Privacy Policy

Last updated: 1 September 2026

This Privacy Policy explains how Nicola Genesin, also known as Filod ("EFT Ammo", "we", "us"), handles personal data when you use eft-ammo.com, its related pages, and any companion application that links to this Policy (together, the "Service").

1. Controller and contact

The data controller is Nicola Genesin (Filod), an independent developer established in Italy.

• Email: 1911forsaken@gmail.com
• Postal contact details can be requested at the email address above.

Please use the subject Privacy Request when exercising a privacy right. We may ask for information reasonably necessary to verify and locate your request, but we will not ask for more information than needed.

2. Data we handle

Depending on how you use the Service, we and our providers may handle:

• Technical and access data: IP address, timestamps, requested URLs, referrer, browser and device information, language, approximate country, and security or diagnostic events. Our hosting, CDN, security, and advertising providers may receive this data when your device connects to them.
• Advertising and consent data: advertising identifiers, consent or privacy strings, ad impressions, clicks, and related device and interaction information. Nitro, which is operated by Overwolf Ltd, processes this information as described in its privacy policy.
• Content you choose to submit: shared loadout URLs and configurations and, where the feature is available, build titles or Twitch usernames. Shared content and its generated code may be stored in our database and in a Google Workspace spreadsheet and may be accessible to anyone with the sharing link or through a public sharing feature.
• External-media data: if you choose to load a Twitch or YouTube embed, your device connects directly to that provider. The provider may receive your IP address, device information, page URL, and its own cookies or identifiers under its privacy policy.
• Local device storage: the Service stores a timestamped game-price cache, which it normally refreshes after approximately ten minutes, and stores your external-media choice. This information stays in your browser unless a provider or browser setting synchronizes it.
• Communications: your email address, message, and any other information you provide if you contact us.

We do not intentionally request payment-card data, government identifiers, precise location, health data, or other special-category data. Do not include personal or sensitive information in a public title, URL, configuration, or other shared content.

3. Purposes and legal bases

Purpose	Legal basis in the EEA/UK
Deliver pages, assets, requested APIs, and sharing features	Performance of the service you request; legitimate interests in operating the Service
Protect the Service, prevent abuse, diagnose faults, and maintain logs	Legitimate interests in security, reliability, and fraud prevention; legal obligations where applicable
Store and display content you choose to share	Performance of the service you request; legitimate interests in providing community features
Serve personalized advertising and use non-essential advertising storage	Consent where required
Serve contextual advertising, record privacy choices, and produce aggregated reporting	Legitimate interests where permitted; otherwise consent
Load Twitch or YouTube content	Consent, given when you select the load option
Answer messages and privacy requests	Legitimate interests in responding; legal obligations for rights requests

You may withdraw consent at any time through Privacy choices in the footer. Withdrawal does not affect processing that was lawful before withdrawal.

4. Cookies and similar technologies

Nitro's advertising script includes a consent-management platform for regions where consent is required. It records your advertising choices and communicates them to participating advertising vendors. The full vendor and purpose list is available in that interface.

Twitch and YouTube embeds are blocked until you choose to load external media.

The Service uses self-hosted Umami analytics. Umami is cookieless: it sets no cookies or browser identifiers and does not store IP addresses. It records pages viewed, referrer, browser and operating system type, and a coarse country or region derived from your IP address. Analytics are enabled by default, because cookieless analytics of this kind do not require consent; you can disable them at any time with the Do Not Track Me link in the footer, and your choice takes effect immediately. See the Umami documentation.

You can reopen the available advertising controls and reset the external-media choice using Privacy choices in the footer. Browser controls can also delete local storage and cookies. Blocking strictly necessary storage may prevent parts of the Service from working.

5. Recipients and service providers

We disclose data only as needed to operate the Service, follow your choices, comply with law, or protect rights and security. Recipient categories include:

• hosting, content-delivery, database, security, and infrastructure providers;
• Nitro/Overwolf and advertising partners listed in Nitro's consent interface;
• Google Workspace, used for operational records relating to shared links;
• Twitch and YouTube, only when you choose to load their embedded content;
• tarkov.dev, when your browser requests current public game data;
• professional advisers, authorities, or a successor operator where legally necessary.

Third-party links that you choose to open are governed by the third party's own privacy notice.

6. International transfers

Some providers or their subprocessors operate outside the European Economic Area. Where GDPR transfer restrictions apply, transfers must rely on an adequacy decision, approved standard contractual clauses with appropriate supplementary measures, or another lawful transfer mechanism. Contact us for information about safeguards relevant to a specific transfer.

7. Retention

We use the following periods or criteria:

• browser price-cache entries are normally refreshed after approximately ten minutes and remain until overwritten or cleared in the browser;
• external-media and advertising choices remain until they expire, you clear browser data, or you change them through Privacy choices;
• shared URLs and build data are kept while the sharing feature remains active or until a valid deletion request, unless retention is required to prevent abuse or comply with law;
• routine technical logs are kept only for the period configured by the relevant infrastructure provider and needed for security, diagnosis, and abuse prevention;
• correspondence is normally kept for up to 24 months after the matter is closed, and longer where needed to establish, exercise, or defend legal claims;
• backups are deleted or overwritten on their normal rotation schedule.

We periodically review retained information and delete or anonymize it when it is no longer needed.

8. Your rights

Subject to applicable law, you may ask us to access, correct, delete, restrict, or provide a portable copy of your personal data, or object to processing based on legitimate interests. You may withdraw consent at any time and may lodge a complaint with your local supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.

Send requests to 1911forsaken@gmail.com. If another controller, such as an advertising provider, must handle part of a request, we will help direct the request rather than requiring you to identify the provider unaided.

Residents of jurisdictions with additional privacy rights may contact us using the same method. Where applicable, we honor legally required browser-based opt-out signals and do not discriminate against users for exercising privacy rights.

9. Children

The Service is a general-audience game reference and is not directed to children under 13. We do not knowingly collect personal data from children under 13. Users who are not old enough to consent to optional processing under their local law should use those features only with authorization from a parent or guardian. Contact us if you believe a child submitted personal data.

10. Security

We use technical and organizational measures intended to protect information, including access controls, encrypted connections where supported, input validation, and limited access to operational records. No internet service is completely secure, so we cannot guarantee absolute security.

11. Changes

We may update this Policy when the Service, providers, or legal requirements change. We will change the date above and provide additional notice where a change materially affects your rights or requires new consent. A policy update does not override a previous privacy choice.

12. Contact

Questions, complaints, and privacy requests may be sent to 1911forsaken@gmail.com.