The data controller is WarPost (an unofficial community project). For any question about your data or to exercise your rights, write to us at [CONFIGURAR EMAIL DE CONTACTO].

• Account data: your email address and your name or alias. If you sign in with Google, we receive the email and name of the Google account you authorise.
• Content you create: your army lists, tournament entries, game results and messages.
• Optional profile data: links you add (social networks, channel), and your city if you sign up as a painter, store or club. All opt-in.
• Minimal technical data: a session token stored in your browser’s local storage to keep you signed in.
• Internal usage measurement: we record which WarPost pages are visited and which features are used (for example, creating a list or contacting a painter), together with technical errors of the application, to improve the service. We use an ephemeral session identifier (it expires after 30 minutes of inactivity, with no tracking between visits), the device type and the browser’s time zone to estimate the country. We never store your IP address in plain text: to tell whether two sessions come from the same connection (for example, when investigating an error or misuse) our server computes an irreversible, salted hash of your IP — not anonymous data, but pseudonymised, since it allows your activity to be correlated even though it does not directly identify who you are. We do not use third-party analytics; this data never leaves WarPost and is deleted periodically.

We do not collect precise geolocation, sensitive data (health, ideology, religion…) or payment data. We do not use ad networks or advertising profiling.

• Performance of the contract (providing the service): creating and managing your account, saving your lists, entering you in tournaments and recording games.
• Legitimate interest: platform security and abuse prevention.
• Consent: showing your profile publicly, appearing in the painter/store/club finders and other opt-in features you turn on.

We keep your data while your account is active. When you delete your account, we remove your direct personal information (email, name and links) and disable access. So as not to break the history and rankings of tournaments you took part in, lists and results are kept detached from your identifying data (without your name or email).

We do not sell your data or hand it over for commercial purposes. It is only processed by the providers needed to run the service (hosting and infrastructure, preferably in the EU) and, if you use Google sign-in, by Google itself to verify your identity. Your profile and the content you mark as public will be visible to other users.

You can exercise your GDPR rights at any time:

• Access and portability: download all your data in JSON format from your profile (“Export my data”).
• Erasure (“right to be forgotten”): delete your account from your profile (“Delete my account”): we remove your identifying data without delay and your session is closed.
• Rectification, objection and restriction: by writing to [CONFIGURAR EMAIL DE CONTACTO].

If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

WarPost does not use tracking or marketing cookies. We only use technical local storage: a session token, your usage preferences and the ephemeral identifier of the internal usage measurement described in section 2 (first-party, with no cross-site or cross-visit tracking, and not shared with third parties). That is why we show no cookie banner: there is no processing that requires your prior consent.

To use WarPost you must be at least 14 years old. If you are younger, you need the consent of your parent or legal guardian.

We may update this policy to reflect changes in the service or in the law. We will publish the current version on this page with its last-updated date.