Privacy Policy
Last updated 18 September 2026
1. Who this covers
This policy covers thecryptpve.com and The Crypt DayZ game servers. The Crypt is a community DayZ project run by its team of volunteer staff. It is not affiliated with Bohemia Interactive, Valve, or Discord.
It does not cover our Discord server, which is subject to Discord's own privacy policy, or Steam, which is subject to Valve's.
2. What we collect
Everything below is collected because you connected to our game server or signed in to this website. Nothing is bought from third parties.
Website account
Signing in uses Steam OpenID. Steam confirms to us that you are who you say you are and hands us two things: your SteamID64 (the 17-digit number identifying your Steam account) and your Steam display name. We store those, plus which permission role you hold if you are a member of staff, and for staff accounts the time you last used the panel.
In-game activity logs
Our server-side mod and admin tools record actions taken in game. Each entry can include:
| Field | Example |
|---|---|
| SteamID64 | the account that performed the action |
| Character name | your in-game name at the time |
| Action type | trade, vehicle event, inventory move, garage, banking |
| Details | item names, quantities, amounts, prices |
| Map position | in-game coordinates, not a real-world location |
| Timestamp and server | when it happened and on which server |
Game server logs
DayZ itself writes connection, death and chat logs on the server. These are produced by the game, not by us, and are kept on the server for moderation and crash investigation.
Technical data
Connecting to any online service exposes your IP address. Ours is seen by our hosting provider, by the DayZ server as part of the connection, and by Cloudflare, which sits in front of this website to filter attacks. The website's own error logs may record an IP address and the page that failed.
3. What we never collect
- Your Steam password. Steam OpenID never shows it to us. If a site claiming to be The Crypt asks for it, it is not us.
- Payment details. There is no checkout on this website. The store page is a catalogue; prices shown there are in-game currency.
- Your real name, email address, phone number or postal address. We never ask for them and have nowhere to put them.
- Voice chat. We do not record in-game or Discord voice.
Donations are handled entirely outside this website, through Discord and the payment provider you choose. That provider tells us who paid and how much. We never see your card or bank details, and we do not store donation records on this site.
4. Why we collect it
- To run the server. Persistent bases, garages, banking and trading only work if actions are recorded.
- To investigate. When a player reports a theft, a duplication bug or a griefing incident, the logs are the only way to establish what actually happened. This is the main reason they exist.
- To enforce the rules. Cheating, exploiting and rule-breaking are identified from the same records.
- To restore what was lost. If a bug eats your gear, the log is how staff work out what to give back.
- To keep the site up. Error logs and Cloudflare's filtering exist to stop attacks and fix faults.
Under the GDPR the lawful basis for all of the above is legitimate interests: running a game server that players can trust. We do not use your data for advertising, profiling or automated decisions that affect you outside the game.
6. How long we keep it
| Data | Kept for |
|---|---|
| In-game activity logs | 30 days, then deleted automatically by a nightly job. Staff can set this to 7, 14 or 30 days; the figure shown here is the setting currently in force. |
| Website account (SteamID, name, role) | Until you ask us to delete it, or until the server shuts down |
| DayZ server logs | Kept on the server for moderation; cleared periodically |
| Database backups | Backups taken before the deletion date may still contain the data until they are rotated out |
| Ban records | Kept while the ban stands, so it can be enforced and appealed |
8. Your rights
If you are in the UK or EU, the GDPR gives you the right to:
- See what we hold about you
- Correct anything that is wrong
- Delete your account and the data tied to it
- Object to our processing, or ask us to restrict it
- Receive a copy in a portable format
- Complain to your national data protection authority
We honour these requests regardless of where you live. Open a ticket in our Discord and we will respond as quickly as we reasonably can, and in any case within one month.
Deleting your data also deletes the evidence. If your base is raided through a bug two weeks later, there will be no record for staff to work from and nothing can be restored. We may also keep a minimal ban record after deletion, since a ban that can be erased on request is not a ban.
9. Security
The website is served over HTTPS. The logging API is not reachable from the internet at all, only from the server itself. Session cookies are HttpOnly. Access to the admin panel is restricted by role, and log access is restricted to staff.
That said, no system is perfectly secure, and we will not pretend otherwise. If you find a security flaw, please report it to us in Discord privately rather than publicly, and we will fix it and credit you if you want the credit.
10. Age
DayZ is rated PEGI 18 / ESRB Mature. This site is not directed at children, and we do not knowingly hold data on anyone under 13. If you believe a child's data is on our servers, tell us and we will remove it.
11. Changes
We update this page when what we actually do changes. The date at the top always reflects the last revision. Significant changes are announced in Discord.
12. Contact
All privacy questions, data requests and complaints go through a ticket in our Discord, which is where the staff who can action them are.
Open a ticket on Discord