Privacy policy.

Controller and contact

Controller: [full legal name or company and legal form]. Address: [geographic business address in the EEA]. Privacy contact: [working email address]. Data protection officer: [contact details if one is required or appointed]. These details must be completed before public launch.

What the current site does

The reviewed project has no account registration, contact form, analytics integration, advertising tracker or social-media embed. Calculator inputs are processed in the browser and are not sent to an NEXFRAG application endpoint. The theme switch changes the current page only and does not save a preference. No Google Fonts request is present in the project; the site uses system fonts.

Hosting and technical logs

The public site is hosted through Hostinger and its CDN is enabled. To deliver and protect the site, the hosting provider may process technical request data such as IP address, time, requested URL, response status and browser or device headers. Confirm the exact provider entity, processing locations, log fields, retention period, data-processing agreement and transfer safeguards from the hosting account before publication. Suggested purpose and legal basis: website delivery and security under [legal basis to be confirmed, including legitimate-interest assessment if relied upon].

Skin images and external links

Skin images load directly from Steam community CDN hostnames, and video preview images on the video-guides page load directly from YouTube’s image host (i.ytimg.com, operated by Google). Videos themselves are not embedded; they open on YouTube only when you follow a link. A browser request for an image discloses connection data such as the IP address and request headers to the services involved in image delivery; it happens when the image is displayed, without clicking a link. Steam Market, Valve news, ProSettings and other external pages receive a request if you follow their links. Those providers operate under their own terms and privacy notices.

Recipients, transfers and retention

Potential recipients include Hostinger and its hosting/CDN providers for website delivery, and the services delivering Steam community images and YouTube preview images (Google). Verify each legal entity and any access or transfer outside the EEA, including the applicable GDPR Chapter V safeguard. Hosting-log retention: [confirm from the Hostinger plan and privacy settings]. NEXFRAG does not currently keep calculator submissions or user accounts.

Your rights and complaints

Depending on the legal basis and circumstances, you may request access, correction, deletion or restriction, object to processing, request portability, and withdraw consent where processing relies on consent. Contact the controller using the details above; the request-handling process and response contact still need to be set. You may complain to the Austrian Data Protection Authority (Datenschutzbehörde). Add the final purposes, legal bases, recipients, retention periods and international-transfer information required by GDPR Article 13 after the hosting setup is confirmed.

Related draft

See the cookie and device-storage notice for the current cookie audit and consent requirements before future analytics or advertising integrations.