THE STEAM DOSSIER - CORRECTION AND REMOVAL POLICY Version 1 - effective 16 October 2026 https://phishdestroy.io/steam_dossier/dispute/ 1. SCOPE 1.1 This policy governs every statement published in The Steam Dossier at https://phishdestroy.io/steam_dossier/ and in its editions, translations, Markdown mirrors, PDF and JSON exports and machine-readable files (together, "the dossier"). 1.2 This policy is a unilateral public commitment by the publisher. It does not limit any right that any person has under applicable law. Where the law gives more, the law applies. 2. DECISIONS OF RECOGNISED AUTHORITIES - 72 HOURS 2.1 A "recognised authority" is: (a) any court of a member state of the United Nations or of the European Union, and the European Court of Human Rights, excluding courts of a jurisdiction subject to comprehensive sanctions under a programme administered by the U.S. Office of Foreign Assets Control; (b) any data protection supervisory authority, and the European Data Protection Board; (c) any financial or consumer-protection regulator with jurisdiction over the conduct described in the statement concerned; (d) ICANN Contractual Compliance. 2.2 A decision qualifies if it orders the removal or alteration of a statement in the dossier, or determines that a statement in the dossier is false. It qualifies whether or not the publisher was a party to the proceedings, and whether it is interim or final. 2.3 Within 72 hours of receipt of a qualifying decision through the dispute procedure, the statement is removed or corrected as the decision requires, in every edition the publisher controls. 2.4 Authenticity is checked with the issuing body where necessary. If authenticity cannot be confirmed within 72 hours of receipt, the statement is suspended pending confirmation. If the decision proves to be forged or altered, the statement may be restored and section 8 applies. 2.5 Compliance is unconditional. The publisher does not ask for an undertaking, a payment, a waiver, the withdrawal of any complaint or confidentiality in exchange for complying with a decision. 2.6 Compliance does not waive any right of appeal. If the publisher appeals, the statement stays removed or corrected until the decision is set aside. If it is set aside, the statement may be restored, and both decisions are recorded. 3. EVIDENCE - 14 DAYS 3.1 Anyone may submit evidence that a statement is wrong, including legal counsel acting for a client. Evidence is assessed on its merits. The identity or profession of the sender neither adds weight nor subtracts it. 3.2 A written ruling is issued within 14 days of receipt. Either: (a) the statement is corrected or removed, and an erratum states what was wrong and acknowledges the error in plain words; or (b) the statement is upheld, and the reasons are recorded. 3.3 A ruling under 3.2(b) does not prevent anyone from obtaining a decision under section 2. 4. RIGHT OF REPLY - 7 DAYS 4.1 Any person or organisation named or identifiable in a statement may submit a reply. No evidence and no decision is required. 4.2 The reply is published next to the statement within 7 days of receipt, unedited, except to remove content that is itself unlawful or that discloses personal data of third parties. Any such removal is marked. 4.3 A reply should be proportionate in length to the statement concerned. A reply of up to 800 words is always accepted. 5. PERSONAL DATA - ONE MONTH 5.1 Requests under Articles 15 to 22 of the General Data Protection Regulation, or under equivalent law, are answered within one month of receipt, extendable only as Article 12(3) GDPR permits. 5.2 Where personal data is processed for journalistic purposes, the exemptions available under Article 85 GDPR and national law are assessed case by case, and the outcome is explained in writing. 6. CORRESPONDENCE 6.1 Letters, cease-and-desist letters, demands and notices are not decisions. They are logged and answered in writing within 14 days, on the evidence they contain, under section 3. 6.2 The publisher does not sign cease-and-desist undertakings, non-disclosure agreements or settlement agreements concerning the dossier. What an undertaking would promise, a court can order, and section 2 applies to any such order. 6.3 A confidentiality label on unsolicited correspondence creates no obligation. Where a rule of law restricts publication, the submitter should cite it, and the publisher will apply it. 6.4 Copyright notices directed at statements of fact receive a counter-notice, because facts are not protected by copyright. Notices concerning reproduced copyright material are handled under applicable law. 7. RECORD 7.1 Every submission and every resulting change is recorded in a public, append-only corrections log at https://phishdestroy.io/steam_dossier/corrections Each entry contains the SHA-256 of the entry before it. 7.2 How much of a submission is published follows the submitter's choice: in full; anonymised (names and contact details of individuals removed); or record only (identifier, dates, outcome and file hashes). Changes to the dossier are always recorded. Where a decision restricts even that, the record states that a restricted decision was applied, and nothing more. 7.3 Deadlines are tracked automatically. A missed deadline is recorded in the log automatically and is not removed. 7.4 The publisher enters into no private resolutions concerning the dossier. 8. ABUSE 8.1 Submitting a forged or altered decision, or evidence known to be false, may be a criminal offence. Such submissions are referred to the issuing body and to the competent authorities, together with the SHA-256 recorded on receipt. 9. CHANGES TO THIS POLICY 9.1 This policy is signed with OpenPGP key 129F C7F3 9C40 C69D 2EF3 C329 BFCF 9E8D D295 EE01 and its SHA-256 is recorded in the genesis entry of the corrections log. 9.2 A changed policy is a new version, signed and recorded in the log. No change applies to a submission received before the change. 10. SERVICE 10.1 The dispute procedure is a faster channel, not a substitute for formal service where the law requires it. A decision that has already been issued may be filed through it, and is acted on without waiting for service. Contact: legal@phishdestroy.io - personal data: privacy@phishdestroy.io