Privacy Policy
Last updated: August 2026
This Privacy Policy explains how SC THE INNKEEPERS S.R.L. (“DuskForge”, “we”, “us” or “our”) collects and uses personal data when you visit www.duskforge.gg (the “Website”), create an account or post comments.
1. Who is responsible for your data?
The controller of your personal data is SC THE INNKEEPERS S.R.L.
You can contact us regarding privacy matters at privacy@duskforge.gg.
Our complete company and contact information is available in our Terms of Use.
2. What personal data do we process?
Depending on how you use the Website, we may process:
Account information: your email address, username or display name, password in encrypted or hashed form, account creation date and account status.
Comments and related information: the content of comments you submit, your displayed username, the article on which you commented, and the date and time of submission.
Technical and security information: IP address, browser and device information, operating system, access times, requested pages, error records and other server or security logs.
Communications: information you provide when you contact us, together with our correspondence with you.
Please do not include sensitive personal data or unnecessary personal information in your username, comments or communications with us.
3. Why do we process your data?
We process personal data for the following purposes and on the following legal bases.
Providing and managing accounts and comments. We use your account information and comments to create and administer your account, authenticate you, publish comments at your request and provide the Website’s commenting functions. The legal basis is the performance of our agreement with you under Article 6(1)(b) GDPR.
Moderation, security and prevention of misuse. We may use account, comment and technical information to moderate comments, enforce our Terms of Use, detect spam or abuse, protect accounts and systems, investigate security incidents and establish, exercise or defend legal claims. The legal basis is our legitimate interest in operating a safe, reliable and lawful website under Article 6(1)(f) GDPR.
Responding to communications. We use the information you send us to answer questions, deal with complaints and respond to requests. Depending on the nature of the communication, the legal basis is taking steps at your request before entering into an agreement, performing an agreement with you, or our legitimate interest in managing communications concerning the Website.
Compliance with legal obligations. We may process or disclose information where necessary to comply with applicable law, binding requests from public authorities or court orders. The legal basis is Article 6(1)(c) GDPR.
4. Are you required to provide personal data?
You may browse the Website without creating an account.
Providing the information marked as required during registration is necessary if you wish to create an account or post comments. If you do not provide it, we cannot provide those functions.
5. Public comments
Comments, usernames and their publication dates are visible to other visitors. You should therefore only post information that you are comfortable making public.
If your account is deleted, we may delete your comments or remove their association with your account and replace your displayed username with an anonymous label. Information may be retained where necessary to comply with law, address abuse or protect legal rights.
6. Who receives your data?
Access to personal data within DuskForge is limited to authorised team members who need it to operate, secure and maintain the Website.
We also use the following service providers:
OVHcloud provides the physical server and network infrastructure on which the Website and its email services are hosted. We administer the servers, and OVHcloud does not have routine access to Website accounts, comments or email content.
Google Ireland Limited provides Google Analytics. Analytics information is sent to Google only where you have consented to the use of analytics technologies.
We may also disclose personal data to professional advisers where reasonably necessary for legal, accounting or security purposes, and to courts, public authorities or other recipients where disclosure is required by law.
Service providers that process personal data on our behalf are subject to applicable contractual and confidentiality obligations.
We do not sell your personal data.
7. Google Analytics and international data transfers
With your consent, we use Google Analytics to understand how visitors use the Website. Google Analytics is provided by Google Ireland Limited.
Google Analytics may collect information about your device, browser, approximate location and interactions with the Website. Google states that IP addresses collected from users in the European Economic Area are discarded before the resulting data is logged through its EU infrastructure.
Google and its subprocessors may process information outside the European Economic Area, including in the United States. According to Google, transfers to the United States may be covered by the EU–US Data Privacy Framework, while Standard Contractual Clauses approved by the European Commission are used where required for transfers not covered by an adequacy decision.
These transfer arrangements are established and administered by Google under its applicable terms. Further information is available in Google’s Privacy Policy and its information concerning international data-transfer frameworks.
8. How long do we retain data?
We retain personal data only for as long as reasonably necessary for the relevant purpose:
account information is normally retained while your account remains active;
comments are normally retained while they remain published, unless removed earlier;
technical and security logs are normally retained for no longer than 6 months, unless a longer period is needed to investigate an incident;
anonymized Google Analytics data is normally retained indefinitely and since it is not personally identifiable even by us it cannot be removed on request;
communications are retained for as long as reasonably necessary to handle the matter and protect our legal rights; and
information required for legal compliance or legal claims may be retained for the applicable statutory period.
Deleted information may remain in restricted backups for up to 30 days before being overwritten.
9. Cookies and similar technologies
The Website uses strictly necessary cookies and similar technologies to provide requested functions and maintain the security and operation of the Website. These may include login, session, preference and security cookies. These technologies do not require consent.
With your consent, we also use Google Analytics cookies and similar technologies to understand how visitors use the Website, including which pages are visited and how visitors navigate the Website. Google Analytics is not activated unless you consent to analytics technologies.
You may accept or reject analytics technologies through our cookie banner and may withdraw or change your consent at any time by clicking the "Cookies settings" button present in the footer on each page of the website.
We do not currently use advertising cookies or cookies for targeted advertising.
10. Automated decision-making
We do not use your personal data to make decisions producing legal or similarly significant effects solely by automated means.
We may use automated tools to identify likely spam, malicious activity or technical threats. Where appropriate, moderation decisions may be reviewed by a person.
11. Children’s privacy
The Website is intended for a general audience and is not directed to children under 13.
We do not ask users to provide their age. If we learn that we have collected personal data from a child under 13 in circumstances requiring parental consent, we will delete that data unless its continued processing is permitted by law.
Parents or guardians who believe that a child has provided personal data to us may contact us at privacy@duskforge.gg.
12. Your rights
Subject to the conditions and exceptions provided by law, you may have the right to:
* obtain confirmation that we process your personal data and receive a copy of it;
* correct inaccurate or incomplete data;
* request deletion of your data;
* restrict how your data is processed;
* receive certain data in a structured, commonly used and machine-readable format;
* object to processing based on our legitimate interests; and
* withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect processing carried out lawfully before withdrawal.
To exercise your rights, contact us at privacy@duskforge.gg. We may request information reasonably necessary to verify your identity. We normally respond within one month, although the period may be extended where permitted by law.
You also have the right to lodge a complaint with the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Website: https://www.dataprotection.ro/
You may also contact the data-protection authority in the EU or EEA country where you live.
13. Security
We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. No internet-based service can, however, be guaranteed to be completely secure.
You are responsible for keeping your password confidential and should notify us if you believe that your account has been compromised.
14. Changes to this Privacy Policy
We may update this Privacy Policy when our practices, services or legal obligations change. The updated version will be published on this page with a revised “Last updated” date.
If a change materially affects how we use existing account information, we will provide additional notice where required by law.
15. Contact
Questions or requests concerning this Privacy Policy may be sent to:
SC THE INNKEEPERS S.R.L.
Email: privacy@duskforge.gg
Our registered office and complete company information are provided in our Terms of Use.