Privacy Policy

DucatDump is operated as the DucatDump project by a private individual and acts as the controller for personal data processed by this service. For privacy requests, security issues, abuse reports, or questions, contact privacy@ducatdump.nl.

DucatDump is intended for users who are at least 16 years old. If DucatDump learns that an account belongs to someone under 16, the account may be removed.

Account and profile data can include email address, DucatDump username, Warframe username, password hash, platform, region, mastery rank, legendary rank, founder trade bonus, available trades, profile description, notification preference, prime junk thresholds, and prime junk item overrides. Marketplace data can include WTS and WTB listings, item selections, quantities, prices, notes, generated trade messages, favorites, reviews, reports, and report details.

DucatDump stores data generated by account and marketplace use, including authentication sessions, refresh-token hashes, email verification tokens, password reset tokens, email verification status, listing status, reputation actions, report status, moderation state, presence mode, heartbeat timestamps, available-trade timestamps, marketplace event data, audit entries, IP/request metadata, rate-limit events, security events, and service logs.

Some data is public or visible to other users by design. This can include your DucatDump username, Warframe username, profile description, platform, region, mastery and trade information, online or offline status, listing details, generated trade messages, reputation score, reviews, and public report summaries where applicable. Do not add private information to public profile fields, listings, reviews, or reports.

DucatDump may use Google Analytics 4 for product analytics, such as page views, feature usage, performance, reliability, and user experience improvement. DucatDump does not send DucatDump user IDs, email addresses, Warframe usernames, listing IDs, or other direct identifiers to Google Analytics. Google Analytics is configured for product analytics only, with advertising personalization, remarketing, Google Signals, demographics, and interest reports disabled. GA4 event and user data retention should be set to 2 months in Google Analytics settings.

DucatDump uses strictly necessary authentication and CSRF cookies plus analytics consent storage as described in Cookies & Storage. Google Analytics uses consent mode with analytics storage denied by default. Page view analytics are sent only after analytics consent is accepted. Analytics consent can be changed from the Cookies & Storage page.

DucatDump processes data to create and secure accounts, verify email addresses, provide login sessions, reset passwords, operate WTS and WTB listings, show public profiles, match buyers and sellers, calculate warnings and ratios, maintain favorites, process reviews and reports, moderate abuse, prevent spam and real-money trading, rate-limit requests, investigate security issues, maintain reliability, and improve the product through consent-based analytics.

DucatDump processes account, authentication, listing, and marketplace data because it is needed to provide the service you request. Moderation, security, rate limiting, abuse prevention, logging, and service reliability are processed based on DucatDump's legitimate interests in operating and protecting the service and users. Google Analytics page view analytics are used only after analytics consent is granted.

DucatDump sends account and security emails only, such as email verification, welcome, password reset, and necessary service, account, or security messages. DucatDump does not send marketing emails.

DucatDump may use service providers for hosting, database infrastructure, email delivery, analytics, logging, security, and other infrastructure. These providers process data for DucatDump under their own technical and contractual controls. DucatDump may also disclose data if legally required, to protect rights, safety, and security, or to respond to serious abuse or security issues.

Some providers may process data outside the Netherlands or European Economic Area. Where required, DucatDump expects providers to use appropriate safeguards, such as adequacy decisions, standard contractual clauses, or equivalent transfer mechanisms.

Account, profile, listing, favorite, review, report, reputation, and moderation data is generally kept while the account exists, unless removed earlier by the user, moderation, or service operations. Access tokens expire after about 20 minutes, refresh tokens after about 30 days, email verification tokens after about 24 hours, and password reset tokens after about 1 hour. Expired or used authentication tokens, price snapshots, audit logs, server, IP, rate-limit, request, and security logs are periodically cleaned up according to DucatDump retention operations, generally within 90 days unless longer retention is needed for security investigation, legal compliance, abuse handling, hosting backups, or infrastructure logs.

You can delete your account from your profile by confirming account deletion. Current account deletion is a hard delete in the DucatDump app database and permanently removes the user account, profile, seller batches, buyer listings, favorites, reviews, reports, authentication tokens, verification and password reset tokens, prime junk overrides, legal acceptance records, and related audit logs from DucatDump servers.

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy of data, withdraw consent, and complain to a supervisory authority. You can update profile information and delete your account in the app. For other privacy requests, contact privacy@ducatdump.nl.

Privacy requests are handled manually. DucatDump may ask you to verify control of the account email address before disclosing, changing, exporting, or deleting account data. DucatDump aims to respond within 1 month after receiving a valid request and may extend that period where allowed by law for complex or repeated requests.

If you are in the Netherlands, you can contact the Autoriteit Persoonsgegevens about privacy complaints. You may also have the right to contact your local EU or EEA data protection authority.

DucatDump uses external Warframe-related data sources for item and market information. Those sources have their own policies and are not controlled by DucatDump. See Data Sources for more context.

DucatDump may update this Privacy Policy when the service, analytics setup, legal requirements, or data practices change. Updated versions apply when published or from the stated effective date.