Who is responsible for your data
Dune Zone is operated by Norbert de Langen, who is the controller responsible for the personal data described on this page.
For privacy questions or data requests, email support@dune.zone.
What we keep private
We need a small amount of private information to run your account:
- An email address retained from an earlier sign-in, if one was supplied. Current sign-in requests identity access only.
- Whether you signed in with Google or Discord, and the account ID they give us.
- The sign-in records needed to keep you logged in and protect your account.
- Basic technical details such as your IP address, browser, when you visited, and errors that happened.
Your email address is only used for your account and sign-in. It will not appear on your profile or anywhere else on the public website.
What everyone can see
Your public profile can show:
- Your screen name, profile picture, and profile link.
- When you joined and when your public work was created or changed.
- Your active group memberships.
- The factions, groups, and rulesets you create, own, or help maintain.
- The questions you ask, the answers you give, and whether an answer was picked.
- Activity totals and the links between you and the things you contribute.
The first time you sign in, we use your sign-in provider's name and available profile picture to set up your public profile.
Your choices
- You can change your screen name and profile picture in your profile settings.
- Changing your screen name may also change the link to your profile.
- Do not share anything here that you want to keep private.
Your data rights
The GDPR gives you rights over your personal data.
You can ask us what personal data we have about you. You can also ask us to correct it, give you a copy, or erase it. Where the law applies, you can ask us to restrict processing, provide a portable copy, or stop processing based on our legitimate interests.
Deleting your account through the website closes it and hides your public profile. It does not automatically erase all stored personal data. Contact us if you want your personal data erased.
When you close your account, you can transfer the Groups, factions, and rulesets you own to another owner, or remove them from public view. Work you contributed to but do not own can remain. We will assess an erasure request separately, including personal information in that work.
We may ask you to prove that the account is yours. We normally respond to rights requests within one month. If a request needs more time or a legal exception applies, we will explain why. We cannot erase copies that other people made while your work was public.
To make a request, email support@dune.zone. Do not include your password or other private sign-in details in your message.
You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or the data protection authority where you live or work in the EU.
What we do with the data
We only use the data to let you sign in, run the website, show who made each contribution, keep the website safe, fix problems, and understand website traffic and performance.
We process the account and contribution data needed to provide the service you request under GDPR Article 6(1)(b). We rely on legitimate interests under Article 6(1)(f) for security, troubleshooting, and limited traffic measurement: protecting accounts, preventing abuse, and understanding how to keep the website useful and working. You can object to processing based on those interests.
Google or Discord handles sign-in. Convex stores application data. Cloudflare hosts and protects the website and provides Web Analytics. These providers receive the information needed for those jobs.
We do not sell your data. Your profile and contributions are free for people to view, but we do not sell access to them.
Website analytics
We use Cloudflare Web Analytics to understand which pages people visit and how quickly the website responds. Measurements cover page views, referring websites, country, browser, device type, operating system, and page performance. This includes visitors in the European Union.
Cloudflare says Web Analytics uses no cookies or local storage and does not track individual visitors across visits or websites. We do not send your account ID, email address, or profile details as analytics fields, or join the reports to your account. Page paths can include public profile or content names. Cloudflare also receives the connection information needed to deliver the website and receive measurements, including your IP address; that is separate from identifying visitors in analytics.
The analytics dashboard makes the previous six months of reports available. This reporting window is separate from the retention of account data and security logs. Read about Cloudflare Web Analytics and its data history.
How long data stays
We keep account and contribution records while they are needed to run your account and the work you share. Closing an account marks its records as deleted; stored records can remain until an erasure request is handled. Shared work can remain under another owner.
We use security logs to diagnose failures and investigate abuse, and backups to recover from data loss or service failure. Their retention depends on the provider's configured storage window, the recovery window needed, and whether records are needed for an active security investigation or legal obligation. We will explain any exception that affects an erasure request.
Providers and international processing
Our providers may process information outside the European Economic Area, including in the United States. Their data-protection terms describe the safeguards for international transfers, including the European Commission's standard contractual clauses where applicable. You can read the Cloudflare data processing addendum and the Convex data protection addendum, or contact us for information about the safeguards used for your data.
Code of conduct
Be kind and treat other people with respect.
We do not allow:
- Harassment, bullying, threats, or hateful behaviour.
- Attacks on people because of who they are, where they come from, or what they believe.
- Sharing someone else's private information.
- Spam, scams, impersonation, or attempts to damage the website.
- Illegal content or anything that puts another person at risk.
These rules are not optional.
We may remove content and suspend or delete accounts when these rules are broken. We will not knowingly allow a violation to remain on Dune Zone.
Copyright
Do not upload or publish something if doing so would infringe another person's copyright.
Only share work that you made, have permission to use, or are allowed to use by law. We may remove work that breaks this rule.
We view original, non-commercial fan-made game assets that transform existing material into something new as fair use. That is our view, not a promise that every derivative work is legally fair use. Each work and each use is different.
Uploading an official image, scan, book, rules text, or other person's work without meaningful changes is not allowed unless you have permission or another clear legal right to use it.
A free hobby project
Dune Zone is a hobby project. You can use it free of charge.
We will do our best to keep it working, but there is no uptime guarantee. The website may be slow, unavailable, or stop running without notice.
Please do not use Dune Zone as the only place where you keep something important.
Last updated 13 October 2026. If anything changes, we will update this page.