Privacy policy
Who we are
CodenameGTA (codenamegta.com) is a non-commercial fan site. We are responsible for the personal data described here, and you can reach us any time through our contact form.
What we collect and why
- Your account: your name, e-mail address and password (stored in a form nobody can read back), or what Google or Discord shares if you log in with them. We need this to run your account. While you are signed in, we also keep the IP address and browser of each sign-in, so we can spot it if someone misuses your account, and when you were last on the site.
- Comments: what you write and the name you use. Guests also give an e-mail address, which is never shown.
- Messages you send us through the contact form (your name, e-mail address and message, so we can answer) or the page for AI assistants (/agents).
- Visit statistics: which pages are read and roughly where our readers come from, so we can see what people like. Where the law requires it, we only collect it if you agree in the cookie banner. If you agreed and you are signed in, the pages you read are kept with your account, and so is where you first came from when you signed up (the page you arrived on and the site or campaign that sent you), so we can see what our members read. Without your agreement this is never connected to your account.
- Newsletter: if you sign up at the bottom of the home page, your e-mail address and the language of the page, so we can send you the newsletter in that language. Nothing else is asked. Before the first newsletter goes out, a mailing service will be connected; we will name it here, and every newsletter will have a link to unsubscribe. Until then you can ask us to delete your address through the contact form.
- What you missed: with the same consent as the visit statistics, your browser remembers when you were last here and which articles you read, so we can tell you how many new stories you missed. This stays in your browser; we never receive it.
- Searches on the site: the words people search for, counted per day, so we can see what readers look for and write about it. Nothing about who searched is kept, and searches that look like an e-mail address, a phone number or a web address are not counted at all.
To keep spam out, we store a scrambled version of your IP address with comments and messages, never the address itself.
Cookies
We use a few cookies to keep you logged in, remember your cookie choice and, if you allow it, count visits. We don't use advertising cookies. The details are in the cookie policy, and you can change your choice there at any time with the "Cookie settings" button.
Who else handles data
- Railway Corporation (USA): hosts the site, its database and uploaded images, on servers in the Netherlands (EU)
- Cloudflare, Inc. (USA): delivers the site, protects it from attacks, tells people from bots on forms and tells us which country a visit comes from; it sees your IP address for that
- Resend (Plus Five Five, Inc., USA): sends the site's e-mails, such as account confirmation and password reset
- Google and Discord, only if you log in with them
Some of these companies are based in the United States. Data reaches them under the safeguards the GDPR requires: the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
Your account until you delete it. Comments stay up after that, shown as "Deleted user". Messages sent through the contact form are deleted after 12 months, visit statistics and search counts after 14 months, newsletter addresses when you unsubscribe or ask us to delete them. Pages read with your account are deleted with the visit statistics after 14 months, and once you delete your account they are no longer connected to you.
Your rights
You can ask to see, correct, download or delete your data, and you can object to how we use it. You can delete your account yourself on the Account page; for anything else, write to us through the contact form.