1. Controller and contact details
The controller responsible for pesdb.net is Ilias Vidalis, established in Greece.
Privacy requests and other legal communications may be sent through the pesdb.net contact form or by email to legal@pesdb.net.
2. Scope
This Privacy Policy applies to all pesdb.net game databases, player pages, search tools, progression tools, comparison tools, pack pages and contact features. Third-party websites and services linked from pesdb.net are governed by their own privacy policies.
3. Data we process
3.1 Information generated when you use pesdb.net
When your browser requests a page, the server may process your IP address, request date and time, requested URL, referring URL, HTTP response status, browser and device information, preferred language and similar technical information. These data are used to deliver the site, maintain security, diagnose errors and prevent abusive automated traffic.
3.2 Contact form information
If you use the contact form, pesdb.net processes the message and any name or email address you voluntarily provide. Name and email are optional. The submission also includes the time, IP address, browser user agent, preferred language and referring page for delivery, security and abuse prevention. If you do not provide an email address, pesdb.net cannot reply by email.
3.3 Information stored only in your browser
Player builds, progression selections and the Compare list may be stored in your browser's local storage. This information remains on your device and is not transmitted to pesdb.net merely because it is saved there. You can remove it through the relevant site controls or your browser settings.
3.4 Analytics and advertising information
When enabled in accordance with your privacy choices and applicable law, analytics and advertising services may process online identifiers, cookie identifiers, IP-derived approximate location, device and browser information, pages viewed, interactions, ad impressions and ad interactions. pesdb.net does not ask Google Analytics or advertising providers to receive the name or email address submitted through the contact form.
4. Purposes and legal bases
| Purpose | Data | Legal basis where the GDPR or UK GDPR applies |
|---|---|---|
| Deliver pages and operate site features | Request and technical data | Legitimate interests in providing and maintaining pesdb.net |
| Security, rate limiting, fraud and abuse prevention | IP address, security identifier, request and response information | Legitimate interests in protecting pesdb.net, its data and its users |
| Receive and answer messages | Contact form and submission metadata | Legitimate interests in communicating with users and handling feedback or data corrections |
| Audience measurement and site improvement | Analytics identifiers and usage information | Consent where required by applicable law |
| Display and measure advertising, including personalised advertising where selected | Advertising identifiers, device, usage and ad interaction information | Consent where required by applicable law; otherwise another lawful basis permitted by the applicable law |
| Comply with law and establish, exercise or defend legal claims | Relevant records | Legal obligation or legitimate interests, as applicable |
Where processing is based on consent, refusing or withdrawing consent does not affect access to the core player database. It may result in non-personalised or limited advertising, or in analytics not being collected, depending on the available service configuration.
6. Google Analytics and Google AdSense
6.1 Google Analytics
pesdb.net uses Google Analytics to understand aggregated site usage, such as which pages are visited and how visitors interact with site features. Google Analytics may receive information including the page URL, IP address, device and browser information, approximate location and online identifiers. Analytics is activated only in accordance with the consent choices and legal requirements applicable to the visitor.
Google explains how it processes information from sites using its services in How Google uses information from sites or apps that use our services. You may also use the Google Analytics opt-out browser add-on.
6.2 Google AdSense
pesdb.net uses Google AdSense to fund the service through advertising. Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to pesdb.net or other websites. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to pesdb.net and other sites on the Internet.
Depending on your location, choices and eligibility, advertisements may be personalised or non-personalised. You can control personalised advertising through Google Ads Settings. Additional choices may be available through AboutAds.
If your choices do not permit personalised or non-personalised advertising, Google may serve eligible Limited Ads. Limited Ads do not use personal data for advertising personalisation. If programmatic Limited Ads are enabled, Google may use cookies or local storage solely for invalid-traffic detection, fraud prevention and security, as described in the consent interface and Google's documentation.
6.3 Consent management
For visitors in the European Economic Area, the United Kingdom and Switzerland, pesdb.net uses a Google-certified consent management platform that integrates with the IAB Transparency and Consent Framework when required for Google advertising services. The consent interface identifies the active advertising vendors and their purposes.
If pesdb.net introduces another analytics or advertising provider, this Privacy Policy and the consent interface will be updated before that provider begins processing visitor information.
8. Data retention
- Contact messages are retained for up to 12 months after the last related communication.
- Standard server logs are retained for up to 30 days.
- Hashed rate-limiting records are retained for up to 2 days.
- Contact-form anti-abuse event records are retained for up to 24 hours.
- Google Analytics event-level data controlled by pesdb.net is configured for a retention period of 14 months. Google may retain other information under its own policies and service terms.
- Browser local storage remains until you remove it or clear the site's stored data.
Records may be retained for longer where required by law or reasonably necessary for security investigations or the establishment, exercise or defence of legal claims. They are then deleted or anonymised when no longer required.
9. Your privacy rights
Depending on your location and applicable law, you may have the right to request access to personal data, correction, deletion, restriction of processing, data portability, or information about recipients; to object to certain processing; and to withdraw consent at any time without affecting processing already lawfully carried out.
Residents of jurisdictions with applicable US state privacy laws may also have rights to know, delete or correct personal information, opt out of its sale or sharing and targeted advertising, and receive equal service without unlawful discrimination. pesdb.net does not provide financial incentives in exchange for personal data. Where legally required, recognised browser-based opt-out signals are treated as requests to opt out.
To exercise a right, use the contact form or email legal@pesdb.net. pesdb.net may request limited information needed to verify the request and will respond within the period required by applicable law.
If the GDPR applies, you also have the right to lodge a complaint with a supervisory authority. The lead authority in Greece is the Hellenic Data Protection Authority. You may also contact the authority in the country where you live or work, or where you believe an infringement occurred.
10. Children
pesdb.net is a general-audience service and is not directed specifically to children under 13. pesdb.net does not knowingly collect personal data from a child in a manner that requires parental consent. If you believe a child has submitted personal data improperly, please contact pesdb.net so that the information can be reviewed and deleted where appropriate.
11. Security, automated protection and policy changes
pesdb.net applies reasonable technical and organisational measures intended to protect personal data. These include HTTPS on the production site, access restrictions, signed security identifiers, rate limiting, input validation and limited retention. No Internet transmission or storage system can be guaranteed to be completely secure.
Automated security controls may temporarily restrict requests that exhibit abusive volume or invalid access patterns. They are used to protect the service and do not make decisions producing legal or similarly significant effects about individuals.
This Privacy Policy may be updated when pesdb.net changes its services, providers or legal obligations. Material changes will be identified by a revised effective date and, where required, an additional notice or renewed consent.
Use of pesdb.net is also subject to the Terms of Use.