WD CIRCUIT

Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website is the operator of WD Circuit. Contact: contact@wd-circuit.com

2. What data we process

  • Account: email address, password (stored only in encrypted form) or, with Google sign-in, the email address and name provided by Google.
  • Profile: player name, region, languages, game roles, optional Discord name.
  • Consents: time of acceptance of the Terms of Use, Privacy Policy, Code of Conduct and the age confirmation (16+).
  • Clan and coalition data: memberships, ranks, applications including the details you provide in them, messages, board posts, league statistics.
  • Security data: leadership log (who changed which role or membership and when), notifications, requests for dissolution or handover.
  • Technical data: when you visit the site, our hosting provider processes technically necessary data (e.g. IP address, time, browser type) in server logs to deliver the site securely.

3. Purposes and legal bases

  • Providing the account and league features: Art. 6(1)(b) GDPR (user agreement).
  • Security, protection against abuse and spying, leadership log: Art. 6(1)(f) GDPR (legitimate interest in fair and secure gameplay).
  • Proof of consents: Art. 6(1)(c) and (f) GDPR.

4. Who sees the data

  • Publicly visible: player name, region, languages, game roles, clan and coalition membership, ranks, league results and statistics.
  • Only for your clan or coalition: member lists, boards, briefings, plans.
  • Only for clan leadership: your application.
  • Your email address is never visible to other users.

5. Hosting and service providers

  • The website and database are operated via Lovable (Lovable Cloud) and the database service Supabase. They process the data on our behalf. This may involve a transfer to the USA, which takes place on the basis of the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
  • Google sign-in (optional): if you use “Continue with Google”, Google sends us your email address and your name. Google's privacy policy also applies.
  • Confirmation and password emails are sent via our hosting provider's email service.

6. Cookies and local storage

We do not use tracking or advertising cookies. Only technically necessary data is stored in your browser (sign-in session, language selection). No consent is required for this (Section 25(2) TDDDG).

7. Storage period

We store your data as long as your account exists. After your account is deleted, your personal data is deleted or anonymized unless there is an obligation or legitimate interest in keeping it longer (e.g. league results of past Seasons in anonymized form, security logs for up to 12 months).

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). To exercise them, write to contact@wd-circuit.com. You can also lodge a complaint with a data protection supervisory authority.

9. Minimum age

Use is permitted from the age of 16.