Privacy policy

Last updated: 11 October 2026

H1Z1 Crosshair DB is a free fan site run by a private individual. This page explains which personal data the site uses, why, for how long, and what your rights are under the GDPR.

Who is responsible

The site's publisher (see the legal notice). Contact: email [email protected] or Discord zzodiaque.

What we collect and why

• Steam sign-in (only if you sign in): your SteamID64, public Steam name and avatar, read from your public Steam profile. They identify you as the author of your crosshairs and are shown publicly next to them. Your Steam password is never sent to this site: sign-in happens on Steam's own website.
• Crosshairs you publish: the code, the name you give it, the weapon, the publication date, and its like and copy counters. They are public.
• Verified badge requests: your message, your Discord name if you give it, and the type requested (pro, streamer). Only the administrator sees them; your Discord name is never shown on the site.
• Likes, copies and reports: to count each visitor once, likes and copies are linked to an irreversible, salted fingerprint of your IP address; the IP address itself is never stored. Reports are linked to your Steam account.
• Technical data: our host, Cloudflare, processes IP addresses and request data to deliver the site and protect it from attacks.
• Advertising: the site shows ads served by Google AdSense, which keeps the site free. Google and its partners may use cookies and similar identifiers to show ads, measure them and fight fraud. Personalised ads are only shown if you accept them in the consent message.

Cookies and local storage

The site sets a single cookie, session, and only when you sign in with Steam. It is strictly necessary to keep you signed in (signed, valid 30 days). Your browser also keeps your likes list and language choice in local storage, on your device only. No analytics is used.

Ads are provided by Google AdSense. Google, as an independent controller, uses cookies (for example to remember your consent and to show and measure ads). Visitors in the European Economic Area, the UK and Switzerland see a consent message managed by Google on their first visit: you can accept or refuse personalised ads, and change your choice at any time through the "Privacy and cookie settings" link that this message adds. If you refuse, Google may still show non-personalised ads, which use cookies only for frequency capping, aggregated reporting and fraud prevention. Learn more about how Google uses data from sites that use its services and manage your ad settings at adssettings.google.com.

Legal basis

• Providing the service you ask for (signing in, publishing, liking): performance of the service (GDPR art. 6(1)(b)).
• Security, abuse prevention and moderation: legitimate interest (art. 6(1)(f)).
• Your Discord name in a badge request: your consent, since it is optional (art. 6(1)(a)).
• Advertising cookies and personalised ads: your consent, given in Google's consent message (art. 6(1)(a)).

Who receives the data

This site does not sell your data. Google receives the data its ad service collects in your browser (see "Cookies and local storage" above). The site's data is stored with our host, Cloudflare (database and servers), which may process it outside the European Union under the European Commission's standard contractual clauses. Steam (Valve) handles the sign-in on its own website.

How long we keep it

• Your crosshairs, with your Steam name and avatar: until you delete them (each crosshair has a Delete button for its author) or ask us to.
• Session cookie: 30 days, or until you sign out.
• Badge requests: until they are handled; a declined request is kept to apply the 7-day waiting period and replaced by your next request.
• Like, copy and report records: as long as the crosshair exists.

Your rights

You can ask to access, correct or delete your data, object to its use, or receive a copy of it. Contact us by email at [email protected] or on Discord (zzodiaque); we answer within one month. If you think your rights are not respected, you can complain to your data protection authority (in France, the CNIL: cnil.fr).