Privacy Policy

The controller of your data under the GDPR is the operator of the Deadman’s SCP website. For anything data-related (questions, a copy of your data, deleting your account), contact the staff on our Discord. The link is in the footer.

Sign-in goes through Discord. From it we take your ID, username, display name and avatar. We do not get your email address, password, messages or server list, because Discord does not pass them on with this kind of sign-in.

If you are on our Discord server, we also check your roles. That is how we know whether you are part of the server crew.

Linking a Steam account is optional. If you choose to, Steam gives us only your SteamID64. We cannot see your profile name, games or friends.

When you send a ban appeal or a crew application, we save what you wrote in the form (e.g. in-game nickname, player ID, age, explanation) and which account sent it.

The server may also keep ordinary technical logs with your IP address, the time and the page you visited. We only look at them when tracking down bugs or dealing with attacks.

Discord data is needed to sign you in and to sign your submissions with your account. The staff sees who is writing, and nobody can send an appeal on your behalf. Your SteamID fills in the player ID on appeals automatically, so nobody can enter someone else’s. Roles are only used to decide what you are allowed to do on the site.

Legal bases: sign-in, your profile and handling your submissions are a service you use by choice (Art. 6(1)(b) GDPR). Permission checks, logs and abuse prevention rely on our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).

We do not profile users, show ads or sell data.

We only use cookies for signing in. Your session is held by two of them, dscp_sid and dscp_sid_strict, valid for 30 days or until you sign out. The first lets the site show that you are signed in, even when you arrive from a link on Discord. The browser only sends the second when you click around on our site, and only with it can anything be saved or a form be sent. So no other site can act on your behalf. While you sign in with Discord or link Steam, dscp_oauth_state, dscp_steam_state and dscp_steam_back appear for a moment. They secure the sign-in itself and expire after 10 minutes.

We have no advertising or analytics cookies, page scripts cannot read any of the ones above, and nothing is saved in your browser’s storage. That is why the site does not ask for cookie consent.

Discord handles sign-in, and your avatar loads from its servers. Steam (Valve) confirms your SteamID; you enter your password only on Steam’s site and it never reaches us. Videos on the plugins page come from YouTube and load in privacy-enhanced mode only after you click “Play”. From the SCP: Secret Laboratory API (Northwood Studios) we fetch only the player count and send none of your data.

Discord and Valve are based in the USA and process data under their own privacy policies. We do not use Google Analytics or any other analytics or advertising tools.

Account data, meaning your Discord details, roles and SteamID, is kept until the account is deleted. Your name and avatar update every time you sign in. A session expires after 30 days and is deleted immediately when you sign out. We keep appeals and applications until the staff removes them or you ask us to. Unlinking Steam removes the SteamID from your account straight away.

You can ask us at any time for access to your data, or to correct, delete, restrict or transfer it, and you can object to processing based on our legitimate interest. A message to the staff on Discord is enough. On request we also delete the whole account with all related data.

If you think we are processing your data unlawfully, you can lodge a complaint with a data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).

If the data we collect or the way we use it changes, we will update this page and the last-updated date at the top.