Privacy & Cookie Policy

1. Who is the Data Controller?

CS Smokes.fyi is an independent tactical platform dedicated to Counter-Strike 2 match analysis and grenade lineups.

Data Controller Contact: support@smokes.fyi
Platform: https://smokes.fyi

2. What Information Do We Collect, and Why?

We only collect information strictly necessary to provide the platform features:

• Free User Account: When creating an account, we store your email address and an encrypted password hash. This allows you to bookmark lineups in your personal Playbook and track mastered lineups.
• Your Saved Data: We store your favorited lineups, mastered lineups, lineup upvotes/downvotes, and any bug reports you submit.
• Anonymous Performance Analytics: If you grant consent in the cookie banner, we collect aggregated, privacy-preserving session metrics (pages visited, viewport dimensions). No personal advertising or third-party tracking cookies are used.
• Anonymous Consent Logging: To comply with ePrivacy and GDPR proof-of-consent obligations, we record an anonymous telemetry log of cookie banner choices (Accept or Reject). This entry contains no IP address, user ID, or identifiable data.

3. Legal Basis for Processing (GDPR Art. 6)

We process your data under the following legal bases:

• Performance of Contract (GDPR Art. 6(1)(b)): Processing your email and saved favorites is necessary to provide the free account service you requested.
• Consent (GDPR Art. 6(1)(a)): Any performance analytics tracking runs only after your explicit and voluntary consent.
• Legal Obligation (GDPR Art. 6(1)(c)): Maintaining necessary technical security logs.

4. Third-Party Service Providers (Data Processors)

We never sell your data. In accordance with GDPR Art. 13(1)(e), we disclose the categories of trusted data processors handling technical infrastructure on our behalf within certified EU/EEA facilities:

• Cloud Database & Authentication Infrastructure (EU/EEA): Securely stores encrypted user credentials and saved favorites with strict role-based access control.
• Edge Hosting & CDN Providers (EU/EEA): Delivers website assets with DDoS mitigation, SSL/TLS encryption, and aggregated performance metrics (only upon explicit consent).

5. Your Rights & Account Deletion (GDPR Art. 17)

You maintain full control over your personal data under the GDPR. You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate personal information.
• Erasure ("Right to be Forgotten"): You can permanently delete your account and all associated saved data at any time directly through the profile/mobile menu, or by emailing support@smokes.fyi. Erasure is immediate and irreversible.
• Data portability in a structured, machine-readable format.

6. Supervisory Authority

If you have concerns about our data processing, you have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) or your local European data protection supervisory body:
Datatilsynet, Carl Jacobsens Vej 35, DK-2500 Valby, Denmark • Phone: +45 33 19 32 00 • www.datatilsynet.dk