Privacy policy
Before publication: confirm the server-log data and retention period with the hosting provider, complete the highlighted retention period below, and ensure the controller details identify the actual website operator.
Data controller
duhovi esport
Schliemannweg 27
80937 München
Germany
team@duhovi.info
Technical operation of this website
This website loads images, stylesheets and JavaScript locally. The supplied website code does not use analytics tools, external fonts, embedded videos or cookies. The optional Aim Challenge profile search and public leaderboard communicate with our server as described below.
Aim Challenge and public leaderboard
Gameplay runs in your browser. A temporary round token is requested from our server when you start a round. Your local personal best is stored only for the current visit unless you enable “Save my best on this device”. If enabled, that best score stays in local browser storage until you clear it, disable the option or remove browser data.
After a completed round, you may choose a name-only entry, enter a display name and Steam profile link, or search for your public FACEIT profile by nickname. Name-only and Steam entries do not contact a third-party API. Steam links are supplied by the player and are not verified. We send the entered nickname to the FACEIT Data API to retrieve the public player ID and nickname. This lookup does not verify ownership of the account and does not ask for a FACEIT password.
Only when you explicitly confirm publication and press “Publish this round” do we store your selected entry type, player name, profile link (if supplied), entry identifier, hit count, shot count, average response time and submission time in our leaderboard database. Your nickname, profile link and result are displayed publicly if your result is in the top 20. For FACEIT, the entry identifier is the public player ID; for Steam, it is derived from the supplied profile URL. Only the best result per FACEIT player ID or Steam profile URL is retained. Name-only submissions receive separate identifiers per round; matching names are not treated as the same person. Names and account ownership are not verified. No Steam or FACEIT password is collected.
For basic abuse prevention, the leaderboard service temporarily stores a keyed hash of the connection IP address and request times. Request records expire after 10 minutes and round tokens after 15 minutes; expired records are removed on the next API request. Hosting logs may have separate retention periods. Public score entries are retained until removed by the operator. To request removal, contact team@duhovi.info. Clearing your local best does not remove public entries.
Hosting and server logs
This website is hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany.
When you visit our website, technical data is processed to deliver the website and maintain its security and availability. Depending on the hosting configuration, server logs may contain your IP address, the date and time of access, requested pages or files, HTTP status codes, browser information and the referring website.
We use this information to operate the website, diagnose technical problems and investigate misuse or security incidents. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure and reliable website. Our hosting provider processes the relevant data as part of providing its hosting services.
Server logs are retained for [insert the retention period confirmed by united-domains] and subsequently deleted or anonymised. Where specific records are required to investigate a security incident or comply with a legal obligation, they may be retained for that purpose.
Further information about the hosting provider is available in the united-domains privacy policy.
Contact and external links
If you contact us by email or WhatsApp, we process the information you provide to respond to your enquiry. This may include your name, email address, telephone number, message content and any attachments.
General enquiries can be sent to team@duhovi.info. Marketing and partnership enquiries can be sent to marketing@duhovi.info.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or steps requested before entering into a contract. For other enquiries, we rely on Article 6(1)(f) GDPR and our legitimate interest in responding to messages.
We retain correspondence for as long as necessary to handle the enquiry and any related follow-up. We then delete it unless statutory retention obligations or the establishment, exercise or defence of legal claims require continued storage.
Our website contains links to Instagram, X, FACEIT, Discord and WhatsApp. These are ordinary links rather than embedded social-media feeds or tracking plugins. The links themselves do not contact those platforms merely because you view our website. Clicking a link opens the relevant external service, where that provider’s privacy policy applies.
If you communicate with us through an external platform, that platform also processes your information under its own privacy policy. You can alternatively contact us by email.
The optional FACEIT profile search and public Aim Challenge leaderboard are separate features. Their data processing is described in the “Aim Challenge and public leaderboard” section of this policy.
Your rights and contact options
Subject to the applicable legal conditions, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing and data portability.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Where we rely on legitimate interests under Article 6(1)(f) GDPR, you may object to processing on grounds relating to your particular situation. You may object to processing for direct marketing at any time.
To exercise your rights, contact:
duhovi esport
Schliemannweg 27
80937 München
Germany
Email: team@duhovi.info
You may also lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.
For private-sector organisations based in Bavaria, the relevant authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA): BayLDA complaint information.