Privacy Policy

1. What data we process

Anonymized visit statistics are collected by third-party analytics services — only after you consent in the cookie banner:

• Google Analytics 4 — cookies, information about pages viewed, visit duration, device and browser type, country, and traffic source;
• Microsoft Clarity — cookies, recordings of page interactions (cursor movement, clicks, scrolling), and heatmaps.

IP addresses are processed by these services on their side (including for determining the region); the Site itself does not store IP addresses or other visitor identifiers.

In addition, the Site keeps its own anonymized statistics: views of server listings and clicks through to their websites. For each event only the event type, date and time, the referrer domain (not the full URL), and the page language are stored. We deliberately do not store IP addresses, cookies, user-agent strings, or any visitor identifiers — this data cannot identify a person, so this collection does not require consent.

2. The “Add server” form

By submitting the “Add server” form, you provide the Administration with:

• the server name, its website address, chronicles, rates, and opening date;
• a public description of the server;
• a contact for communication (e-mail or messenger);
• a VIP placement request checkbox and an optional note to the moderator.

Once the submission is approved, the server name, website address, characteristics, and description are published in the catalog. The contact and the note to the moderator are never published and are used only to communicate about the submission.

3. Purposes and legal bases

• visit statistics and Site improvement — based on your consent to analytics cookies and our legitimate interest in developing the Site;
• processing server submissions and contacting the submitter — to fulfil your own request.

4. Sharing with third parties

Analytics data is processed by Google (Google Analytics) and Microsoft (Clarity) under their own policies: https://policies.google.com/privacy and https://privacy.microsoft.com/privacystatement.

The Administration does not sell or share visitor data with anyone else, except where required by law.

5. Retention

Analytics data is retained for the periods defined by Google's and Microsoft's policies. Submission data is kept while the server listing remains in the catalog, or until you request its deletion.

6. Rights of EU users (GDPR)

If you are in the European Union or the EEA, you have the right to:

• access your data and obtain a copy of it;
• correct inaccurate data;
• request deletion of your data (the “right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time;
• lodge a complaint with your country's data protection authority.

To exercise these rights, write to admin@l2buff.com. Analytics is loaded only after you consent in the cookie banner; you can decline it there, and additional opt-out methods are described in the Cookie Policy.

7. California residents (CCPA)

Residents of California (USA) have the right to know what categories of personal information are collected, to request its deletion, and not to be discriminated against for exercising their rights. The Site does not sell visitors' personal information and does not share it for compensation. Requests: admin@l2buff.com.

8. Children

The Site is not intended for children under 16, and the Administration does not knowingly collect their data.

9. Jurisdiction and changes

The Site's primary jurisdiction is Ukraine; data is processed with regard to the Law of Ukraine “On Personal Data Protection”. For EU users, the GDPR provisions described above additionally apply.

This policy may be updated; the current version is always published on this page with the date of the last update.