Privacy
What this site collects, why, and what you can do about it. Last changed 5 August 2026.
Who is responsible
Maffin e.U., Brochweg 12, 6100 Mösern, Austria.
Email: admin@dasmaffin.com.
Full details on the imprint.
We are not required to appoint a data protection officer and have not appointed one. Write to the address above and you reach the person who runs this.
The site itself
This part applies wherever you are on the site.
Signing in with Steam
- What is kept
- Your SteamID, which is the public number identifying your Steam account, the moment you first signed in, the moment you last signed in, and which permissions on this site have been granted to you. Signing in happens at Steam: you type your password on Valve's pages, never on ours, and we never see it. Steam tells us the SteamID and nothing else.
- What for
- To know who you are between pages, and to decide what you are allowed to see.
- On what basis
- Article 6(1)(b) GDPR - it is what you asked for by signing in. There is nothing on this site you have to sign in to read unless it is somebody's private data.
- For how long
- Until you ask for it to be removed. Ask and it is removed.
- Who can see it
- You, and the accounts holding the permission to manage permissions.
Staying signed in
- What is kept
- One cookie holding a session identifier. No advertising cookie, no analytics, no tracking pixel, and nothing loaded from another company's servers - every stylesheet, script and font on this site is served from this site.
- What for
- So that following a link does not sign you out.
- On what basis
- Strictly necessary for a service you asked for, so no consent banner and nothing to opt out of.
- For how long
- Until the session ends or you sign out.
- Who can see it
- Nobody. It is an identifier, not information about you.
Web server logs
- What is kept
- The ordinary record a web server keeps of each request: the IP address it came from, the time, the address requested, and the browser's own description of itself.
- What for
- Keeping the site up, and working out what happened when something breaks or somebody attacks it.
- On what basis
- Article 6(1)(f) GDPR - our interest in a site that works and is not abused.
- For how long
- By the hosting provider, under their retention. Nothing on this site reads them as a matter of course.
- Who can see it
- The site's operator and the hosting provider.
What you can ask for
Under the GDPR you may ask us to:
- Show you what we hold about you (Article 15).
- Correct it if it is wrong (Article 16).
- Delete it (Article 17).
- Stop using it while a disagreement is sorted out (Article 18).
- Hand it over in a form you can take elsewhere (Article 20).
- Object to any use we base on our own legitimate interest (Article 21).
Write to admin@dasmaffin.com from an address we can tie to your account, or include your SteamID. There is no form and no fee, and we answer within a month.
If you are not happy with the answer
You can complain to the Austrian data protection authority: Osterreichische Datenschutzbehorde, Barichgasse 40-42, 1030 Wien, dsb@dsb.gv.at, dsb.gv.at. If you live in another EU country you may complain to your own authority instead.
Where it is kept
On servers rented from a hosting provider, who processes it on our behalf and under contract and does nothing else with it. Signing in involves Valve Corporation, whose own handling of your Steam account is described in the Steam Privacy Policy. We send Valve nothing about you; you are sent to them, and they tell us the SteamID you signed in with.
Children
Nothing here is aimed at children, and we do not knowingly keep data about anybody under 14. Tell us and it goes.
Changes
When this changes, the date at the top changes with it. There is no mailing list to be dropped from, because there is no mailing list.