Privacy Policy

This text simply explains what data we collect on https://gtaforum.org , why we do it and what rights you have.

Who is responsible for your data

The Administrator is Namo. Contact for privacy matters: [email protected] . In this document, we refer to ourselves as the Administrator .

What data do we collect?

Only what is needed for the Forum to function: • account data: login (display name), email address, password saved as an encrypted hash, profile data, if you add it: avatar, signature, location, links, content you publish: posts, comments, attachments, reactions, technical data: IP address, session identifiers, browser/device type, error and security logs, correspondence with us (contact form, email), consent and cookie settings. If you log in through an external provider (e.g., Google/Discord/Facebook), we receive your account ID and email address needed to log in.

Why do we process data?

To enable registration and login, manage your account and profile, display posts and threads, ensure security and moderation, measure basic statistics of the Website's performance, respond to messages, send notifications (if you enable them) and - optionally - conduct our own marketing informing you about new products.

On what basis do we do this?

GDPR, art. 6 sec. 1: performance of the contract (use of the Forum in accordance with the regulations), our legitimate interests (security, statistics, pursuing claims, infrastructure maintenance), legal obligation (billing), and in the scope of analytics/marketing - your consent. You can withdraw your consent at any time.

Do you have to provide data?

For viewing public content – no. For creating and maintaining an account – yes, to a minimal extent (login, email, password). Necessary cookies are required for the operation of the Website. Analytical/marketing cookies are voluntary.

What is public

The forum is public. Your posts, username, avatar, and other voluntary profile elements are visible. Private messages are visible only to participants. In exceptional circumstances, we may investigate them if required by law or regulations (e.g., reports of abuse, a government order).

Who do we share your data with?

We use the services of subcontractors who process data solely on our instructions: server hosting and maintenance, Invision Community forum software (including Spam Defense), CDN and network security (Cloudflare), email/SMTP (SendGrid), analytics (Google Analytics), anti-bot/anti-spam (reCAPTCHA), accounting, and legal services – when necessary. Data may be shared with public authorities authorized by law.

Does data go outside the EEA?

If the provider is based outside the European Economic Area (e.g., in the USA), the transfer will be based on the mechanisms provided for by the GDPR (standard contractual clauses, adequacy decisions). Details will be provided upon request.

How long do we store data?

Account and profile - until account deletion or until the statute of limitations for claims expires. Posts and threads - as part of the Forum history; after account deletion, we mark the author as Guest or similar. Security logs - usually up to 12 months. Correspondence - up to 36 months. Accounting documents - in accordance with regulations (usually 5 years). Cookies - in accordance with browser settings and our validity periods.

Cookies and similar technologies

We use cookies for logging in, personalization, security, and—with your consent—analytics and marketing. Upon your first visit, we display a cookie notification with the ability to select a category. You can later change your settings in the Forum footer. Categories: essential (service operation), functional (your preferences), analytical (statistics), marketing (sponsored content). Examples: Invision Community session cookies, device identifier, saving your cookie choices, analytical identifiers (_ga / pk *). Names may vary depending on your configuration.

Your rights

You have the right to access, rectify, erase, restrict, transfer, object to processing based on our legitimate interests, and withdraw consent. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl ). To exercise your rights, please contact us.

Security

We store passwords in the form of cryptographic hashes. The connection to the Website is encrypted (TLS/HTTPS). Only authorized individuals have access to the data.

Changes in policy

When we change the way we process data or our service providers, we will update this policy and include the new date at the top of the document.