LEGAL
Privacy Policy
This template accurately describes the technical functions of this website under Art. 13 GDPR but is not a substitute for individual legal advice. In particular, add details about your hosting provider and keep your contact details in the imprint up to date, since it is referenced here.
1. Data controller
The data controller within the meaning of the GDPR is the person named in the imprint.
2. Accounts & registration
New accounts are created exclusively by the administrator; there is no public self-registration. We store a username, email address and a hashed password (passwords are never stored in plain text). The legal basis is the performance of the user relationship (Art. 6(1)(b) GDPR).
3. Forum and plugin content
Forum posts, uploaded plugins, changelogs and ratings are publicly visible under your username and are stored until you or the administrator deletes them. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in running the community (Art. 6(1)(f) GDPR).
4. Downloads & server logs
When you download a plugin, your IP address is not stored in plain text; it is processed into a one-way hash using a secret key (HMAC-SHA256) to build download statistics and detect abuse. The legal basis is our legitimate interest in a working, abuse-resistant infrastructure (Art. 6(1)(f) GDPR). The web server additionally processes technically necessary access data (e.g. IP address, timestamp, requested URL) in log files; scope and retention depend on the hosting provider's configuration.
5. Cookies
This website only uses strictly necessary cookies: a session cookie for login, and a cookie storing your language preference. Both are exempt from consent requirements under applicable EU/German ePrivacy rules, which is why no cookie banner is shown. No analytics, marketing or tracking cookies are used, and no external fonts or third-party scripts are loaded.
6. Disclosure to third parties
Data is not sold or passed on to advertisers. It may only be disclosed to public authorities where we are legally obliged to do so, or to a hosting provider acting strictly as our data processor under an Art. 28 GDPR agreement.
7. Retention period
Account and content data is stored for as long as the account exists or the content is not deleted. Download statistics are retained in pseudonymised form.
8. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Contact the address given in the imprint to exercise these rights. You also have the right to lodge a complaint with the competent data protection supervisory authority.