Privacy notice
This notice explains how the LR Series & Defender Archive at 48to16.com ("we", "us") handles personal data. We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can reach us about anything in this notice through our contact form.
What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Contact form: name, email, message | To read and reply to your enquiry | Legitimate interests |
| Forum account: email, display name, password (stored only as a one-way hash), optional profile details | To provide your account, verify your email, and send password resets and reply notifications you opt into | Contract (our terms of use) |
| Forum posts, reports and moderation records | To run the forum and keep it safe | Contract and legitimate interests |
| Page views: page, referrer, approximate country and city, device and browser type | To understand which pages are useful | Legitimate interests; analytics cookies only with consent |
| IP address (sign-in and sign-up attempts) | Rate limiting to stop abuse and password guessing | Legitimate interests |
We do not sell personal data, use it for advertising, or make automated decisions about you. We do not store full IP addresses against page views. Without analytics consent, visits are counted using a short-lived anonymous identifier that changes every day.
Who we share it with
We use a small number of processors who handle data only on our instructions:
- Vercel Inc. for website hosting and privacy-friendly, cookieless performance analytics.
- Neon (Databricks) for our database.
- Resend for sending account and notification emails.
Some processors are based in the United States. Transfers are protected by the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Contact messages: until the enquiry is dealt with, and no longer than 2 years.
- Forum accounts: until you delete your account. Posts you choose to keep remain under "Deleted member".
- Page view records: up to 26 months.
- Sign-in attempt records and email tokens: up to 7 days.
Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- object to or restrict processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent for analytics cookies at any time through Cookie settings in the footer.
Forum members can download their data and delete their account directly from account settings. For anything else, use the contact form and we will respond within one month.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Forum accounts are for people aged 16 and over.
Security
Passwords are hashed with scrypt and never stored in readable form. Sessions use secure, HTTP-only cookies, all traffic is encrypted with HTTPS, and administrative areas require separate credentials.
Last updated 21 October 2026