Privacy Policy
This page explains what information we collect when you use the site, how we use it, and your choices. We are a community-run project and are not affiliated with Northwood Studios or SCP: Secret Laboratory.
Overview
We collect the minimum data needed to operate the site securely and reliably. This includes basic visit logs, analytics, security challenge results, and limited error information to improve site stability.
Data controller
The site is operated by the project owner. For privacy requests, reach out at [email protected].
Data we collect
-
Security-related request data: When you interact with the site and API (e.g.,
/api/lobbies), we collect your IP address and a short user-agent string. We may also receive a browser fingerprint identifier when available (for example, via a client-provided header). This data is used for security, rate limiting, abuse prevention, troubleshooting, and aggregate statistics. The browser fingerprint identifier, when recorded, is not automatically deleted. - Cookies and local storage: If Cloudflare Turnstile is enabled, we set a cookie to reduce repeated challenges. If you log in to the admin area, an authentication cookie is set for that purpose only.
- Error monitoring: We may collect limited client-side error and performance telemetry to identify and fix issues. This usually includes error type, timestamps, and basic context, not page content.
- Analytics and error reports: We collect usage analytics and error reports to understand traffic patterns and improve reliability. This can include your OS, browser, IP address, the page path you are on, timestamps, referrer, device type, screen size, language, and basic performance/error details.
- Server list data: Server metadata such as names, versions, and approximate locations are sourced from the Northwood API and community-provided information. This data is about servers—not visitors.
Legal bases
Where applicable (e.g., in the EEA/UK), we rely on legitimate interests to operate the site, prevent abuse, and improve reliability; and legal obligation where security or retention is required by law.
How we use data
- Operate the interactive server map and related features.
- Secure the site with rate limiting and anti-abuse protections.
- Detect and prevent abuse, DDoS activity, and ban evasion; enforce temporary and manual blocks.
- Diagnose problems, monitor performance, and improve reliability.
- Comply with applicable laws and respond to lawful requests, if any.
Retention
Visit logs and related metadata are retained for operational needs and may be periodically rotated or aggregated. Authentication cookies expire automatically after a limited duration. Browser fingerprint identifiers, when present, are not automatically deleted and may be kept until they are manually removed during security operations or data maintenance.
Security
We apply technical and organizational measures appropriate to the risk, including access controls, logging, and periodic updates. No method of transmission or storage is 100% secure, but we strive to protect your data.
International transfers
The site may be hosted, and service providers may process data, in countries outside your own. We use reputable providers and apply safeguards where required by law.
Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, as well as data portability and the right to object. You may also have the right to lodge a complaint with a supervisory authority.
- EEA/UK (GDPR): Rights include access, rectification, erasure, restriction, portability, and objection. Where we rely on legitimate interests, you can object to processing.
- California (CCPA/CPRA): You may have rights to know, delete, and correct, and to opt out of certain sharing. We do not sell personal information.
Children
The site is intended for general audiences and not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the latest changes. Significant changes may be highlighted on this page.
Contact
For privacy inquiries, contact [email protected].