Privacy Policy

Privacy Policy for trutnee.com users. Last updated: 14 June 2026.

This Privacy Policy (the Policy) explains how the TRUTNEE portal (trutnee.com, trutnee.ru; the Site) collects, uses, stores and protects personal data when you visit or use the Site.

TRUTNEE is an independent internet project supporting the laser tag community. By using the Site, creating an account, submitting forms, posting comments, or continuing to use the Site after we publish an updated Policy, you confirm that you have read and accept this Policy, unless applicable law requires separate consent.


1. Who we are

The data controller for personal data processed through the Site is the TRUTNEE portal administration. Contact details for privacy requests are published on the About page. Please include “Privacy request” in your message.


2. What data we process

Depending on how you use the Site, we may process:

  • Account data: email address, first name, last name, hashed password, registration and email confirmation metadata;
  • Profile data: name, surname, avatar image, display name shown in comments;
  • User content: comment text and other information you voluntarily publish;
  • Technical data: IP address, cookies, session identifiers, browser type and version, device and operating system information, access dates and times, pages viewed, referrer URL;
  • Analytics data: aggregated or pseudonymised usage statistics collected via tools such as Yandex Metrica and Google Analytics, where enabled.

We do not ask for payment details, passport data or phone numbers unless you voluntarily include them in a message to us.


3. Why we use your data

  • to register and authenticate users;
  • to provide account, profile and comment features;
  • to send service emails (registration confirmation, password recovery, email change);
  • to keep the Site secure and prevent abuse;
  • to measure traffic and improve the Site;
  • to comply with legal obligations;
  • to respond to your enquiries.

4. Legal bases (EEA/UK users)

Where the GDPR or similar laws apply, we rely on: (a) performance of a contract (providing Site features you request); (b) legitimate interests (security, analytics, service improvement) where these are not overridden by your rights; (c) consent where required (for example certain cookies or marketing, if introduced); and (d) legal obligation.


5. Cookies and analytics

The Site uses cookies and similar technologies for session management, authentication, CSRF protection, preferences and statistics. Third-party analytics services (including Yandex Metrica and Google Analytics) may set their own cookies. You can control cookies in your browser settings; disabling essential cookies may limit Site functionality.


6. Sharing and international transfers

We do not sell personal data. We may share data with hosting, email, analytics and IT service providers who process data on our instructions, and with authorities when required by law. Some providers may process data outside your country, including countries that may not provide the same level of protection. Where required, we implement appropriate safeguards or obtain consent.

Comments and profile information you publish publicly may be visible to anyone on the Internet.


7. Retention and security

We keep personal data only as long as needed for the purposes above or as required by law. Account data is kept until you delete your account or ask us to delete it, unless we must retain it for legal reasons. Passwords are stored as cryptographic hashes. We apply technical and organisational measures such as HTTPS, access controls and backups.


8. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent where processing is consent-based. You can update profile fields in your account area. You may lodge a complaint with your local supervisory authority.

To exercise your rights, contact us using the details on the About page. We may need information to verify your identity before responding.


9. Children

The Site is not directed at children under 16 (or the applicable age in your jurisdiction). If you believe we have collected a child’s data without appropriate consent, please contact us and we will delete it within a reasonable time.


10. Changes

We may update this Policy from time to time. The current version is always available at /policy. Material changes take effect when published unless stated otherwise.

Last updated: 14 June 2026.