Data protection
Privacy
This policy explains what data may be processed when you visit, why it is used and what rights you can exercise.
Last updated:
Data controller
The data controller is u/aldersonloop59, author of this non-profit fan codex, reachable at review@updates.attackontitancodex.com.
The site requires no sign-up and asks for no personal data to browse it: there are no user accounts, contact forms or newsletters.
Data and purposes
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Operation and security | Technical data, logs and IP address processed by the infrastructure | Deliver the website, keep it secure and diagnose errors | Legitimate interests |
| Vercel Web Analytics | Visited pages, referrer, device, browser and approximate location in aggregated form | Understand overall website use without identifying visitors | Legitimate interests |
| Google Tag Manager / Google Analytics 4 | Cookie identifiers, visited pages, events, device and approximate location | Measure audiences and improve content | Consent; it must not load before consent is obtained |
| Buy Me a Coffee | Technical data resulting from loading or using the external widget | Provide an optional way to support the project | Consent when the service uses non-essential technologies |
| ODM training leaderboard | The three initials you choose, the cadet, the score and the inputs of the run, tied to no account | Verify the run and show the initials on the public leaderboard | Consent: it is only sent when you sign a run |
During the closed review phase that precedes public launch, invited reviewers sign in through a magic link sent to their email. That address and their review activity are stored only for the duration of the phase and deleted when it closes; they are not part of the public site.
Recipients and transfers
Data may be processed by providers needed to operate the website, mainly Vercel for hosting and analytics, Google when you accept the analytics category, Buy Me a Coffee when its widget is loaded or used, and Supabase, which hosts the ODM training leaderboard when you sign a run.
Some providers may process data outside the European Economic Area. Where this occurs, safeguards required by law must apply, such as adequacy decisions or standard contractual clauses.
Retention
Data will be kept only for as long as needed for each purpose and to address potential legal liabilities. Vercel states that anonymous Web Analytics session identification is discarded after 24 hours. Google Analytics must retain data according to the period configured in the corresponding property. Signatures on the ODM training leaderboard are kept for as long as that version of the game's leaderboard lasts, and you can ask for yours to be removed.
Your rights
You may request access, rectification, erasure, objection, restriction or portability of your data, and withdraw consent previously given, by writing to review@updates.attackontitancodex.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Children and changes
The website does not intentionally request personal data from children. This policy may be updated when the services used or applicable law change; the revision date will appear at the top.
