Privacy policy

The data controller for armadb.info is ArmaDB. For anything about your data, write to [email protected].

ArmaDB is a public database of Arma Reforger game servers and Workshop mods. That data comes from the game's own systems and from the servers themselves and describes servers and mods, not people. This policy is about the personal data the site handles on top of that.

We store what you give us: your name, your email address and a hashed password, plus the time you accepted the terms. If you enable it, two-factor secrets and passkeys are stored too.

While you use the account we also keep: your API keys (a prefix and a hash, never the key itself) and daily request counts; the tickets you open and their messages; the ad campaigns you create and their status; the servers you claim and the description you write for them; your favorite servers.

Purpose and legal basis: to provide the account and its features (performance of a contract, art. 6(1)(b) GDPR). Retention: as long as the account exists. Deleting the account from your settings schedules its removal: after a grace period during which you can cancel, it is deleted with everything attached to it.

You can download a copy of all of this at any time from your settings.

Page views are counted by the server, without third-party scripts. For each view we keep the page, the time, the country derived from your IP address, and a visitor token built from a daily salt that cannot be linked back to you after that day. We do not store your IP address, your user agent or query strings.

To protect the site from abuse, IP addresses are held briefly in a temporary cache for rate limiting and, in case of repeated abuse, for a temporary block. They are not written to the database and expire on their own.

Ads shown on the site are served by us and supported by voluntary contributions. Impressions and clicks are counted as numbers only, without cookies and without identifying who saw or clicked them.

Legal basis: our legitimate interest in running, measuring and securing the service (art. 6(1)(f) GDPR). Page view records are deleted automatically after a fixed period.

Only first-party technical cookies, which need no consent: the session cookie and the CSRF token that keep the site working; a "remember me" cookie if you choose it at sign in; and a "tz" cookie holding the time zone used to display times. Your appearance preference is kept in your browser's local storage. There are no advertising, analytics or third-party cookies.

To verify the player counts that servers report, the site periodically asks the game's lobby service who is connected to a server. That answer contains the in-game username, a platform user identifier and the platform (PC, Xbox, PlayStation) of each connected player.

What is published is only the count. Identities are never shown on any public page, never returned by the API and never included in exports or sitemaps. They are kept in a restricted area for a short time and then deleted automatically.

Legal basis: our legitimate interest in publishing accurate figures and detecting servers that misreport them (art. 6(1)(f) GDPR). Because we obtain this data from the game and not from the players, we cannot inform each of them individually; this section is the notice required by art. 14 GDPR. If you are a player and object to this processing, write to [email protected] with your in-game name and platform.

Only transactional messages: email verification, password reset, replies to your tickets and the outcome of an ad campaign review. No newsletters and no marketing.

The providers that host the site and deliver its emails, acting on our instructions. Data is not sold and is not shared with anyone else, except where the law requires it.

You can access, correct, export and delete your data yourself from your account settings. You can also ask us for access, rectification, erasure, restriction, portability, or object to processing based on legitimate interest, by writing to [email protected].

If you believe your rights have been infringed you can lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

Passwords and API keys are stored as hashes. Two-factor authentication and passkeys are available on every account. Traffic is encrypted in transit.

You must be at least 14 years old to create an account.

When this policy changes, the date at the top changes with it. Substantial changes are announced on the site.