Draft v1.0 – 21 October 2026. Owner and legal review required before public launch.
Who is responsible
[PUBLIC-LAUNCH BLOCKER: actual data controller legal identity, monitored privacy email and appropriate contact address.] The Gulag Lounge is a community name; it does not identify a registered company.
What we process and why
Website hosting may process IP addresses, request times, requested URLs and browser information to deliver and protect the site. The proposed lawful basis is legitimate interests in operating a secure community website, subject to an owner assessment. Contact enquiries include the details and message you choose to send; the proposed basis is legitimate interests in answering and managing enquiries. Do not send unnecessary sensitive information.
The public website has no active member registration, newsletter, payment collection or contact form. The support amount preview is processed in your browser and is not submitted or stored by that feature. WordPress administrators use necessary authentication and security cookies.
Optional services and recipients
Twitch player and chat remain off until you activate them. Activation sends Twitch your IP address, browser and device information and allows Twitch storage under its own policies. Consent is the basis for this optional integration. Twitch acts under its own privacy notice; it is not described here as merely our processor. The website server may request public Twitch schedule and status information without sending your browser to Twitch. Game status uses the website server boundary.
Outbound Discord and social links do not embed those services; their own notices apply when you leave this site. Hosting and email suppliers may process website or enquiry data for the controller. [PUBLIC-LAUNCH BLOCKER: confirm actual hosting entity, email provider, processor agreements, server locations and any additional recipients. Hostinger is planned, not verified as an active supplier.]
Storage and international transfers
[PUBLIC-LAUNCH BLOCKER: confirm and configure log retention, enquiry retention, backup deletion cycles and storage locations.] A 14-day access-log retention is a proposal, not a verified setting. Keep enquiry data only for a documented period needed to resolve it and meet applicable obligations. Where data leaves the UK, confirm the applicable adequacy decision or safeguards, such as the UK IDTA or Addendum, and how a copy can be obtained before enabling that processing. Twitch may process data internationally under its own notice.
Your choices and rights
You can withdraw optional Twitch consent through Cookie preferences in the footer. This removes embedded frames and our saved choice; it cannot remove cookies already set by Twitch, which you can clear in browser settings. Withdrawal does not affect earlier lawful processing. You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. These rights have legal conditions. Contact the controller using the verified route above. You may complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/.
Changes
We will update this notice before introducing accounts, payments, analytics or other materially different processing. No automated decisions with legal or similarly significant effects are made by these website features.