Privacy Policy

1. Information We Collect

When you create an account, we collect:

• Username — Used as your public display name.
• Email address (Gmail only) — Used for account verification and recovery.
• Password — Stored securely as a one-way hash; we never store or see your plain-text password.
• Profile picture (optional) — Compressed and stored on our servers.

When you use the site, we may automatically collect:

• IP address — Used for rate limiting, abuse prevention, and view counting.
• Browser user-agent — Included in standard HTTP requests.
• Browser storage and cookies — Used for sign-in state, preferences, security, consent choices, and advertising where applicable.

2. How We Use Your Information

• To provide and maintain the service (account authentication, post/comment features).
• To send verification emails during registration.
• To prevent abuse (rate limiting, spam prevention, ban enforcement).
• To display community content (posts, comments, profile pictures).

3. Data Sharing

We do not sell or rent your personal information. Information may be processed by the service providers described below only as needed to operate, secure, measure, or fund the site. We may also disclose information in the following circumstances:

• When required by law or to respond to legal process.
• To protect the rights, property, or safety of our users or the public.

4. Third-Party Services

• Cloudflare R2 — Used to store uploaded images (posts and profile pictures).
• YouTube — Embedded videos use YouTube's privacy-enhanced mode (youtube-nocookie.com).
• Neople (Dungeon Fighter Online) API — Used to fetch character data. Your DFO character information is publicly available through this API.
• Google AdSense — Used to serve and measure advertising on eligible content pages. Google and participating advertising partners may process device identifiers, IP addresses, ad interactions, cookies, or similar browser storage as described in Google's policies.

Learn more about how Google uses information from partner sites.

5. Advertising Cookies and Choices

Third-party vendors, including Google, may use cookies or similar technologies to serve ads based on a visitor's prior visits to DFO Gang or other websites. Google's use of advertising cookies enables Google and its partners to serve personalized advertising when the visitor's settings and applicable consent allow it.

• You can control or opt out of personalized Google advertising through Google Ads Settings.
• You can opt out of certain participating third-party vendors through YourAdChoices, where available.
• You can also restrict cookies through your browser, though some account or preference features may stop working correctly.

Where applicable law requires consent, an eligible consent message or consent management platform should be presented before consent-dependent advertising storage is used. Choices offered in that message can be used to accept, reject, or manage advertising purposes.

6. Data Retention

• Account data is retained as long as your account is active.
• You may delete your account at any time through the Account settings page. This permanently removes your account data.
• Posts and comments made by deleted accounts remain visible but are attributed to "[deleted]".
• Notifications are automatically deleted after 30 days.

7. Data Security

We implement reasonable security measures including password hashing, HTTPS encryption, rate limiting, and input sanitization. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

This service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

If you have questions about this Privacy Policy, please reach out through the community or the GitHub issue tracker.