Privacy

Last updated: 12 October 2026

1. Controller and scope

Fudge Gaming is responsible for personal data processed by this website and the new webshop. Privacy and rights contact: danishfudge@gmail.com. This policy covers visitors, buyers, gift recipients and staff. External services also have their own privacy policies.

2. Data and sources

We process SteamID64, profile name/avatar, any linked Discord ID and roles, purchases/recipient, products, DKK amounts, transaction IDs, payment status, receipts, consent and delivery/expiry status. PayPal may provide payer name and email for receipts and reconciliation. IP addresses and technical events support security. Support includes messages and account details you submit. Sources are you, the gift buyer, Steam, Discord, PayPal and our game servers; approved history imports may come from CraftingStore. We do not receive your Steam/Discord password or full card number.

3. Purposes and legal bases

Login, orders, payment, delivery and purchase support are necessary for the contract (GDPR Art. 6(1)(b)). Statutory accounting records use Art. 6(1)(c) where the obligation applies. Security, abuse prevention, staff display and gift-recipient data rely on legitimate interests in safe operation and correct delivery (Art. 6(1)(f)); you may object. Optional Discord linking follows your choice. We do not send marketing without a separate valid basis.

4. Recipients and hosting

The website is hosted by Simply.com A/S, processing hosting data on our behalf. Steam/Valve handles login/profile lookup, PayPal payment, and Discord linking/roles and support when used. Our Rust servers and support bot receive information needed for delivery or your case. Authorized staff have task-based access; purchase finances are restricted to trusted permission holders. Email sent to our Gmail address is also processed by Google’s email service. Data may be disclosed to authorities where legally required. We do not sell personal data.

5. Transfers outside the EU/EEA

External Steam, Discord, PayPal and email services may process data outside the EU/EEA, including the US. Their privacy policies describe their transfers and safeguards. Transfers for which we are responsible require a valid GDPR mechanism, such as an applicable adequacy decision or standard contractual clauses. Contact us for information about relevant safeguards.

6. Retention

Account and delivery data are kept while needed for the account, active rights, gifts and delivery evidence. Lifetime may require longer retention than a timed period. Support and security data are assessed against the case purpose and any claims. Where accounting obligations apply, records are retained for five years after the financial year ends. Necessary data may be kept longer for a specific dispute or legal duty; other data are deleted or anonymized when no longer needed. Backups follow the defined backup cycle. Contact us about erasure or a specific retention period.

7. Cookies, browser storage and choices

We use a necessary session cookie for login, security and language/currency, plus necessary browser storage for the cart and recipient choice in the current tab. Only if you allow it, we also remember the cart between visits for up to 30 days. Your yes or no is stored for up to 180 days. You can change your choice or withdraw permission using Cookies below Discord in the footer; the persistent cart is then deleted immediately while the active cart is kept. Blocking or deleting necessary storage may prevent login and purchases. Steam login is required for purchases; Discord can be declined so purchases proceed without Discord rewards.

8. Your rights

You may request access, correction, erasure, restriction and, where conditions apply, portability. You may object to legitimate-interest processing and withdraw any consent without affecting earlier lawful processing. Contact danishfudge@gmail.com; we may request appropriate identity verification. Legal retention duties can limit erasure. You may complain to the Danish Data Protection Agency at https://www.datatilsynet.dk or a relevant authority in your country of residence.

9. Security and public display

We use access controls, encrypted transport and private integration keys. Staff names, roles and avatars may appear in the public staff list. Top supporters are anonymous by default; a public profile requires separate review. Server status publishes player counts only. Automated delivery and security checks do not replace your ability to contact support for a decision to be reviewed.

10. External privacy policies

Simply.com: https://www.simply.com/dk/compliance/
Steam: https://store.steampowered.com/privacy_agreement/
Discord: https://discord.com/privacy
PayPal: https://www.paypal.com/dk/legalhub/paypal/privacy-full
Google: https://policies.google.com/privacy

Changes are dated above. Material changes will be communicated appropriately; earlier purchase terms are not automatically changed.

If you select “Remember me”, we store a protected sign-in cookie on this device for up to 30 days. The server stores a hash of its secret value, your SteamID and the expiry time. Your existing Discord link is loaded from your account at sign-in. We do not store your Steam or Discord password. This preference is used only for sign-in and does not change your visit-statistics choice. Signing out removes remembered login on this device.

Stores pages, viewed products, cart actions and server/Discord link clicks at Fudge Gaming for 90 days. Signed-in users are linked to SteamID; others use a random ID within the visit session. No input text, IP addresses or payment tokens are stored in statistics. No additional analytics cookie or third party. Rejecting does not affect purchases. Withdrawal stops tracking and deletes statistics for the current session. Login and order history are stored separately for operation and security.

Staff change logs keep SteamID, role, time and before/after values for one year for accountability and secure operation (GDPR Art. 6(1)(f)). Steam and Discord login history, including linked SteamID/DiscordID, is kept for 180 days for security and account operation (Art. 6(1)(f)). Orders and payments follow purchase and accounting purposes. Optional visit statistics use only your consent (Art. 6(1)(a)), withdrawable through Cookies in the footer. Visitors who are not signed in have no known SteamID. Authorized admins/mods may receive separate log access; financial values require financial permission. Contact the privacy address above for access, erasure or objection.

Anonymous daily totals without SteamID, DiscordID or visitor ID are kept for up to 365 days for longer-period charts.

Email receipts are sent through Simply.com to the address you provide or your PayPal address. Receipts and correction revisions are retained with the order. Support is through Discord. If you opt in on your profile, your Steam name and avatar may appear as a top supporter; you can change this preference on your profile. Bootstrap Icons are loaded from jsDelivr CDN, which receives technical information needed to deliver the icon font.