Privacy Policy
Last updated: 19 June 2026. Effective immediately.
1. Plain-English summary
We're a tiny, independent fan-wiki of perk combos for the video game Dead by Daylight. We don't have user accounts. We don't sell anything directly. We don't run ads yet. The data we process is limited to what your browser sends us by default (your IP, which page you visited, your user agent) plus whatever Google Analytics and AdSense collect after you've given consent via the cookie banner. You can refuse that consent and still use the site. If anything in the longer text below contradicts this summary, the longer text wins - but we wrote this summary first on purpose.
2. Data controller
The data controller responsible for this website (the person you can contact about your data) is:
Kevin (operator of dbdperkcombos.com)Email: hello@dbdperkcombos.com
Registered in Portugal (NIF available on request)
Mailing address: available on request via the email above
We do not have a Data Protection Officer (DPO) because we're not a public authority and we don't process personal data on a large scale - Article 37 of the GDPR does not require one for this site.
3. What we collect (and what we don't)
This is a static site. There is no login, no comment system, no newsletter signup, no account creation. The personal data we process falls into three categories:
- Server access logs. When your browser requests a page from our server, the server logs your IP address, the page you requested, your user agent string, the referring page (if any), and a timestamp. This is the standard behaviour of every web server on the internet. We use these logs to detect abuse (scraping, denial-of-service attempts, comment spam if/when we add comments).
- Google Analytics 4 - only loaded after you click "Accept all" on the cookie banner. GA4 collects anonymous usage data: which pages you read, how long you stay, whether you came from a search engine, your country (derived from your IP and then discarded). GA4 anonymises your IP before storage. You can read Google's data-handling commitments at policies.google.com/privacy.
- Google AdSense - only loaded after "Accept all". AdSense sets cookies and (depending on your consent) shows personalised ads. You can review Google's ad-personalisation settings at google.com/settings/ads.
What we don't collect: we don't collect your name, your email address, your postal address, your phone number, your location beyond country-level, your device fingerprint, your social-media profile, your government ID, your payment details, or any other direct identifier. We don't sell, rent, or share any user data with anyone - we have no user data to sell.
4. Lawful basis for processing
Under the GDPR (Article 6), every processing activity needs a lawful basis. Ours are:
- Server logs - legitimate interest (Art. 6(1)(f)). Running a website necessarily involves logging requests, and we have a legitimate interest in detecting abuse. We minimise this by deleting logs after 30 days. You can object to this processing at any time (see §8 below) - if you do, we will not act further on your objection unless we can show compelling legitimate grounds that override your interests.
- Analytics and ads - consent (Art. 6(1)(a)). Google Analytics 4 and Google AdSense are non-essential. We do not load them until you click "Accept all" on the cookie banner. You can withdraw consent at any time via the "Cookie preferences" link in the footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Email correspondence - legitimate interest (Art. 6(1)(f)). If you email us (e.g. a DMCA notice or a data-subject request), we keep the email to handle your request. We will not add you to any marketing list.
5. Cookies we use
We use the term "cookies" broadly to mean HTTP cookies, localStorage, sessionStorage, IndexedDB, and any other client-side storage mechanism. We use three categories. A summary table is below; the full vendor list (current at the date of this policy) follows the table.
| Category | On by default? | Turned on when… |
|---|---|---|
| Essential | Yes (always) | Required for the site to function (e.g. remembering your cookie-banner choice). |
| Analytics | No | You click "Accept all" on the cookie banner. Load is via Google Analytics 4. |
| Personalised ads | No | You click "Accept all" on the cookie banner. Load is via Google AdSense. |
Cookie inventory
| Cookie / storage | Vendor | Purpose | Expiry | Category |
|---|---|---|---|---|
dbd_cookie_consent_v1 (localStorage) |
This site | Remembers your cookie-banner choice (accept / essential only / customised). Does not contain personal data. | Persistent (until you clear site data) | Essential |
| Server log records | Our hosting provider | Standard web-server access log (IP, request line, user agent, referrer). Abuse detection only. | 30 days | Essential (legitimate interest) |
_ga, _ga_* |
Google Analytics 4 | Anonymous usage statistics: pages read, session duration, traffic source. | 13 months | Analytics (consent) |
_GRECAPTCHA |
Google reCAPTCHA | Anti-abuse challenge on form submissions, if/when forms are added. | 6 months | Essential (security) |
__gads, __gpi, _gcl_* |
Google AdSense | Ad selection, frequency capping, conversion measurement. | 13 months (typical) | Ads (consent) |
DSID, IDE |
DoubleClick (Google) | Personalised ad targeting (only after "Accept all"). | 13 months | Ads (consent) |
We update this list when we add or remove a vendor. The authoritative list is always the live cookie banner in the bottom-left of every page - if it disagrees with this page, the live banner is correct.
6. Third-party vendors and data transfers
When you accept analytics or personalised ads, your data is processed by Google Ireland Limited (and, where applicable, Google LLC in the United States) on our behalf. Google LLC participates in the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection for transfers of EU personal data to the US. You can verify this at dataprivacyframework.gov.
If you click an Amazon affiliate link, Amazon Technologies Europe S.à r.l. (Luxembourg) processes your navigation as part of their affiliate programme. Their privacy practices are governed by their own privacy notice, not this one.
If you click the Ko-fi button, Ko-fi (Ko-fi Labs Ltd, UK) processes your interaction under their privacy notice. We do not receive any personal data about you from Ko-fi unless you contact us directly.
7. Retention periods
| Data | Retention | Why |
|---|---|---|
| Server access logs | 30 days | Abuse detection |
| Google Analytics data | 14 months (then auto-deleted) | Site analytics |
| Email correspondence | 24 months after last contact | Handle follow-ups |
| Cookie consent record | Until you clear site data | Proof of consent |
8. Your rights under GDPR
If you are in the EU/EEA, you have the following rights in relation to your personal data:
- Right of access (Art. 15) - ask us what data we hold about you.
- Right to rectification (Art. 16) - ask us to fix anything wrong.
- Right to erasure / "right to be forgotten" (Art. 17) - ask us to delete it.
- Right to restriction (Art. 18) - ask us to pause processing while we sort something out.
- Right to data portability (Art. 20) - get a machine-readable copy of your data.
- Right to object (Art. 21) - object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3)) - at any time, for any consent you previously gave.
- Right to lodge a complaint (Art. 77) - with your national supervisory authority (see §10).
Exercising any of these rights is free. We respond within 30 days (Article 12(3) GDPR). If you ask for something especially complex, we may extend by a further 60 days and tell you why. To exercise any right, email hello@dbdperkcombos.com from the email address you want us to verify, or include proof of identity if the request relates to data we hold about a third party.
9. Children
Dead by Daylight is rated PEGI 18 / ESRB M. This site is not directed at children under 13 and we do not knowingly collect information from anyone under 13. If you believe a child under 13 has interacted with us (for example, sent us an email), please write to hello@dbdperkcombos.com and we will delete the relevant data within 7 days.
10. Complaints to the supervisory authority
If you think we've mishandled your personal data, please email us first - we will try to resolve it. If you're not satisfied, you have the right to lodge a complaint with your national data-protection authority. Because this site is operated from Portugal, the lead authority is:
Comissão Nacional de Proteção de Dados (CNPD)Av. D. Carlos I, 134, 1º
1200-651 Lisboa, Portugal
Phone: +351 21 392 84 00
Email: geral@cnpd.pt
Web: cnpd.pt
If you are in another EU country, you can also complain to your home authority; the CNPD will cooperate with them via the one-stop-shop mechanism.
11. Trademark notice
"Dead by Daylight" is a registered trademark of Behaviour Interactive Inc. All perk names, killer names, survivor names, and chapter names referenced on this site are the property of Behaviour Interactive. We use them under fair use for the purpose of commentary, criticism, and fan reference. This site is unofficial, unaffiliated, and not endorsed by Behaviour Interactive.
12. Copyright & DMCA
Perk icons and character portraits on this site are sourced from the official Dead by Daylight Wiki (Fandom / wiki.gg) under fair use for commentary and educational reference. If you are a rights holder and would like an asset removed:
- Email hello@dbdperkcombos.com
- Include the asset URL on our site, the source URL, and a description of the issue
- We respond within 48 hours
We do not publish user-generated content, so the DMCA counter-notice process (17 U.S.C. §512(g)) does not currently apply. If we ever add user content, we'll publish a full DMCA agent designation here.
13. Changes to this policy
We update this policy when we add or remove a vendor, change our retention periods, or change our lawful basis. The "Last updated" date at the top reflects the current version. Material changes will be announced via a banner on the homepage for 30 days.
14. Contact
KevinEmail: hello@dbdperkcombos.com
Postal address: available on request
Response time: within 7 days for general enquiries, 30 days for formal GDPR requests
This policy is provided in good faith and reviewed periodically. It is not legal advice. If you have a specific legal question, please consult a Portuguese lawyer (advogado) registered with the Ordem dos Advogados.