Privacy Policy
Draft reviewed:
Who is responsible?
Aregamer is the website's brand name. The person or organisation legally responsible for personal data has not yet been identified in this draft. The operator must provide its identity and an accessible, monitored channel for privacy requests; representative or data protection officer details must be included where applicable.
See the publisher information still to be completed. No working privacy-request mailbox has been verified.
Data flows in the reviewed version
Page delivery
Loading a web page sends a request to the server serving it, including an IP address and technical request information. The production infrastructure, any access or security logs, their recipients and their retention settings have not been audited here.
Your banner choice
When you use Accept or Reject in the banner, this version writes a value named rp-consent to your browser's local storage. It records granted or denied and hides the banner. It does not include a timestamp or an application-defined expiry date.
Local storage is separate from an HTTP cookie and is not automatically sent with each page request. The Cookie Policy explains the current controls and their limitations.
Externally hosted fonts and images
The reviewed pages request fonts from fonts.googleapis.com and fonts.gstatic.com. Some article images also load from external hosts, including Steam's image CDN. These requests go directly from the browser to the relevant host and can disclose the IP address and request headers.
These resource requests are not controlled by the current Accept or Reject buttons. For information about Google's services, see Google's Privacy Policy. This link does not replace the operator's responsibility to document the actual data flows and their legal basis.
Analytics, advertising and newsletter
No Google Tag Manager loader or AdSense script was present in the local homepage response reviewed on the date above. Advertising areas were placeholders, and the newsletter form did not submit to a subscription service.
The application can be configured to load Google Tag Manager. The contents of a future or production tag container have not been verified. This draft therefore does not list a particular analytics service, advertising partner or newsletter processor as active, and does not assert that all visitors are tracked.
Purposes and legal bases
The reviewed functionality serves website content, loads presentation assets and remembers the banner choice. The operator must document the lawful basis for each actual personal-data processing activity under the rules that apply to it.
Consent, legitimate interests and contractual necessity are not interchangeable labels. This draft does not select a legal basis, claim valid consent or assert GDPR compliance without the necessary factual and legal review.
Providers and international transfers
The external resource hosts described above receive the requests directed to them. The final notice must also identify the actual production hosting, logging, email and any other service providers, their roles, and the relevant recipients of personal data.
Processing locations, international transfers and any required safeguards remain to be confirmed. The presence of a Cloudflare adapter or a link to a provider's policy does not establish that a particular contract, adequacy decision or transfer safeguard applies.
How long is information kept?
- Banner choice: the application does not automatically expire
rp-consent. It remains until cleared or otherwise removed by the browser; private browsing and browser settings can affect its persistence. - Server logs, provider records and correspondence: no retention duration has been verified. The operator must define and disclose the applicable periods or criteria before finalising this policy.
Deleting browser storage does not erase records that may already be held by a server or an external provider.
Your rights and how to contact the controller
Rights depend on the applicable law and the circumstances of processing. Where the GDPR applies, they can include access, correction, erasure, restriction, objection, portability, withdrawal of consent and safeguards concerning solely automated decisions. You may also have the right to complain to a competent data protection authority. See the European Data Protection Board's explanation of these rights.
The verified request channel and the relevant authority must be added after the controller and jurisdiction are confirmed. Their absence is an unresolved publication requirement, not a restriction on any rights you have under applicable law.
Changes and finalisation
Before enabling a new service or publishing this policy as final, the operator must update the inventory, legal bases, provider details, retention rules and request procedures. The date above records this draft review; it is not a claim that the production site has been audited.