Privacy Policy

This Privacy Policy explains what personal data the TwinForge website https://twin-forge.eu (the "app") and the TwinForge Counter-Strike 1.6 game servers collect, and how we use, store, share and delete it — including the data we receive from Google when you choose "Sign in with Google".

1. Who we are

TwinForge is a Counter-Strike 1.6 gaming community: a website with player accounts, statistics, clans and a shop of in-game services, and the game servers connected to it. The website and the servers are operated by the TwinForge administration, which is the data controller. Contact for any privacy, data or payment question: mihalovnikita12@gmail.com.

2. Google user data (Sign in with Google)

You can create an account or sign in to TwinForge with your Google account. This is optional — you can also register with a username, email and password.

What we access. We request only the basic sign-in scopes openid, email and profile. From Google we receive: your Google account ID, your email address (and whether Google has verified it), your name and your profile picture URL. We do not request access to Gmail, Google Drive, Contacts, Calendar, YouTube or any other Google service, and we never receive your Google password.

How we use it. Only to: create your TwinForge account or link Google to an existing one; sign you in; fill in your display name and avatar (you can change both in your profile); and contact you about your account and orders (for example password recovery and order confirmations). We do not use Google user data for advertising, we do not use it to build profiles for third parties, and we do not use it to train AI or machine-learning models.

How we store it. The Google account ID, email, name and picture URL are stored in our database on our own server in the European Union (Poland), together with your TwinForge account. Access to the database is limited to the site administration, and all connections to the website are encrypted with HTTPS.

Sharing. We do not sell, rent or transfer Google user data to anyone. It is not shared with advertisers, data brokers or other third parties. The only exception is disclosure to public authorities where the law requires it.

Retention and deletion. Google user data is kept for as long as your TwinForge account exists. You can disconnect Google at any time in your account settings, or remove TwinForge's access at myaccount.google.com/permissions. To delete your account together with all Google user data, email mihalovnikita12@gmail.com from the address on the account — we delete it within 30 days.

Limited Use. TwinForge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Other data we collect

Website account: username, email address, password (stored only as a salted hash — we never see the password itself), and anything you add to your profile yourself: nickname, Steam ID, avatar, country, bio, Discord and Telegram names, your in-game chat tag, theme settings.

Playing on our game servers: Steam ID, in-game nickname, IP address while connected, game statistics (kills, deaths, hits, damage, playtime, maps, sessions), server chat messages, and punishments (bans and mutes and their reasons). These statistics are shown in public rankings on the website.

Purchases: which service was ordered, the amount, payment status, the Steam ID the service is granted to, and the date. Card details are entered on the payment provider's side (for example Google Pay or the card payment provider) — we never see or store card numbers.

Technical data: IP address, browser type and visited pages in server logs; cookies (see section 7). Your IP address is also used to pick the site language by country (MaxMind GeoLite2 database, processed locally on our server).

4. How we use data

• to provide your account, sign-in and password recovery;
• to grant purchased services (VIP packs, reserved slot, chat tag, clan) to your Steam ID in the game;
• to keep statistics, rankings, tournaments, clans and daily rewards;
• to protect the servers and the website from cheating, attacks, fraud and ban evasion (including checking IP addresses against VPN lists);
• to answer your requests and support questions.

We do not sell personal data, do not share it with advertisers and do not show ads.

5. Who receives data

Only service providers the app cannot work without, and only what they need: our server hosting provider; the payment provider (to process a payment); Google (if you sign in with Google); and an email delivery service (to send password-recovery and order emails). Public authorities only where the law requires it.

6. What others can see

Public: nickname, avatar, game statistics, ranking, clan, server role, and bans and mutes. You can hide your profile in settings ("Show profile publicly"). Email addresses, IP addresses, passwords, orders and your Google account data (other than the name and avatar you choose to show) are never shown publicly.

7. Cookies

The website uses only necessary cookies: the sign-in session, form protection (CSRF) and your chosen language. There are no advertising or third-party tracking cookies and no analytics trackers.

8. How long we keep data

Account data (including Google user data) — while the account exists. Game statistics and punishment history — while the servers run, because rankings and ban-evasion protection depend on them. Order records — as long as required for payment accounting. Server logs are deleted periodically.

9. Your rights and account deletion

You can view and edit your profile data in settings at any time. You can also email mihalovnikita12@gmail.com to get a copy of your data, correct it, or delete your account. Deletion removes your account, profile, email and Google user data within 30 days; game statistics may remain in public tables without any link to the account, and ban history is kept to protect the servers. If you are in the EU, you also have the right to lodge a complaint with your data protection authority.

10. Security

The website is served only over HTTPS, passwords are hashed, and access to the server and database is restricted to the administration and protected by SSH keys.

11. Children

The app is not directed at children under 13. If you are under 16, you may buy services only with the consent of a parent or guardian.

12. Changes

We may update this policy. The date of the current version is shown at the top of the page; significant changes are announced in the site news.

13. Contact

TwinForge administration — mihalovnikita12@gmail.com, website https://twin-forge.eu.