‹ BACK

PRIVACY

Last updated: 31 October 2026. This policy is still being finalized.

1. Who is responsible

Afterlife is a DayZ community project run by David Schulz. The postal address will be added here shortly. Until then, you can reach us through the contact form or on Discord, also for any request about your data.

2. The short version

• No tracking, no analytics and no advertising.
• Our fonts are hosted on our own site, so loading a page sends nothing to Google.
• We only store data when you sign in, order something or send us a message.
• We never see your Steam password.

3. Visiting this website

The site runs on Cloudflare (Pages, Workers, D1). To deliver pages and protect the site from attacks, Cloudflare processes your IP address, the page you request, the time and your browser details. We do not use this data to identify you.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

4. Signing in with Steam

Sign-in takes place on Steam's own site. Steam then tells us your SteamID64. We also load your public display name and avatar, and we store the time of your first and latest sign-in. Once you are signed in, your browser loads your avatar directly from Steam.

Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

How long we keep it: a session ends when you sign out or after 30 days. We delete a profile without any orders or items after 24 months without a sign-in, or earlier if you ask us to.

5. Orders and items

We store what you order or donate, the amount, the order status and what you own, including the text and color of tags. To process this we share data as follows:

• Our game servers receive your SteamID, your name and your items.
• CFTools receives your SteamID, your name and the end date when you buy a priority queue.
• Our private staff channel on Discord receives order and donation notices with your name, SteamID, items and amount.

Payment: if the checkout offers PayPal and you choose it, PayPal (Europe) S.à r.l. et Cie, S.C.A. processes your payment data under its own privacy policy, and we receive the payment confirmation. Other payments are arranged with you on Discord.

Legal basis: fulfilling your order (Art. 6(1)(b) GDPR) and our legal duties (Art. 6(1)(c) GDPR).

How long we keep it: order records for as long as tax and commercial law require, which can be up to 10 years. Items for as long as they are active on your account.

6. Contact form

We store your name, your Steam or Discord name if you give one, the topic, the server and your message, and post them to our private staff channel on Discord. To limit spam we also store a salted hash of your IP address, not the address itself.

Legal basis: our legitimate interest in answering your message and preventing spam (Art. 6(1)(f) GDPR).

How long we keep it: messages are deleted automatically from our database after 6 months. Staff remove the copy on Discord once your request is closed.

7. Cookies and browser storage

We only use what the site needs in order to work, so we don't ask for consent and don't show a cookie banner (§ 25(2) TDDDG). Nothing here is used for tracking.

• al_session (cookie) keeps you signed in. It is set after you sign in and lasts up to 30 days.
• al_state, al_next (cookies) secure the sign-in and bring you back to the right page. They last up to 10 minutes.
• al_cart_v1 (browser storage) remembers your cart. It is created when you add an item, stays in your browser and is removed when the cart is empty.

8. Other services

Besides those above, we use BattleMetrics to show server status. Our server asks for it, so no data about you is sent. Links to Steam and Discord lead to their own sites, where their privacy policies apply.

Cloudflare, Valve (Steam), Discord and other providers may process data outside the EU, including in the USA. Where this applies, the transfer relies on an EU adequacy decision, such as the EU-US Data Privacy Framework, or on the EU's standard contractual clauses.

9. Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing and receive a copy in a portable format. You can object at any time to processing based on our legitimate interest (Art. 21 GDPR). You can also complain to a data protection authority.

Giving us data is voluntary, but without a sign-in you can't place orders. We make no automated decisions about you.