Session data — a temporary session identifier stored in a cookie to keep you logged in during your visit.
Technical data — your IP address is used for rate limiting (to prevent abuse) and is not stored permanently in our database.

3. Legal Basis for Processing

We process your data under the following legal bases as defined by the GDPR:

Contract performance (Article 6(1)(b)) — processing your account data is necessary to provide the service you signed up for.
Legitimate interests (Article 6(1)(f)) — rate limiting and basic security measures to protect the site and its users from abuse.
Consent (Article 6(1)(a)) — for any optional profile data you choose to provide.

4. How We Use Your Data

To create and manage your account
To display your profile and content to other users
To keep you logged in during your session
To enforce site rules (bans, rate limits)
To send password reset emails if requested

We do not use your data for advertising, profiling, or any automated decision-making that produces legal effects.

5. Cookies & Local Storage

We use only strictly necessary cookies and browser storage — no advertising or tracking technologies.

Session cookie — a single HTTP-only, secure cookie that holds your session identifier. It expires when your browser is closed or after 24 hours. This cookie is essential for the login system to work.
localStorage — we store a cached copy of your basic profile information (username, avatar) in your browser's local storage to display your name in the navigation bar instantly on page load, without an extra network request. This data mirrors your account data and is cleared on logout.
Cookie notice acknowledgement — a small flag stored in localStorage to remember that you have seen this cookie notice, so it is not shown again.

Because all cookies and storage are strictly necessary for the site to function, no consent is required for their use under the ePrivacy Directive. However, we disclose them here in the spirit of full transparency.

6. Third Parties

We share data with a minimal number of third-party services required to operate the website:

Cloudflare — our website traffic passes through Cloudflare's network, which provides DDoS protection and routing via Cloudflare Tunnel. Cloudflare may process your IP address and request metadata in accordance with Cloudflare's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any other analytics or advertising platforms.

7. Data Retention

Account data — retained for as long as your account is active. If you request deletion, your account and associated data will be permanently removed.
Forum posts and community content — retained as part of the community record. If you delete your account, your posts may be anonymised rather than removed to preserve thread continuity, unless you specifically request full deletion.
Session data — automatically purged after 24 hours of inactivity.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with equivalent data protection laws, you have the following rights:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — request deletion of your personal data.
Right to data portability — request your data in a structured, machine-readable format.
Right to restriction — request that we limit how we process your data in certain circumstances.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint — you have the right to file a complaint with your local data protection supervisory authority.

9. How to Exercise Your Rights

You can manage most of your data directly from your account settings (profile editing, avatar, bio). For account deletion or data export requests, contact us at:

[email protected]

We will respond to all requests within 30 days as required by GDPR.

10. Data Security

We take reasonable technical measures to protect your data, including:

Passwords stored using bcrypt hashing
Sessions transmitted over HTTPS only (enforced by Cloudflare)
HTTP-only, secure session cookies to prevent client-side access
Rate limiting on all API endpoints to prevent brute-force attacks
Security headers (HSTS, CSP, X-Frame-Options) on all responses

11. Children's Privacy

This website contains adult content and is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, please contact us immediately at [email protected] and we will remove the account.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions, data requests, or concerns, reach us at:

[email protected]