Privacy Policy

Who is responsible for your data

LoadoutDB is operated by Web Sharks Technologies LLC, a limited liability company based in Indiana, United States. For the purposes of the UK and EU General Data Protection Regulation, Web Sharks Technologies LLC is the data controller for this site.

You can reach us about anything in this policy at [email protected].

What we collect

Server logs

Like every web server, ours records requests. A log entry contains your IP address, the page requested, the time, and your browser's user-agent string. These are used to keep the site running and to investigate abuse or errors. They are not used to build a profile of you and are not combined with anything else.

Your display preferences

The site remembers your Advanced stats setting and the upgrade level you last chose on a weapon page, in your browser's local storage, so it does not reset every time you open a page. Each is a single short value. They never leave your device, they are not cookies, and they are not sent to us or to anyone else. Clearing your browser data removes them, and the Cookie Policy lists them in full.

Analytics

We measure which pages are visited and roughly where visitors come from, so we know what is worth working on. We do not attempt to identify individuals. Details of the specific tool and whether it uses cookies are in the Cookie Policy.

What we do not do

• We do not sell personal data, and we never have.
• We do not run accounts, logins or newsletters.
• We do not ask for your name, email address, age or location — except on the contact form, where you choose to give them so we can reply.
• We do not use fingerprinting, session recording, heatmaps or scroll tracking.
• We do not share your data with anyone except the service providers listed below.

If you use the contact form

The contact form is the one place on this site that asks for personal data, and it is entirely optional — the same addresses are published as plain email, and nothing on the site requires you to write to us at all.

What it collects

Your name, email address, subject, reason for writing and the message itself — whatever you type. Your IP address is used at the moment of sending, for the spam checks described below, and is not stored with your message.

What happens to it

It is sent to us as an email and nothing else. There is no database behind this form and no copy is kept on the web server. Once the mail is sent, the message exists only in our mailbox, and it is kept only as long as it is useful to answer you or to act on a correction you reported.

Spam checks

To stop automated abuse, submissions are checked by CleanTalk, an anti-spam service. Your name, email address, IP address and the text of your message are sent to CleanTalk for that check. They act as our processor for this and nothing else, and this happens on our server — CleanTalk sets no cookie and runs no script in your browser. We also count recent submissions per connection, using a one-way hash of your IP address rather than the address itself, and discard those counts within an hour.

Legal basis, if you are in the EEA, the UK or Switzerland

Article 6(1)(b) and 6(1)(f). Handling the message you deliberately sent us is what you asked for; running spam checks on it is our legitimate interest in keeping a public form usable. You can object at any time — and you can avoid the form entirely by emailing us directly.

Why we are allowed to process it (GDPR legal bases)

If you are in the EEA, the UK or Switzerland, we rely on the following:

Legitimate interests — Article 6(1)(f)

For server logs. Our interest is keeping the site available and secure. The data is minimal, retained briefly, and not used to make decisions about you, so we consider this proportionate. You can object at any time.

Consent — Article 6(1)(a)

For any analytics or advertising cookie that is not strictly necessary. We ask before setting these, and you can withdraw consent at any time without affecting the lawfulness of what came before.

Who else sees it

Running a website means other companies necessarily handle some data. Today that is limited to the following, grouped by when they are involved at all:

Involved in delivering every page

• Cloudflare, Inc. — CDN, DNS and DDoS protection. Sees the IP address of every request. Privacy policy .
• JWM Marketing — Web hosting. Stores server access logs.
• Clicky (Roxr Software Ltd) — Page-view analytics. Receives the page you viewed, the referring page and your IP address, which it uses to count visits and infer country. Configured to set no cookies, and not used to identify you or track you across other sites. Privacy policy .

Involved only if you use the contact form

• CleanTalk — Spam filtering for the contact form only. Receives the name, email address, IP address and message text of a submission at the moment it is sent. Not used anywhere else on the site. Privacy policy .
• Twilio SendGrid — Outbound mail delivery. Carries contact form messages from the server to our mailbox. Privacy policy .

International transfers

We are based in the United States and the site is hosted there, so if you visit from outside it your request is necessarily handled in the United States. Where personal data of EEA, UK or Swiss visitors is transferred, we rely on the European Commission's Standard Contractual Clauses, or on our providers' certification under the EU–US Data Privacy Framework, as applicable to each provider.

How long we keep it

Server logs are retained for no longer than 30 days and are then deleted or overwritten by our host in the ordinary course. Your display preferences stay in your browser until you clear it.

Messages sent through the contact form are not stored on this website at any point — there is no database behind the form. They exist as email in our mailbox, and we keep them only while they are useful for answering you or acting on a correction, then delete them. The per-connection spam counts described above are hashed and discarded within an hour. We hold no other personal data.

Your rights

If you are in the EEA, the UK or Switzerland

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have data erased;
• restrict or object to processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on it;
• lodge a complaint with your national supervisory authority. You do not have to contact us first, though we would prefer the chance to put something right.

We should be straight with you about what this means in practice: because we hold no accounts and no identifiers, we usually cannot tell which log entries are yours. If you make a request we will ask for enough information to locate the data, and where we genuinely cannot identify you, Article 11 of the GDPR permits us to say so rather than collect more data about you in order to comply.

If you are in Indiana, California or another US state with a privacy law

Depending on where you live you may have the right to know what personal information is collected, to have it deleted or corrected, to receive a copy, and to opt out of sale or of targeted advertising, along with a right not to be discriminated against for exercising any of them.

We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under the Indiana Consumer Data Protection Act or the California Consumer Privacy Act. To exercise any right, email [email protected].

Children

This site is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes

When this policy changes we will update the effective date at the top. If a change materially affects how we handle your data — introducing analytics or advertising, for instance — we will make that clear on the site rather than quietly amending the text.

Contact

Privacy questions and rights requests: [email protected]. Anything else: the contact page.