Privacy Policy

The controller of your data is [NOMBRE Y APELLIDOS] (trading as "Leonida Hub"), with tax ID [NIF] and registered address at [DIRECCIÓN FISCAL].

For any matter relating to this policy or to the processing of your data, you can contact us at [EMAIL_CONTACTO].

Account data: when you register we process your email address, your username or handle, and your password. The password is never stored in plain text: it is always stored hashed, so that no one, not even us, can read it.

Social login data (OAuth): if you choose to register or sign in with Discord or Google, we receive from that provider your email address and the basic profile data the provider makes available, in order to create or link your account.

Authentication data: we manage your session using JWT tokens. The access token is stored in an httpOnly cookie with the SameSite attribute (it is not accessible from the browser's JavaScript) and we use a refresh token to keep your session active.

Public user-generated content: the forum is public. The threads, messages and reactions you post, together with your username, are visible to any visitor and may be indexed by search engines.

Technical and security data: we keep technical logs that include your IP address for security and abuse-prevention purposes, and we use a rate-limiting system to protect the service. The site's internal search indexes public forum content so you can find it.

Managing your account and providing the service (registration, authentication, posting on the forum): the legal basis is the performance of the contract or user relationship you accept when you register and use the site (Art. 6(1)(b) GDPR).

Social login with Discord and Google: we process the data received from the provider to create or link your account on the basis of the performance of the contract and, as regards the connection with the external provider, of your consent in choosing that method (Art. 6(1)(b) and 6(1)(a) GDPR).

Security, fraud and abuse prevention, and service stability (IP logs, rate limiting): the legal basis is our legitimate interest in protecting the site, its users and the infrastructure against misuse (Art. 6(1)(f) GDPR).

Compliance with legal obligations: where applicable, we will process data to comply with the obligations imposed on us by applicable law (Art. 6(1)(c) GDPR).

We do not carry out third-party analytics, advertising, or the sending of marketing communications or newsletters.

We keep your account data for as long as your account remains active. If you request erasure or delete your account, we will delete or anonymise your personal data, except for any data we must retain to comply with legal obligations or to handle potential liabilities.

Public content you have posted may remain visible on the forum after you leave; at your request we will remove it or dissociate it from your identity, without prejudice to third-party quotes or replies that reproduce it.

Technical logs containing IP addresses are kept only for as long as strictly necessary for security and abuse-prevention purposes, after which they are deleted or anonymised.

We do not sell your data or transfer it to third parties for commercial purposes. Only the providers necessary to deliver the service are involved; they act as processors on our behalf and under contract.

Social login providers: Discord and Google, when you choose to authenticate with them. Their processing of your data is additionally governed by their own privacy policies.

Hosting and infrastructure providers: companies that provide us with hosting and the technical infrastructure (servers, database, search engine and rate-limiting system) needed to operate the site.

We may also disclose data to authorities or courts where we are under a legal obligation to do so.

Some of the providers we use, such as Google or Discord, may process data outside the European Economic Area (EEA).

Where an international transfer takes place, we ensure that appropriate safeguards under the GDPR are in place, such as an adequacy decision of the European Commission or approved Standard Contractual Clauses, so that your data continues to enjoy a level of protection equivalent to that of the EU.

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability. You also have the right to withdraw any consent you have given, without this affecting the lawfulness of processing carried out before its withdrawal.

To exercise them, write to us at [EMAIL_CONTACTO] indicating the right you wish to exercise; we may ask you to prove your identity. We will respond to your request within the legally prescribed time limits.

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), without prejudice to any other administrative or judicial remedy.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. These include storing passwords as hashes, managing sessions with httpOnly cookies and the SameSite attribute, rate limiting to mitigate abuse, and restricting data access to the staff and providers who need it.

No system is invulnerable; we work to maintain and continuously improve these measures and to respond diligently to any security incident.

Use of Leonida Hub is intended for people over 14 years of age, the minimum age set in Spain for consenting to the processing of their personal data. Please also bear in mind that GTA VI is a product rated for an adult audience.

If you are under that age, you must not register or provide us with personal data. If we detect that we have processed a minor's data without the required authorisation, we will delete it. If you believe this has happened, contact us at [EMAIL_CONTACTO].

We use only technical cookies necessary for the site to function: a session and authentication cookie (httpOnly) that keeps you logged in, and a language-preference cookie that remembers whether you prefer the site in Spanish or English.

We do not use analytics, advertising or third-party tracking cookies. For more detail, please see our Cookie Policy.

We may update this Privacy Policy to reflect legal, technical or operational changes to the site. The version in force is always the one published on this page, with its last-updated date.

If we make substantial changes, we will endeavour to inform you by an appropriate means. We recommend that you review this page periodically.

If you have any questions about this Privacy Policy or about how we process your data, you can write to us at [EMAIL_CONTACTO] or address [NOMBRE Y APELLIDOS], [DIRECCIÓN FISCAL].

Any dispute relating to this policy shall be subject to Spanish law and to the courts and tribunals of [CIUDAD/JURISDICCIÓN], without prejudice to the rights afforded to you by data protection regulations.