Privacy Policy

Controller

The controller for data processing on this website is full legal name or company, street, number, postal code, city, contact email address.

Server log files

When you open this site, the hosting provider automatically records access data: the page requested, date and time, the amount of data transferred, browser type and operating system, the referring URL and the IP address.

The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in operating the site securely and without disruption.

state how long the hosting provider retains log files

Cookies and sessions

Signing in requires technically necessary cookies: a session identifier and a token protecting against cross-site request forgery. They carry no advertising or tracking data and are not shared with third parties.

Without these cookies signing in is technically impossible. The legal basis is § 25 (2) no. 2 TDDDG.

Your account

Registration stores your display name, handle, email address and a password hash. Your password itself is never stored in plain text.

Your handle and display name become publicly visible as soon as you publish content. Your email address does not.

The legal basis is Art. 6 (1) (b) GDPR — performance of the user relationship.

Content you create

Saved maps and assets are linked to your account and private by default. They only become public when you explicitly publish them.

Signing in with Discord or Patreon

write this section once social sign-in is live — it must state which data each provider transmits and on what legal basis

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority.

A message to contact email address is enough for any of these.

Hosting

name the hosting provider and state whether a data processing agreement is in place