Privacy Policy
Version 1 · Effective 27 October 2026
This policy explains what personal data CRUNKS uses, why, and for how long. We collect as little as we can.
1. Who is responsible
The data controller is:
CVR 41472839
Viborgvej 36, 1. tv
8920 Randers NV, Denmark
Email: [email protected]
For any privacy question or request, write to [email protected]. We do not have a data protection officer, and we are not required to have one.
2. The website
crunks.party sets no cookies and loads no analytics, ads or third-party scripts. Fonts are hosted on our own site. Our host, Cloudflare, processes your IP address to deliver the site and protect it against attacks.
3. What we collect and why
Most data comes from you, from the CRUNKS app, or from Steam when you sign in. Steam only gives us your SteamID64 and display name. We get nothing else from your Steam account.
| Data | Source | Purpose | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| Steam ID (SteamID64) and display name | Steam sign-in (OpenID) | Bind your licence, save your presets, show your name in a party | Contract, art. 6(1)(b) | While your licence is active. If a key is blocked: 12 months after the block |
| Match data from Game State Integration: map, score, rounds, team, kills, deaths, assists, MVPs, money, equipment, weapons | The CRUNKS app on your PC | Calculate points and consequences in your party | Contract, art. 6(1)(b) | The 40 most recent matches |
| Raw match recordings | The CRUNKS app | Find and fix bugs | Legitimate interest, art. 6(1)(f): a working app | At most 15 files / 600 MB in total; the oldest are deleted first |
| Party code | The CRUNKS app | Let friends join your party | Contract, art. 6(1)(b) | Only while needed for the party |
| Presets | You, in the app | Save your rules across PCs and updates | Contract, art. 6(1)(b) | Until you delete them or ask us to |
| Licence key (stored hashed) linked to Steam ID | Checkout and Steam sign-in | Check that Pro is valid; stop sharing and abuse | Contract, art. 6(1)(b); legitimate interest, art. 6(1)(f) | While active; 12 months after a block |
| Email, order details, country, refund status | Stripe, after checkout | Send your key, handle refunds and support, bookkeeping | Contract, art. 6(1)(b); legal obligation, art. 6(1)(c) | 5 years (Danish Bookkeeping Act) |
| Beta and feedback emails, survey emails (e.g. from our Reddit survey) | You | Send trial keys, beta news and ask for feedback | Consent, art. 6(1)(a) | Deleted after use, and when the beta ends at the latest |
| Support emails | You | Answer you | Legitimate interest, art. 6(1)(f); contract where it concerns your purchase | As long as needed to solve the case |
| Usage statistics (which rules are used) | The CRUNKS app | Improve CRUNKS | Legitimate interest, art. 6(1)(f) | Aggregated and anonymous, so no personal data is kept |
| IP address and technical logs | Your connection | Run the service, security, find errors | Legitimate interest, art. 6(1)(f) | Up to 30 days |
You do not have to give us data. Without a Steam sign-in, we cannot bind a Pro key. Without an email, we cannot send you a key.
We do not sell your data. We do not use it for ads. We do not make automated decisions with legal effects about you.
4. Where the data is stored
The CRUNKS server runs on our own server in Denmark. It is reached through Cloudflare Tunnel. Encrypted backups are stored with Cloudflare R2.
5. Who we share data with
Processors (they work for us, under a data processing agreement)
- Cloudflare: network, website hosting, tunnel and encrypted backups (R2).
- Zoho Mail: our email.
Independent controllers (they decide over their own processing)
- Stripe / Link: checkout and payment. Stripe is the seller of record and handles your payment data under its own privacy policy. We never see your card details.
- Valve / Steam: Steam sign-in. Valve's privacy policy applies to your Steam account.
- Discord: only if you join our Discord server. Discord's privacy policy applies there.
We may also share data if the law requires it, for example with public authorities.
6. Transfers outside the EU
Some of these companies may process data in the USA or other countries outside the EU/EEA. When that happens, the transfer is covered by the EU-US Data Privacy Framework (an EU adequacy decision) or by the EU Standard Contractual Clauses. Write to us if you want to know more.
7. Your rights
You have the right to:
- access the data we hold about you;
- have wrong data corrected;
- have data deleted;
- get your data in a portable format (export);
- restrict how we use it;
- object to use based on legitimate interest;
- withdraw consent at any time. This does not affect what we did before.
Write to [email protected]. Tell us your Steam ID or the email you used, so we can find your data. We answer within one month. Some data we must keep by law, such as bookkeeping records.
8. Complaints
If you think we handle your data wrongly, please tell us first. You can always complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. You can also complain to the authority in the EU country where you live.
9. Changes
If we change this policy, we post the new version here with a new version number and date. If the change is important, we will also tell you in the app or by email.