Dafpuno: Terms, privacy and content rights
Contents
1. Service and eligibility
Dafpuno provides original Shorts submission and moderation, partner tasks when enabled, community website reviews, CS2 server listings and a reward catalog. It is independent of Valve, Steam, Google and listed websites. Public reward participation is intended for adults aged 18 or over and only where lawful. Automatic skin delivery is currently unavailable. Each campaign's published requirements, deadlines, budget and specific reward conditions also apply.
2. Accounts and prohibited farming
Use one account per person, one verified Steam account and one verified email. Steam controls your display name; it cannot be edited on Dafpuno. Keep your credentials secure. Do not share, sell or rent accounts, impersonate another person, automate earning, use bots, fake partner events, create multiple accounts, evade suspensions, exploit errors or manipulate votes/reviews. A shared device or address is a risk signal, not conclusive proof of fraud. Affected users can request a human review through Support or email. Dafpuno may temporarily restrict disputed earnings while investigating, explain decisions and correct errors. Valid earned rewards are not automatically forfeited merely because an allegation is made.
3. Third-party websites, scams and phishing
Listings, user ratings, screenshots, links and server status are informational; inclusion, moderation, high ratings or a positive review do not certify safety, solvency, legality or ownership. Third parties control their products, transactions and policies. Check the exact domain, recipient and Steam trade contents yourself. Never give your Steam password, recovery codes, session cookies or API keys to other users or supposed support agents. Support does not require trading to a personal account to unlock a prize. Report impersonation and suspicious links immediately.
Dafpuno does not act as escrow, insure external transactions or guarantee refunds for third-party scams. To the extent permitted by mandatory law, Dafpuno is not responsible for independent third-party acts, phishing, external trades, server conduct, changes in skin prices or third-party service outages. This does not exclude responsibility for Dafpuno's own legally actionable conduct, failure to perform its obligations, or duties to respond to unlawful content notices.
4. Reviews and server listings
Submit genuine first-hand experiences and factual descriptions. Do not submit fake evidence, paid undisclosed endorsements, defamation, harassment, unlawful gambling promotion, malicious software, private personal details or another person's secrets. Screenshots may contain order numbers, email addresses and account identifiers: redact them before submission. Evidence assists moderation and does not establish that a website is verified or safe. Publication is subject to review; challenged content may be hidden during investigation. Do not assume screenshots remain confidential once attached to published content. Owners may contest a listing or review with evidence. Sponsored listings and affiliate links must be identified when enabled; payment must not secretly alter review scores.
5. Original Shorts and rights warranties
Upload only your own recordings and editing, with permission for all music, voices, likenesses, graphics and other elements. Videos made from popular creators' or streamers' content are prohibited even after cropping, subtitling or re-editing. Do not upload previously published videos, including copies on YouTube or TikTok. Keep original project files and rights evidence. Do not upload unlawful, exploitative, hateful or threatening material, personal documents, sensitive personal data or material involving minors without a lawful basis and required permissions. Technical checks and publication searches do not prove ownership or guarantee uniqueness.
6. Submission, moderation and reward acceptance
Currently Shorts must be 30–180 seconds, vertical 1080×1920, MP4 or WebM, within the upload limit displayed in the form. One new work per seven days; corrections belong to its original submission. Moderators assess the campaign criteria and can request corrections, reject or propose points within its range. Better quality may earn more points; uploading alone creates no right to a reward. Approval requires a recorded review, but cannot guarantee detection of every prior publication. You may decline a reward offer. Points are credited only after the applicable offer and content terms are accepted. Disputes can be raised through Support; no promise of acceptance or income is made.
7. Storage and removal of videos
Unreviewed submissions expire after 14 days from their original submission, are automatically rejected and generate an in-account notification. Rejected, declined and expired submissions are queued for file deletion. Actual removal depends on the cleanup worker; it is not necessarily instantaneous. Accepted originals remain in private storage and the owner can view, download and delete them. The current system does not automatically delete accepted originals after 14 days. Submission history, moderation decisions, consent records and reward entries can remain after file deletion. Keep your own backup. Backup copies and exported downloads are separate and require a documented removal process; deleting a server file does not instantly erase published copies.
8. Review permission and optional external searches
Uploading grants only the permission needed to privately store, technically process, extract frames and let authorized staff review that submission. Public commercial use requires separate offer acceptance. The current upload form also requires authorization to send selected frames to Google Vision if connected. That external service is currently not connected. Permission to review a submission is separate from permission for external disclosure. A required checkbox is not blanket GDPR consent.
9. Commercial rights to accepted works
The existing offer license (content-shorts-v3) is non-exclusive: after its separate acceptance, Dafpuno's operator may publish the accepted work on its YouTube channel, make excerpts, adapt the format and monetize those publications. The author retains copyright. This permission does not transfer ownership of the author's personal data, authorize arbitrary profiling or grant resale rights. Resale, sublicensing beyond necessary platform publication, other distribution channels, advertising use of a person's likeness, exclusivity, AI training and additional uses require a separate clear agreement specifying the work, rights, duration, territory and consideration. New terms do not retroactively expand previous grants. Statutory privacy and personality rights remain applicable even where copyright permission exists.
10. Points, rewards and partner tasks
Points are internal reward units, not a bank balance, investment or guaranteed cash equivalent. Catalog availability, account eligibility, reservation limits, trade restrictions and campaign conditions apply. Do not buy or sell accounts/points or expect guaranteed skin values. External task rewards depend on the partner's valid confirmation and stated reversal window; clicks and self-reported completion alone are insufficient. Reversals of confirmed fraudulent or invalid events require an explained, reviewable decision. If a promised reward cannot be fulfilled, the operator must handle the reservation and remedy under the stated conditions and mandatory law. Taxes and local eligibility may apply. No paid random skin gambling is authorized by these terms.
11. Complaints, rights notices and appeals
Use the in-account Support page or [email protected] for scams, moderation appeals, account access issues, data requests and copyright complaints. Describe the relevant URL/submission, dates, your grounds and available evidence; do not send passwords. Rights holders should identify the protected work, contested material, authority to act and a good-faith explanation. Staff may preserve limited evidence, restrict access, contact the affected user and allow a response. Identity checks must be proportionate. Urgent safety or unlawful-content reports are prioritized. A support complaint does not prevent contacting a regulator, lawyer, court or law enforcement.
12. Service availability and lawful limitation of liability
The service may contain errors or be interrupted. Maintain copies of your uploads. Reasonable maintenance, investigations and emergency restrictions may be necessary. Any disclaimer applies only as far as law permits. Nothing excludes non-excludable consumer remedies, GDPR rights or compensation, liability for intentional wrongdoing, gross negligence where protected by law, fraud, or death/personal injury where exclusion is unlawful. There is no blanket waiver of legal action, mandatory unfair arbitration, or automatic obligation to indemnify every loss. Each party remains responsible for its own unlawful conduct to the extent established by law.
13. Changes, suspension and disputes
Material changes must be notified in advance when required, with a dated version and renewed acceptance where necessary. No unilateral retroactive expansion of licenses or unexplained cancellation of valid balances. Suspension should be proportionate to the issue, with reasons and an appeal route, unless disclosure would prejudice a lawful investigation. Mandatory protections in the user's country remain applicable; a contract cannot remove them merely by choosing foreign law. English and Russian texts are provided for accessibility; discrepancies do not override mandatory rights.
14. Privacy: data controller and contact
The controller is the actual operator who decides the purposes and means of processing. Privacy requests: [email protected] or Support. Where GDPR applies, its mandatory rights and duties remain applicable.
15. Data collected and visibility
Account UUID, verified Steam ID, Steam display name, normalized email and verification state, trade URL, session token hashes and expiry, browser identifier hashes and account associations, rate-limit/network identifiers, account controls, permissions, balances, reward orders, partner events when connected, submitted videos, frames, file hashes, metadata, titles, consent versions, decisions, audit trails, support tickets, website/server submissions and review evidence may be processed. Network infrastructure handles IP addresses to deliver requests and protect the service. No Steam password is collected by Dafpuno. Do not provide sensitive categories of personal data. Nicknames and approved community contributions may be public; email, trade URL and private videos are not automatically public. Authorized staff have access according to their duties.
16. Purposes and legal bases
Account operation, requested submissions, review, reward delivery and support: performance of the relevant service agreement where objectively necessary (GDPR Article 6(1)(b)). Security, fraud prevention, duplicate detection and dispute evidence: legitimate interests (6(1)(f)), subject to necessity, proportionality, balancing and the right to object. Legally required accounting or authority responses: legal obligation (6(1)(c)) where such an obligation actually applies. Optional marketing, non-essential tracking or optional external search: specific informed consent (6(1)(a)) where appropriate; do not bundle it with required service use. Privacy acknowledgement is not blanket consent. A new incompatible use needs a lawful basis and fresh information before it starts.
17. Commercial use is not unlimited use of personal data
The operator may process necessary data to run and protect Dafpuno and use accepted works only under their agreed license. It may produce genuinely anonymous aggregate statistics. It does not receive a right to sell account databases, use emails for unrelated personal projects, disclose private trade links, perform unrestricted surveillance or reuse identifiable videos for AI training merely because a user signs up. Commercial marketing and additional identifiable uses need separate lawful justification and any required opt-in. Withdrawing consent does not affect lawful processing already performed and does not require deleting data that must lawfully be retained on a different basis.
18. Recipients, service providers and transfers
Relevant recipients can include authorized staff, contracted hosting/storage and backup providers, Google/Gmail for transactional email, Valve/Steam for authentication and trades when enabled, future task partners, and competent authorities where law requires. Google Vision and Cloudflare Turnstile must be disclosed before activation and are not assumed enabled. Publication on YouTube under an accepted license involves disclosure to Google and viewers. Transfers outside the EEA need a valid mechanism, such as an applicable adequacy decision or standard contractual clauses with necessary safeguards. A checkbox alone does not legitimize all international transfers.
19. Retention and security
Sessions expire after one day, Steam login state after ten minutes, email codes after ten minutes, and the browser cookie after up to one year. Expiry of an identifier is not proof that historical database rows have been physically purged. Video retention follows section 7. Account, ledger, support, consent, anti-fraud and backup records do not yet have a complete implemented retention/deletion schedule. Access controls, private media routes, hashed session tokens and verification codes reduce risk but cannot guarantee absolute security. Incident procedures must assess and perform any GDPR authority notification within the applicable 72-hour period and user notification when legally required.
20. Your rights and request procedure
Where applicable, request access, a copy, rectification, erasure, restriction, portability of eligible data, information about recipients and transfers, objection to legitimate-interest processing and withdrawal of consent. Contact the privacy address; no account login is required for an email request. We may request proportionate identity evidence and explain any lawful exception, such as necessary claims records. Response is normally due within one month under GDPR; a justified extension of up to two further months requires notice within the first month. No routine fee applies. You may complain to the competent data protection authority, including the authority where you live, work or the issue arose. In Latvia this is Datu valsts inspekcija. Copyright licenses do not cancel these rights.
21. Automated checks and human review
Rate limits, device association checks, hashes and technical validation can flag activity or temporarily restrict earning. A device match is not proof that two people are the same. Ask Support for human review, present your explanation and contest errors. No claim is made that a one-email rule eliminates bots or multiple accounts. Before introducing solely automated decisions with legal or similarly significant effects, the operator must assess GDPR Article 22 and disclose the relevant logic, consequences and safeguards.
22. Cookies and external integrations
Essential first-party cookies support the session (cq_session), Steam login state (cq_steam_state) and anti-farming browser identifier (cq_device). Local browser storage holds language and interface preferences. Campaign statistics: the site counts page visits, tool use, completed Steam sign-ins and accepted clips together with the campaign labels of the link that brought the visit (utm_source, utm_medium, utm_campaign, utm_content). Nothing is stored in the browser for this, and these records contain no account, Steam ID, IP address, email or trade URL. Cloudflare Turnstile checks the sign-in page for bots; Cloudflare processes the technical data of that check. The necessity and proportionality of anti-fraud storage must be assessed under local cookie rules; it is not automatically exempt because it is called security. Non-essential analytics, advertising and third-party tracking must remain off until an appropriate consent mechanism is available. Refusal must not be bypassed. Partner tracking and Turnstile need updated disclosures when connected.
23. Legal references
These terms refer to GDPR Regulation (EU) 2016/679 and Directive 93/13/EEC on unfair contract terms. Mandatory rights prevail over conflicting contractual terms.
Official sources: https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng and https://commission.europa.eu/law/law-topic/consumer-protection-law/consumer-contract-law/unfair-contract-terms-directive_en .
24. Account deletion and return without repeated rewards
Delete your account through Profile → Delete account. Type DELETE after a Steam sign-in within the last 30 minutes. Owners must transfer ownership first. If login is unavailable, contact Support by email. Deletion revokes sessions; clears profile email, visible Steam ID, nickname, trade URL and verification records; removes your support correspondence and reviews; clears and hides your listings; and queues all uploaded originals and frames for removal, including accepted clips. Content cannot be restored. Open reward reservations are cancelled and refunded; pending moderation offers are cancelled without points. Backups, downloads and published copies require separate handling through Support. Immediate erasure everywhere is not guaranteed.
For 365 days after deletion, a keyed pseudonymous Steam fingerprint links to the retained internal ID. This remains personal data. Reward ledger entries, cooldown dates, minimal submission/order/consent history, content hashes and security restrictions remain for reward integrity and disputes; unnecessary free text is cleared. Login with the same verified Steam within this window reopens the same internal account with its previous balance and limits. It does not repeat rewards or restore staff privileges, email, reviews or deleted videos. Verify email again. Blocking and anti-farming holds cannot be bypassed. After 365 days the closure link expires and is purged by the cleanup worker; automatic balance recovery ends. Some service records remain as described in section 19; contact Support for their retention status or a further erasure request. A different Steam account is not reliably identifiable as the same person.
Users may object or request further erasure by email/Support. Any refusal needs an individual lawful reason. Deletion does not waive these rights or permit unrelated data use.
## 25. Referrals and Steam nickname campaigns Campaigns are optional and may be closed. Their current domain, points, budgets and account-age requirements appear in Profile. No reward is paid merely for signing up, referring yourself or adding a nickname. A referral is bound during the invited account's first 24 hours and cannot be reassigned. Both accounts must satisfy Steam, verified-email, age and anti-fraud requirements. A one-time referral reward requires actually settled partner revenue, the campaign's minimum revenue, percentage cap and available budget. Unpaid, duplicated, refunded or suspicious conversions do not qualify; errors and disputes can be reviewed by Support. Current payment verification is manual; an offerwall integration has not yet been activated.
Nickname participation starts on the next UTC day after enrollment. The exact published domain is checked against the Steam nickname five times daily in separate randomized time windows. Seven complete days with all five successful checks are required; sampling does not prove continuous display between checks. A confirmed missing domain restarts progress from the following day. Provider outages or missed windows do not remove existing points and can extend the verification period. A payout also requires an accepted submission or settled partner activity within the preceding seven days, available campaign budget and remaining weekly reward allowance. Keeping the nickname alone creates no unlimited earning entitlement. Domain and reward terms are locked once participants enroll; disabling a campaign pauses new checks and payouts.
Check records contain timings and results, not a history of raw Steam nicknames. Completed-cycle checks older than 90 days are cleaned by the worker; an unfinished cycle may retain records until completion or account deletion. Referral attribution, settled-payment amounts, paid-week counters and reward ledger sources remain among the limited integrity records described in sections 19 and 24, so deletion and return cannot claim the same reward again. Account deletion removes detailed nickname checks. These records are not permission for unrelated personal-data use.