Data controller and categories of data
The data controller for Log Pose Cards is Lorenzo Paolo Cilurzo, reachable at lorenzo.cilurzo@piratecardblog.com.
When an account is created, the site may store the email address, username, hashed password, session-related data, moderation records, and account activity needed to operate the service.
Purposes and legal bases
Account and session data are processed to provide authentication, secure access, prevent abuse, and run community features. The legal bases are contract performance for account services and legitimate interests for site security, moderation, and service continuity.
Comment and discussion content is processed to publish community discussions, enforce moderation rules, respond to requests, and keep a reliable record of exchanges. Optional contact messages are handled on the basis of legitimate interests and, where relevant, the user's consent.
Retention periods and recipients
Account data is kept while the account remains active and for a limited period afterward when needed for security, moderation follow-up, fraud prevention, or legal obligations. Comment and moderation records may also be retained as needed to preserve discussion integrity and handle disputes.
Data is accessible only to the publisher and service providers acting on the site's behalf when needed to host, secure, maintain, or back up the service. This may include the hosting provider, email provider, and technical support tools used to operate the site.
Your rights and how to exercise them
You may request access, correction, deletion, objection, restriction, portability, and withdrawal of consent where consent is the legal basis. You may also request account deletion or a data request by contacting lorenzo.cilurzo@piratecardblog.com from the address linked to your account and providing enough information to verify the request.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL. Requests are reviewed subject to identity verification, security needs, moderation history, and any legal obligations that require limited retention.
Cookies, analytics, ads, and external services
The site currently uses only the technical storage needed for core features unless and until optional analytics, advertising, or third-party audience tools are activated. If those tools are added later, this policy and the cookies page must be updated before they are enabled.
Any third-party service used to host, secure, or improve the site must process data only for the relevant service purpose. Advertising or analytics tools, if enabled later, must be presented clearly and kept separate from core site actions.