# Privacy Policy & Data Protection Architecture | F76.WORLD

F76.WORLD operates under a strict privacy-first, zero-knowledge, and local-processing engineering architecture.

## 1. Local Processing Architecture
- All BA2 archive parsing, texture decompression, and NIF mesh auditing occurs entirely client-side using WebAssembly and modern browser memory buffers.
- Your proprietary game assets never leave your workstation. We do not upload, inspect, or store your archive files.
- Offline Capability: The toolkit can execute in an offline browser sandbox with zero network requests once assets are cached.

## 2. Identity, Cryptography & Decentralization
- Authentication is handled via decentralized Nostr relay cryptography (npub/nsec). We never store passwords or emails.
- No third-party behavioral analytics, fingerprinting scripts, or advertising pixels are deployed.
- Session preferences (such as language selection and theme configuration) are stored exclusively in your browser's local storage (`localStorage`).

## 3. GDPR Sub-processors & Data Processing Agreement
- **Cloudflare, Inc.** - Network transit, CDN edge caching, DDoS mitigation, and Cloudflare Turnstile bot verification.
- For complete technical specifications, data flows, and residency details, see our dedicated [Sub-processor Directory](https://f76.world/subprocessors/).

## 4. Zero Remote Asset Storage
- We do not maintain server-side databases of your game assets, extracted textures, or archive records.
- Inquiries submitted through the contact form are dispatched directly to ops@f76.world for communication without marketing tracking.

## 5. Community Privacy Rights & Inquiries
- Users have full sovereignty over their client environment and can clear local storage or cache at any time.
- For questions regarding our client-side toolkit architecture or data handling practices, contact our operations desk at ops@f76.world.
