Privacy Policy

This notice covers the public DMZ OPS website, last updated November 2, 2026. Public signup, the map, public submissions, payments and notifications are not available. Existing approved accounts can use private login and account dashboards.

Who to contact

DMZ OPS is an independent fan project. Contact the operator about this notice or a privacy request at Contact form.

Information processed

Our hosting and network providers may receive your IP address, requested URL, request time, browser and device information, referrer and security or error information when delivering and protecting the site. When you use the contact form, we store your name, email address, request type, subject and message in a private Supabase inbox. Keyed network/email hashes support hourly rate limits. Records older than 24 hours are cleared when the next submission is processed; raw IP addresses are not stored in this inbox. Email notifications to the team may be used when configured, but a delivery failure does not discard your message. Please do not send passwords, game-account credentials or unnecessary sensitive information.

Purpose and legal basis

We use technical information to deliver the website, maintain security and diagnose faults. We use correspondence to answer your request. Where the GDPR or UK GDPR applies, we rely on legitimate interests in providing a secure website and responding to enquiries, balanced against your rights. Optional analytics uses your consent. We may also process information where required by law. We do not use this holding page for behavioural advertising or automated decisions with legal or similarly significant effects.

Optional Google Analytics

With your consent, we use Google Analytics 4 to understand page visits, device/browser categories and site use. It loads only after you accept analytics; rejecting it does not send Google analytics requests or cookieless measurement pings. Google may receive cookie identifiers, technical device/network information and page-use data and process it in the United States or other countries. We disable Google signals and advertising personalisation in the website tag and omit URL queries/fragments and user account identifiers from our page configuration. See Google's privacy policy. You can withdraw through Cookie settings. Google retains analytics information according to the property's configured retention settings; contact us for details.

Providers and international processing

Vercel hosts this website. Cloudflare manages its DNS. CookieChimp supplies consent management and stores consent records; see its privacy policy and data processing agreement. Contact submissions are stored in a private Supabase inbox. When configured, Resend can notify the team, whose mailbox is hosted by MXroute. No automatic acknowledgement or marketing email is sent to form submitters. These providers may process information in the United States and other countries. See Vercel's privacy notice and data processing addendum. You can ask us for information about applicable transfer safeguards. Private account pages use Supabase for authentication and Resend SMTP for sign-in emails. Push notifications are not enabled. The public overview does not load the account client.

Private accounts

Existing approved accounts can sign in with an email link. Supabase processes the account email address, profile name, account identifier, verification status and server-controlled access role to authenticate and authorise access. Resend delivers the requested sign-in message. Your browser stores authentication tokens, session and PKCE verifier information needed to keep you signed in and complete login. These are necessary account functions, separate from optional analytics consent. Private login and dashboard pages load no analytics or consent-provider scripts. Sign out to remove the current browser session; contact us about account deletion. Account records are retained while the account is needed, with limited security records retained where necessary. We rely on providing the requested account service and our legitimate interest in secure access, as applicable. Logging in does not subscribe you to marketing.

Retention

Technical records are retained under the hosting provider's applicable security and log-retention settings. We retain correspondence only as long as necessary to deal with the enquiry, resolve disputes or meet legal obligations. The relevant criteria include whether your request is resolved, whether a dispute remains open, and any legally required retention period. We do not create a visitor-account database from this page.

Your choices and rights

Depending on your location and the law that applies, you may request access, correction, deletion, a copy of your information, restriction of processing, or object to processing based on legitimate interests. Where consent is used, you may withdraw it. Use the Contact form above; we may need proportionate information to verify your identity. We will respond within applicable legal time limits. You may also complain to your local data-protection authority, including an EU/EEA supervisory authority or the UK ICO.

United States privacy

We do not sell personal information, share it for cross-context behavioural advertising, or use targeted advertising on this page. We keep optional analytics off when the browser signals Global Privacy Control or Do Not Track. If applicable state law gives you access, correction, deletion, portability or appeal rights, contact us to exercise them; we will not discriminate against you for exercising applicable rights. Applicability varies by jurisdiction and statutory thresholds.

Adults aged 21 and over

DMZ OPS is intended only for adults aged 21 and over. People under 21 should not use our services or send us personal information. The current public overview page does not collect dates of birth or identity documents and does not verify visitors' ages. If you believe someone under 21 has provided personal information, contact us so we can investigate and delete it where appropriate, subject to applicable legal requirements.

Security and disclosure

We use access controls and technical safeguards appropriate to the current website, but no online service can guarantee absolute security. We may disclose relevant information where legally required or reasonably necessary to address fraud, abuse, security incidents or legal claims. We do not publish support correspondence or give it to sponsors for their own marketing.

Information you choose to provide

You are not required to accept analytics or contact us to read the public overview page. If you ask for help or exercise a privacy right, we need enough information to respond and, where necessary, verify the request. Please provide only what is needed. This page has no newsletter or interest form; sending a contact message does not subscribe you to marketing.

Objecting to processing

You may object to processing based on legitimate interests where applicable law allows. Use the Contact form with your request. Analytics consent can be withdrawn immediately using Cookie settings in the footer. UK residents can also contact the ICO; EU/EEA residents may complain to their local supervisory authority.

Updates

We will update this notice before introducing materially different data collection or opening community features. The date above identifies the current version. See our cookie policy for browser-storage details.

Community videos

Member video votes, favorites and bookmarks are stored with the account that submits them. Reports are private to the reporting member and moderators. For reviewed video sources, the team can retain a private playback copy, screenshots and timestamped transcripts. When video analysis is configured, Modulate or a local Whisper model transcribes audio and OpenRouter processes selected frames and transcript text to produce draft DMZ notes. Derived notes and media are shown to members only after moderator approval. Source attribution remains attached. Use the Contact form for removal or privacy requests.