Privacy Policy

Privacy Policy

Last updated: November 2026

1. Data Controller

DUMMY_FIRMA
DUMMY_STRASSE
DUMMY_PLZ_ORT
DUMMY_LAND
Email: DUMMY_EMAIL
Phone: DUMMY_TELEFON

2. Overview

We process personal data only to the extent necessary to provide our game server hosting services and related features.

3. Legal Basis

Processing is based on:

  • Art. 6(1)(a) GDPR – Consent (e.g. analytics cookies, news by email)
  • Art. 6(1)(b) GDPR – Contract performance (e.g. server provisioning, billing)
  • Art. 6(1)(f) GDPR – Legitimate interest (e.g. IT security, fraud prevention, offers to existing customers by email)

4. Data Collected

4.1 Registration & Account

We collect: email address, username, password (stored encrypted). Optionally: first name, last name, phone number.

4.2 Game Server Usage

We process: server IP addresses, port numbers, game configurations, backup data, console output, FTP credentials (encrypted).

4.3 Payment Data

Payments are processed via Stripe (Stripe Inc., USA). We do not store credit card details. Stripe processes your data per their Privacy Policy. We only store transaction IDs and amounts.

4.4 Support Tickets

Messages, uploaded files (screenshots etc.), and related metadata are stored when using our support system.

4.5 Server Logs

Each website access automatically collects: IP address, date/time, requested page, browser type, operating system. This data is required for IT security and troubleshooting.

4.6 Free Trial

When you start a free trial, we store the IP address you order it from, for IPv6 only the /64 network. This keeps the same connection from trying more than once (Art. 6(1)(f) GDPR, legitimate interest in preventing abuse). We delete it after 30 days. We send the reminders 24 and 3 hours before the trial ends to perform the trial contract (Art. 6(1)(b) GDPR).

4.7 News and Offers by Email

If you tick “News about new games and offers by email” when you sign up, when you sign in with Google or in your profile, we first send you an email with a confirmation link. You only get such emails once you confirm it (double opt-in, Art. 6(1)(a) GDPR). To prove your consent (Art. 7(1) GDPR) we store when you requested and confirmed it, where you gave it and which version of the consent text you saw.

If you have ordered a server from us, we may also send you occasional offers on our own similar services to the email address of your account without consent (§ 7(3) UWG, § 174(4) TKG 2021; Art. 6(1)(f) GDPR, our legitimate interest in direct marketing). We tell you about this when you order.

You can withdraw your consent at any time (Art. 7(3) GDPR) and object to the use of your email address for advertising at any time (Art. 21(2) GDPR), at no cost other than the transmission costs at basic rates: with the unsubscribe link in every promotional email, with your email program’s unsubscribe function, in your profile under “News and offers by email” and with every order. Emails about your account and your servers keep coming.

We send these emails from our own server, without a newsletter provider, and we do not track opens or clicks.

5. Cookies

5.1 Necessary Cookies

We use technically necessary cookies for: session management (login), language selection, CSRF protection. These cookies are essential and cannot be disabled.

5.2 Analytics Cookies (optional)

With your consent, we use Matomo, a self-hosted web analytics solution. Your data never leaves our servers and is not shared with third parties. You can revoke consent anytime via the cookie banner.

6. Data Sharing

We share personal data only with:

  • Stripe Inc. – Payment processing (USA, EU-US Data Privacy Framework)
Your game servers run at hosting providers acting as our processors (Art. 28 GDPR), in the country you choose when ordering: currently Germany, Finland, the United Kingdom, the USA, Australia or Japan. Backups are stored in Germany. For locations outside the EU, transfers rely on an adequacy decision of the European Commission or on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 45, 46 GDPR). No further sharing of personal data with third parties takes place.

7. Data Retention

  • Account data: Until account deletion
  • Billing data: 10 years (legal requirement)
  • Server logs: 90 days
  • Support tickets: 2 years after closure
  • Backups: within the backup allowance (Terms, section 6)
  • Backups of a trial that was not kept: 14 days after the trial ends
  • IP address of a trial: 30 days
  • Consent to and objection against promotional emails: until account deletion

8. Your Rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR), against advertising at any time and without giving reasons
  • Withdrawal of consent (Art. 7(3) GDPR) with effect for the future
  • Lodge a complaint with a supervisory authority
Contact us at: DUMMY_EMAIL

9. Security

We implement: SSL/TLS encryption, encrypted password storage, AES-encrypted credentials, regular security updates, DDoS protection, firewall systems.

10. Changes

We reserve the right to update this policy. The current version is always available on this page.