Privacy notice | Project Vapor: Frontlines

Draft. This notice describes how the site is built. It has not been reviewed by a lawyer, and the operator’s legal name and contact address still need to be filled in before launch.

Who is responsible

This website and the Frontlines game services are run by Project Vapor (“we”). For anything in this notice, contact us through the Discord.

What this website collects

Server logs. When you load a page, the web server records your IP address, the page asked for, the time and your browser’s user agent. We use these to keep the site running, to stop abuse, and to count visits. Logs are kept for 30 days.

No tracking cookies. The site sets no advertising or analytics cookies and loads nothing from advertising networks. Visit counts are worked out from the server logs.

The host request form. If you ask for a server token, we keep the community name, the contact you gave (an email address, Discord handle or URL) and your note, so an admin can review the request and send you the token. Your IP address is used to limit how many requests one address can make.

Signing in through Steam. If you sign in, Steam tells us your public SteamID and nothing else: we never see your Steam password or email address. The site then sets one cookie, vf_session, which holds your SteamID and an expiry date, signed so it cannot be altered. It lasts 14 days, or until you sign out. It is strictly necessary for staying signed in, so it needs no consent banner.

What the game services collect

The master server lists game servers. It also publishes how many players are online in each country, by army. The country comes from your Windows region setting, sent by the game; no IP address is looked up, and only totals per country are ever published.

The progression backend keeps, against your SteamID, the profile you build by playing on ranked servers: your callsign, skills, cash, stash, equipped kit and garage, and the match results that ranked servers report.

Your public profile

If you play on ranked servers, a public player card shows your callsign, your skill levels and your overall level. It never shows your cash, stash, kit or garage. You can hide your card, and remove yourself from leaderboards, with the switch on your career page.

Nobody, for marketing. Steam (Valve) is involved when you sign in or play, under its own privacy policy. If you click through to Discord, Discord’s policy applies there.

Your rights

Under UK and EU data protection law you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Contact us through the Discord and we will answer within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your own country’s regulator.

Changes