Privacy Policy

Data controller

[FULL NAME / DATA CONTROLLER DETAILS], contact: [PRIVACY EMAIL].

Data processed

Username, email address, password stored only as a secure hash, account status, technical browser-demo access data, forum content, contact-form messages and strictly necessary technical security data.

Purposes

Account management, Playtest Lab access, forum operation, private browser-demo access, security, contact management and handling user requests.

Account security and technical logs

For registration and the Playtest Lab, the website processes username, email address and a password hash. Email addresses must be verified with a one-time link. Username recovery, password reset and email changes use security messages and random one-time tokens stored in the database only as hashes and with an expiry. To prevent abuse, unauthorized access and investigate security incidents, the administration area also records for a limited period the full IP address, date/time, user agent, technical page history, landing page, referrer/source, optional UTM parameters and the account association when the visitor is signed in. The IP may be used to derive an approximate location (country, region and city) plus network/ISP information. The city is a technical estimate and does not identify a precise physical address. For IP geolocation, the server may query ipwho.is by sending only the IP address being located; usernames, email addresses and browsing history are not sent to that provider. Passwords are never stored in plain text. Detailed visitor/security records are automatically deleted after the configured retention period (30 days in the initial configuration), while security audit events may be retained longer to protect the service.

Usage statistics

The website uses a first-party analytics system operated directly by SRADRAVEN and does not send browsing analytics to external analytics platforms. To measure visits, viewed pages and traffic sources, the website processes technical data such as requested page, date and time, referrer/source, UTM parameters, device type, browser, operating system and selected site language. By default, full IP addresses are not stored in analytics: a masked version is retained and rotating hashed identifiers are used for counting. Detailed visit records are kept only for a limited configured period; aggregated statistics may remain afterwards.

The system does not use fingerprinting, advertising profiling or cross-site tracking.

Cookies

The initial configuration uses technical session cookies required for login and website operation and a technical preference cookie to remember the selected language (Italiano/English).

Your rights

Users may request access, correction or deletion of their data and may delete their account directly from the Account page.

Minors

The Playtest Lab is currently restricted to adult users.