LEGAL

Privacy Policy

1. Data controller

The data controller within the meaning of the GDPR is the person named in the imprint.

2. Accounts & registration

New accounts are created exclusively by the administrator; there is no public self-registration. We store a username, email address and a hashed password (passwords are never stored in plain text). The legal basis is the performance of the user relationship (Art. 6(1)(b) GDPR).

3. Forum and plugin content

Forum posts, uploaded plugins, changelogs and ratings are publicly visible under your username and are stored until you or the administrator deletes them. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in running the community (Art. 6(1)(f) GDPR).

4. Downloads & server logs

When you download a plugin, your IP address is not stored in plain text; it is processed into a one-way hash using a secret key (HMAC-SHA256) to build download statistics and detect abuse. The legal basis is our legitimate interest in a working, abuse-resistant infrastructure (Art. 6(1)(f) GDPR). The web server additionally processes technically necessary access data (e.g. IP address, timestamp, requested URL) in log files; scope and retention depend on the hosting provider's configuration.

5. Contact and application form

When you use the contact or application form, we store the details you provide (name, email address, optionally your Discord username, your message, and a hashed IP address for abuse detection) in order to process your request and reply to you. The legal basis is Art. 6(1)(b) and/or (f) GDPR (processing your request, and our legitimate interest in a working, abuse-resistant infrastructure). Using either form is voluntary and requires your explicit consent via checkbox. The data is only visible to the administrator in the internal admin area and is not shared with third parties.

6. Cookies

This website only uses strictly necessary cookies: a session cookie for login, and a cookie storing your language preference. Both are exempt from consent requirements under applicable EU/German ePrivacy rules, which is why no cookie banner is shown. No analytics, marketing or tracking cookies are used, and no external fonts or third-party scripts are loaded.

7. Disclosure to third parties

Data is not sold or passed on to advertisers. It may only be disclosed to public authorities where we are legally obliged to do so, or to a hosting provider acting strictly as our data processor under an Art. 28 GDPR agreement.

8. Retention period

Account and content data is stored for as long as the account exists or the content is not deleted. Download statistics are retained in pseudonymised form. Contact and application requests are stored until they have been processed, or until you request deletion.

9. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Contact the address given in the imprint to exercise these rights. You also have the right to lodge a complaint with the competent data protection supervisory authority.