The Base Builder saves a plan only when you select Save in browser (wardogs-base-plan-v1). It stays on this device until you delete it using the builder or the local-data deletion button below. JSON, CSV and SVG exports are downloaded as files.
1. Controller and contact
Daniel Albert - Software Solutions
c/o IP-Management #47718, Ludwig-Erhard-Str. 18, 20459 Hamburg
Privacy enquiries: [email protected]
2. Website delivery and hosting
When you visit, the server infrastructure processes necessary connection data, including your IP address, time, requested address and headers sent by your browser. This supports delivery and security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable, secure operation. The website cannot be delivered without this connection data.
Hosting provider: Hetzner Online GmbH
Address: Industriestr. 25, 91710 Gunzenhausen, Germany
Processing location: Germany (Hetzner Cloud; administered by the operator)
The application stores daily pseudonymous page-view counts as described below; its error handler logs error codes. Our planned regular retention limit for our own Nginx access logs is 7 days . This is an operational policy, not a legally mandated period. Necessary extracts relating to a specific security incident may be retained separately until the investigation or legal proceedings end. Cloudflare, hosting infrastructure and system logs are not covered by this limit.
Hosting/subprocessors and third-country processing: Hetzner Cloud in Deutschland; vorgeschalteter Cloudflare-Proxy mit möglicher Verarbeitung außerhalb der EU, insbesondere in den USA. E-Mail-Kontakt über Google/Gmail; auch dabei sind Drittlandverarbeitungen möglich. Bei freiwilliger Steam-Anmeldung verarbeitet Valve Daten nach eigenen Datenschutzhinweisen.. Where the host acts as a processor, an agreement under Article 28 GDPR is required.
Cloudflare proxy service
Traffic passes through Cloudflare. Cloudflare processes IP addresses, requested URLs, timestamps, browser data and technical security information to deliver and protect the website. The legal basis is Article 6(1)(f) GDPR; our interest is secure and reliable operation. Processing outside the EU, particularly in the US, is possible. The Cloudflare Data Processing Addendum provides, among other safeguards, standard contractual clauses for relevant transfers. The contract status, enabled products and retention periods must match the actual account settings.
Depending on the security features enabled, Cloudflare may set its own security cookies, such as __cf_bm or cf_clearance. These are separate from our Steam session cookies. Not every cookie described in the provider documentation is necessarily active on this website.
Cloudflare Data Processing Addendum · Cloudflare cookies · Hetzner privacy information
3. Calculators and shared plans
Budget, equipment and game coordinates are calculated in your browser. They remain there unless you explicitly save them to your Steam-linked account or publish a community loadout. Clicking “Save to account” sends the plan name and configuration to our server and links them to your account. New plan links contain values after the “#” character. This fragment is not sent to our server when the page is requested. Anyone with the full link can read these values; your browser may also store it in its history.
Older links using “?plan=” or “?fire=” remain readable. Their values reach the server on the first request; the browser then converts the old format into a fragment. Do not include personal or confidential information in plans. Use your browser to delete browsing history.
4. Local deployment plans
When you explicitly use the storage feature, the artillery planner can save up to 50 named deployments on your device. It reads this storage only when you open “Save & load deployments”. The plan name, map, weapon, game positions and data version are stored under wardogs-fire-plans-v2; older individual plans may be imported from wardogs-fire-plan . Exporting as a file happens only on your request and only to your device.
Local storage serves only the save/load feature you requested (section 25(2)(2) TDDDG). If you enter personal information, it is processed to provide that function under Article 6(1)(f) GDPR; our interest is providing this local feature. Local plans leave your device only when you share a plan link or explicitly save the plan to your account. They remain until deleted or until your browser clears site data.
5. Map images and external links
Your browser loads map images exclusively from our website. Our server retrieves missing tiles from assets.wardogs-artillery.com and reuses them from a bounded memory cache for up to six hours. Expired entries are removed within a further minute. No visitor IP addresses, cookies, browser headers or referrers are forwarded. The image provider sees the server IP and requested tile. These are game maps, not your physical location; location permission is not requested.
Fonts, libraries and the hero image are hosted on our server. Linked sources and other websites are opened only when you follow an external link. The destination provider’s privacy information then applies. Our referrer policy prevents transmission of the referring address.
6. Email contact
If you contact us by email, we process your message and sender details to handle your enquiry. The legal basis is Article 6(1)(f) GDPR (our interest in responding), or Article 6(1)(b) GDPR where an enquiry relates to a contract. Retention/deletion criterion: General enquiries are deleted after they have been resolved and no further questions are expected; a monthly review and deletion no later than 30 days after resolution are planned. Messages that must be retained by law or are needed for specific legal claims are stored separately and only for the relevant purpose.. Additional statutory retention requirements must be considered in each case.
Our contact email address uses Google/Gmail. The mail service processes the sender, recipient, message content and technical metadata. Processing exclusively in Germany is not guaranteed. The Google privacy policy explains this processing. The contractual terms applicable to this mailbox must be clarified before the privacy review is completed.
7. Your rights
Subject to the legal requirements, you may request access, rectification, erasure, restriction and data portability. For processing based on legitimate interests, you may object on grounds relating to your particular situation (Article 21 GDPR). You may withdraw any consent with effect for the future. Use the contact above for requests.
You may complain to a data protection supervisory authority, particularly at your place of residence or work, or where an alleged infringement occurred. This directory of German supervisory authorities can help you choose. There is no automated decision-making with legal effects, and we do not create user profiles ourselves; the game calculators simply process your inputs. For processing by Google after your consent, see section 13.
8. Steam sign-in and private account plans
Signing in is optional. When redirected to Steam, Valve processes connection and login data as an independent controller. See the Steam privacy notice. This may involve processing outside the EU, particularly in the USA. Our website receives a verified Steam ID but no Steam password, email, friends list or game library. We do not automatically load Steam avatars or profile images.
We store your Steam ID and account creation date, plus explicitly saved plan names, configurations and save dates. This provides the cross-device storage you requested; the legal basis is Article 6(1)(b) GDPR. Plans are accessible only after signing in with the same Steam ID. Anyone receiving a complete plan link can read its contents independently of account access. Please do not put sensitive personal information in plan names.
Accounts and plans are kept until you delete them. In My account you can edit or delete plans, export your account data as JSON or delete your entire Fieldkit account. Account deletion also removes associated plans and sessions from the active database; it does not delete your Steam account or local browser plans. Deployment database backups may contain deleted account data. Automatic deletion is not yet configured; a specific retention period and its implementation remain outstanding. Restoring a backup must account for subsequent account deletions.
To limit abusive login and write requests, a hash of the connection IP and request counters are temporarily processed in memory. They do not create permanent access logs or usage profiles. The basis is Article 6(1)(f) GDPR and our legitimate interest in protecting the service.
9. Essential cookies
The application itself sets no essential cookies without login; Google analytics and advertising cookies are set only after your consent (section 13); Cloudflare may set security cookies depending on enabled protection features. Explicitly starting Steam sign-in sets a short-lived login cookie (10 minutes). Successful sign-in sets a session cookie (7 days). Both use HttpOnly and SameSite=Lax, plus Secure on HTTPS. In production they are named __Host-fieldkit-login and __Host-fieldkit-session; locally without HTTPS, fieldkit-login and fieldkit-session. They serve only sign-in and account access (section 25(2)(2) TDDDG), without advertising or analytics use.
While the server is running, expired login flows, security proofs and sessions are removed from the active database within one further minute. Signing out invalidates the current session immediately. Essential cookie and security processing is based on Article 6(1)(b) or (f) GDPR; our legitimate interest is protecting accounts. Our own page-view statistics run on our server without additional cookies or browser scripts. Google Analytics is described separately in section 13.
10. Public community loadouts and ratings
Only after you explicitly confirm publication will the title, chosen alias, description, role and equipment data become public. Search engines may index these pages and third parties may copy them. Bank balance, reserves, custom prices and Steam identifiers are not publicly displayed. Internally, we link publications, ratings and reports to your Steam-linked account. Raters are publicly represented only by aggregate vote counts and averages. Reports are visible only to the operator. You can remove your publications and ratings; deleting your account also removes these contributions and your reports from the active database. Third-party copies or search engine caches may be outside our control. Account exports include your publications, ratings and reports.
11. Page-view statistics
We count successful public HTML requests to understand website usage. A daily keyed hash of the connection IP address and browser header estimates unique users per calendar day (Europe/Berlin). Daily visitor counts store only the day, pseudonym and number of views. Separate aggregate counts store public page paths without query parameters, referring hostnames without full URLs, browser families, device types and approximate country codes from trusted Cloudflare headers. These breakdowns are not linked to visitor pseudonyms. No raw IP addresses, browser headers, query parameters or Steam IDs are stored in the statistics. This in-house statistic uses no additional cookies or local storage and sends no data to an analytics provider; Google Analytics is a separate service (section 13). Shared connections and browser changes can affect the estimate. Administrators see daily totals, average views per estimated user and the aggregate breakdowns. Missing referrers remain unattributed; countries, browsers and device types are estimates. Entries and daily keys outside the last 30 calendar days are deleted from the active database at startup and within one minute during operation. The existing backup limitations described above also apply.
12. Server voting
To enforce one vote per IP every 24 hours across all community servers, we store a keyed IP hash and the last vote time. Raw IP addresses are not stored for voting. Expired voting locks are deleted at startup and within one minute during operation. Aggregated votes per server are retained without an IP link. No login or additional cookies are needed. Server data is fetched by our backend from Wardog Servers; your IP is not sent to that provider for this request. The backup limitations above also apply.
13. Google Analytics, Google AdSense and consent
We use Google Analytics 4 (measurement ID G-M4341MDJSF) to understand which pages are used, and Google AdSense (publisher ID pub-0304180586190157) to show ads on content pages, overview pages and tools, such as articles, guides, item pages, the server list and calculators. Account, admin and legal pages, error pages and user submissions stay ad-free. The provider for users in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing on servers of Google LLC in the USA is possible; Google relies on the EU-US Data Privacy Framework and standard contractual clauses.
Before you choose, Google Consent Mode is set to deny analytics and advertising storage: no Google Analytics or advertising cookies are set and ads may only be shown in a non-personalised, limited form. Google may still receive technical information such as IP address, browser data and the page visited when its scripts load. Analytics and advertising cookies, device identifiers and personalised ads are only used after you consent in the Google consent message. The legal basis is your consent (Article 6(1)(a) GDPR, section 25(1) TDDDG). You can change or withdraw your choice at any time via the privacy settings link of the consent message; withdrawal does not affect earlier processing.
Event-level Google Analytics data are retained according to the retention setting of the property (Google default: 2 months, at most 14 months). Google describes how it uses data from partner sites and how ads are personalised in its own documents: How Google uses data from partner sites · Advertising at Google · My Ad Center · Google privacy policy