Privacy
Last changed 16 September 2026.
LUSCO records where players are during an airsoft game. That is location data about identifiable people, so this page says exactly what is kept, who else sees it, and how long it lives. It describes what the software actually does.
Who is responsible
[YOUR NAME OR COMPANY], [REGISTERED ADDRESS], [NIF / VAT NUMBER]. Questions, and any of the requests below: [support@lusco.pt].
What is recorded, and why
| What | Why | Legal basis |
|---|---|---|
| Your name, your email, and your password as a salted hash | To have an account at all | Performance of a contract |
| Which squads you are in, and your role in each | To show you the right squads | Performance of a contract |
| Where your unit was during a game, every few seconds, with its ammunition, its hits and when you were out | The live map, the timeline and the report after the game - the service itself | Performance of a contract |
| A Stripe customer and subscription id, and what you have paid for until | To take the subscription and know it is active | Performance of a contract, and accounting duties |
| A count of failed sign-ins, against your address, held in memory only | So somebody cannot guess passwords all night | Legitimate interest in keeping accounts shut |
What is never recorded
- Card details never reach this server. Stripe takes them on its own pages; all that comes back is an id.
- Your IP address is never written to disk. It exists only as a key in the sign-in limiter, in memory, and is gone when the server restarts. There is no access log.
- No analytics, no third-party scripts, no advertising identifiers, and no profiling of any kind.
- The squad's game passphrase itself is never stored - only keys derived from it, which cannot be turned back into the phrase.
Who sees your position
This is the part worth reading twice.
- Everybody in your squad sees every member's live position while a game is running. That is what the product is.
- A watch link shows the map to anybody who has the link, with no account and no password, so that a screen at the safe zone can show the game. An owner or admin turns it on, and turning it off stops it working. Treat a watch link as public.
- Your unit reports only about itself. Nothing the server sends back can change what your own gun shows.
Cookies
One cookie, set when you sign in, so that the next page knows it is you. It is HttpOnly, SameSite=Lax, and marked Secure over HTTPS. Nothing else is stored on your device and nothing is shared, which is why this site has no cookie banner: there is nothing to consent to.
Who else processes it
| Who | What they get | Where |
|---|---|---|
| The hosting provider | Everything, as the machine it runs on | European Union |
| Stripe | Your email and your payment details, taken directly by them | United States, under its own safeguards |
| Esri | Your browser asks Esri for map tiles directly, so Esri sees your IP address and which part of the world you are looking at. The tiles are not fetched through this server, because their terms do not allow it to keep copies. | United States |
| The email provider | Anything we email you | European Union |
Transfers outside the EU rest on the European Commission's decisions and the providers' standard contractual clauses.
How long it is kept
- Game recordings: 90 days, after which the server erases them itself. Your squad can delete them sooner.
- Account details: until you delete the account.
- A deleted squad's files are moved aside so a mistake can be undone, and are erased for good after 90 days.
- Database backups are kept as the most recent fourteen copies, so something you deleted can persist in a backup for a short while afterwards.
- Records needed for accounting are kept as long as tax law requires.
What you can do
- Delete everything. Account deletes your account, the games your unit recorded in every squad, and your name in every roster, and cancels your subscription. A squad you own passes to its longest-standing admin so that nobody else loses their games. It cannot be undone.
- Take a copy with you. Download everything as a zip: your account, and every game your own unit recorded, in the same format the report tool reads. Your teammates' positions are not in it - those are theirs. For a correction, or anything the download does not cover, email [support@lusco.pt] and you will have it within a month.
- Object, or ask us to restrict what we do with it. Same address.
- Complain. To us first, if you would, but you have the right to go straight to the Portuguese supervisory authority, the CNPD.
Age
You must be 18 or older to hold an account. Airsoft is played by younger people, and an adult can carry a unit on behalf of one - but an account, and the record of where somebody physically was, belongs to an adult.
When this changes
The date at the top changes with it, and anything that alters what is recorded or who sees it will be sent to the email on your account before it takes effect.