Privacy Policy — Checkpaint.tf

Last Updated: 6 June 2026 Data Controller: Daniel Misch – checkpaint.tf Registered Address: Preußenallee 14, 86641 Rain am Lech, Germany Email: [email protected]

1. Overview

This Privacy Policy explains how checkpaint.tf (“Checkpaint.tf”, “we”, “us”) collects, uses and protects personal data when you visit our website, interact with our community tools, participate in giveaways, authenticate via Steam or use any related services. We comply with the General Data Protection Regulation (GDPR), the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG), and other applicable data protection laws. When we link to third-party platforms, their own privacy policies apply.

2. Data We Collect

Technical data: IP address, browser and device information, referrer URLs, timestamps, pages visited, selected filters and error logs.
Cookies and local storage: Functionality cookies and local storage to remember preferences. Analytics and advertising cookies are only activated with your explicit consent, collected through Google’s certified consent management platform (CMP) and enforced via Google Consent Mode v2.
Account data: Steam ID, display name, avatar, inventory data you request we load, and settings saved to your profile.
Trade link data: If you participate in giveaways, we collect your Steam trade link (containing your Steam partner ID and trade token) to enable prize delivery via automated Steam trades.
Giveaway participation data: Calendar entries opened, ticket allocations, trivia/contest submissions, timestamps, winner selection records, and prize delivery status.
Payment and donation data: Transaction identifiers and payer details provided by payment processors (e.g. PayPal) when you purchase premium features, donate or buy advertising placements. We do not store full payment card numbers.

3. Purpose and Legal Basis

We process personal data for the following purposes and legal bases:

Operate the Service (Art. 6(1)(f) GDPR): Deliver core functionality, secure the platform, maintain infrastructure and prevent fraud.
Fulfil paid services (Art. 6(1)(b) GDPR): Manage purchases, donations and optional premium features you request.
Conduct giveaways and contests (Art. 6(1)(b) GDPR): Process your participation, select winners fairly, and deliver prizes via Steam trading.
Analytics and advertising (Art. 6(1)(a) GDPR): Measure engagement and show advertising placements only where you have given explicit consent through Google’s certified consent management platform. Under Google Consent Mode v2, advertising and analytics storage is denied by default and no such cookies are set until you consent.
Security and compliance (Art. 6(1)(c) and 6(1)(f) GDPR): Respond to legal obligations, enforce policies and cooperate with authorities when required.

4. Giveaway and Contest Data Processing

When you participate in giveaways or contests operated by checkpaint.tf:

Data collected:

Steam ID and display name (from Steam authentication)
Trade link (Steam partner ID and trade token)
Participation timestamps and entries
Ticket allocations (for weighted selection systems)
Trivia/contest answer submissions
Winner selection records

Purpose:

Verify eligibility (age, account standing)
Process entries and allocate participation credits
Conduct fair and verifiable winner selection
Deliver prizes via automated Steam item trades
Maintain records for dispute resolution and compliance

Legal basis: Contract performance (Art. 6(1)(b) GDPR) — your participation constitutes acceptance of giveaway terms.

Retention: Giveaway participation data is retained for 24 months after the giveaway ends to handle disputes, verify winners, and maintain audit records. Trade links are deleted upon your request or account deletion.

Winner publication: Winners may be announced publicly by Steam display name. If you prefer anonymity, contact us before the drawing.

5. Third Parties and International Transfers

We share data only with trusted partners necessary to run the Service:

Google (AdSense, Analytics): Analytics and advertising services operating under Google Consent Mode v2. Consent is collected through Google’s own IAB-TCF certified consent management platform (the AdSense “Privacy & messaging” consent message). These services set advertising/analytics cookies only after you consent through that message; until then advertising and analytics storage is denied. IP addresses are anonymised before storage. Google operates under EU Standard Contractual Clauses for US data transfers. See Google’s Privacy Policy and Data Processing Terms.
PayPal: Payment processing for optional premium features, donations or ad placements. PayPal acts as an independent data controller for payment data.
Hetzner Online GmbH: Infrastructure hosting within the European Union.
Steam (Valve Corporation): Authentication and item trading services. When you log in via Steam or receive prizes, data is shared with Valve under their privacy policy.
Technical Service Providers: We use third-party technical service providers to process publicly available data and online identifiers (such as Steam IDs) in order to provide analytics, pricing information, inventory analysis, and platform functionality. These providers act as data processors on our behalf and may process data outside the European Union. Processing is based on our legitimate interest in providing and maintaining the service (Art. 6(1)(f) GDPR).

If data is transferred outside the European Economic Area we rely on EU Standard Contractual Clauses or other lawful safeguards as documented above.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined above or as required by law:

Data Type	Retention Period
Technical logs	Up to 12 months
Account data	Until account deletion request
Trade links	Until deletion request or account removal
Giveaway participation	24 months after giveaway ends
Winner records	36 months (legal retention)
Payment records	Statutory retention periods (typically 10 years)
Analytics data (Google)	14 months

You may request deletion of your Steam-linked data at any time.

We manage cookie consent through Google’s certified consent management platform (CMP) — the IAB-TCF compliant “Privacy & messaging” consent message provided by Google AdSense — together with Google Consent Mode v2, in line with the TDDDG/TTDSG and GDPR:

Essential cookies (always active):

Session management
Language and currency preferences
Security tokens

Optional cookies (require consent):

Google Analytics (usage analysis)
Google AdSense (personalized advertising)

When you first visit our site from the EEA, the UK or Switzerland, Google’s consent message is presented and asks for your choice. Under Google Consent Mode v2, advertising and analytics storage is set to “denied” by default before any Google tag runs, so no analytics or advertising cookies are set until you give explicit consent through that message. Google’s certified CMP provides equal, non-pre-ticked options to consent or to decline.

You can change or withdraw your choice at any time by selecting the “Cookie Settings” link in the footer, which re-opens Google’s consent message.

To withdraw consent: Use the “Cookie Settings” link in the footer to re-open Google’s consent message and decline, or clear the cookies and local storage for checkpaint.tf in your browser settings.

8. Security Measures

We employ technical and organisational measures such as access controls, network isolation, encryption in transit and regular security reviews to protect your data. Despite these measures no system is entirely secure; please notify us if you suspect unauthorised access.

9. Your Rights

Under the GDPR and applicable laws you have the right to:

Access personal data we hold about you.
Rectification of inaccurate data.
Erasure where processing is no longer necessary or based on consent.
Restriction of processing in certain circumstances.
Data portability — receive a copy of data you provided in a portable format.
Object to processing based on legitimate interests, including analytics or advertising.
Withdraw consent at any time for consent-based processing (this does not affect the lawfulness of prior processing).

10. Exercising Your Rights

Submit requests by emailing [email protected] from the address linked to your Steam account or payment receipt. We may request additional information to verify your identity. We respond within one month or sooner where legally required. You can also update certain preferences directly through your account settings.

11. Age Requirement

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from minors under 16. If you believe a minor has provided us with data, contact us so we can delete it promptly. For giveaway participation, you must be at least 18 years old.

12. Data Protection Impact Assessment (DPIA)

Checkpaint.tf maintains an internal assessment for processing of platform analytics, Steam identifiers, and advertisements. Additional DPIAs will be conducted as required by law or when introducing new processing activities that may pose a high risk to users’ rights and freedoms.

13. Updates to this Policy

We may update this Privacy Policy to reflect changes in our services, legal requirements or processing activities. When we make material changes we will post a prominent notice and update the “Last Updated” date. Continued use of the Service after changes take effect signifies acceptance.

14. Contact and Complaints

For privacy questions or to exercise your rights, email [email protected].

Supervisory Authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27, 91522 Ansbach, Germany https://www.lda.bayern.de

You may contact BayLDA or your local supervisory authority if you believe your data protection rights have been violated.