Who is the data controller
WikiGTAVI (“we”, “us”, “our”) is the data controller for the personal data described in this policy. You can contact us at any time at hello@wikigtavi.com.
What data we collect
Data you provide directly
- Account data: username, email address, password hash, optional bio, country and avatar colour
- Contributed content: article edits, comments, screenshot annotations and version notes
- Public activity: comments, ratings, likes and edits to articles
- Correspondence: emails or contact-form submissions you send us
Data collected automatically
- Technical data: IP address (truncated for analytics), browser type, device type and referring URL
- Usage data: pages visited, search terms and session duration
- Cookies: small text files stored on your device (see section 06)
Why we use your data
Under UK and EU GDPR, every use of personal data needs a lawful basis. Ours are:
- Contract: to give you an account, host your contributions and let you log in
- Legitimate interests: to keep the Site running, prevent abuse, protect against fraud and improve our service
- Legal obligation: to respond to copyright takedowns, lawful requests from authorities and accounting requirements
- Consent: for non-essential cookies and any optional communications. You can withdraw consent at any time.
How long we keep data
- Account data: kept for as long as your account is active, then deleted within 30 days of account deletion
- Public edits and comments: kept indefinitely as part of the public wiki record, unless removed by you or by us under our moderation policy
- Server logs: typically up to 30 days, longer where needed for security or legal reasons
- Backups: rolling backups are overwritten within 60 days
Your rights
You have the following rights over your personal data:
- Access: get a copy of the data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: delete your data (the “right to be forgotten”)
- Restriction: limit how we process your data
- Portability: receive your data in a portable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: at any time, where processing relies on consent
- Complain: to your local data protection authority. In the UK that is the Information Commissioner’s Office (ICO).
To exercise any of these rights, email hello@wikigtavi.com. We will respond within 30 days.
Children
The Site is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
Security
We use TLS encryption in transit, encrypted password hashing and access controls on our infrastructure. No system is perfect, however, and we cannot guarantee absolute security. If we ever suffer a personal-data breach affecting you, we will notify you and the relevant supervisory authority where required by law.
Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available at this URL with the “Last updated” date shown above. Material changes will be announced on the Site where reasonably practicable.
Contact
Questions about your data? Email hello@wikigtavi.com or visit our Contact page.
This policy is a starting point for a community-run fan wiki and does not constitute legal advice. We recommend having it reviewed by a qualified data protection professional before relying on it.