Privacy policy
1. Data controller
- Controller: David Luis Groza Mateescu, tax ID X9271910N
- Address: Carrer Mestre Hierro, 9, 43550 Ulldecona (Tarragona), España
- Contact: contact@bodycamforo.com
2. What data we process and why
a) Browsing. The hosting server logs technical data such as your IP address, browser, date and the page visited.
- Purpose: to serve the site, keep it secure and detect abuse.
- Legal basis: legitimate interest (art. 6.1.f GDPR).
- Retention: only as long as needed for that purpose, at most 12 months, unless the law requires otherwise.
b) Language. If you choose a language with the selector, we store that choice in the technical cookie NEXT_LOCALE. To pick a language on your first visit we use your browser language and, when our network provider supplies it, the approximate country of your connection. We do not store that country.
c) Advertising. If the site shows Google AdSense ads, Google and its partners may use cookies and identifiers to show and measure ads.
- Legal basis: your consent (art. 6.1.a GDPR), requested through a Google-certified consent management platform before any non-essential cookie is set.
- You can withdraw consent at any time from "Cookie settings" in the footer.
d) Account (Sign in with Steam). If you sign in with Steam, Steam confirms your SteamID and we fetch your public Steam name and avatar. We never receive or store your password.
- What we store: the builds, posts and comments you publish, your votes, your reports and the dates. Builds, posts, comments, name and avatar are public.
- Session cookie:
dh_session, 30 days, to keep you signed in. - Purpose: to provide the service, show authorship, count votes, moderate and prevent abuse. This includes posting limits and suspensions.
- Legal basis: performance of the service you request by creating the account (art. 6.1.b GDPR) and legitimate interest in keeping the service safe (art. 6.1.f).
- Retention: while the account exists.
- Deletion: you can delete each build, post or comment, and delete your account from your forum profile. Doing so removes your account data, sessions, votes and reports. Your builds are deleted and your posts and comments are emptied to "[deleted]". Content removed by moderation and reports are deleted once they are no longer needed to handle the complaint.
e) Build editor draft. While you create a build, the draft is saved only in your browser (local storage) so you don't lose it when signing in. It is not sent to our server until you publish it.
f) Email contact. If you write to us, we use your email and message to reply, until the matter is resolved and for the legal limitation periods.
g) Public player statistics. Player pages and the leaderboard show public Deadlock match data (Steam name and avatar, rank, heroes and results) that we get from the community Deadlock API. We don't store it in our database: it is fetched when the page is visited and cached for a few minutes. These pages are not indexed by search engines. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in offering statistics for an online game based on data the game itself makes public. You can object: the Deadlock API lets you hide your profile (deadlock-api.com) and our page then respects it and shows nothing; you can also write to us and we will block your account here.
3. Data we do NOT process
- You don't need an account to read the site.
- Match statistics are fetched by our server from the Deadlock API. None of your data is sent in those requests.
- Game images are served through our own server: your browser does not connect to third parties to load them.
- We do not sell personal data.
4. Recipients and international transfers
- Hosting provider: processor bound by a contract under art. 28 GDPR.
- Valve / Steam: when you sign in, your browser goes to Steam to identify you. Steam processes that data under its own privacy policy.
- Google (AdSense): only if you accept advertising cookies.
Some providers may process data outside the European Economic Area. When they do, they use appropriate safeguards: an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.
5. Minors
This site is not aimed at children under 14. We do not knowingly collect their data.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to contact@bodycamforo.com.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to your local authority.
Last updated: September 29, 2026.