Privacy notice
Controller
Dennis Cabanski
Allgäustr. 7
87477 Sulzberg
Germany
E-mail: info@fnord-works.de
When you visit this website
The web server processes technically necessary data (IP address, time, page requested, browser identification) in order to deliver the site and defend against attacks. The legal basis is Art. 6(1)(f) GDPR. These pages set no cookies, use no analytics and load no external fonts, scripts or images — everything is served from our own machine.
In the forum (forum.fnord-works.de)
Registering there requires a username, an e-mail address and a password; the password is stored only as a cryptographic hash. Logging in sets a session cookie that is technically required and expires on logout. Posts are publicly visible and remain so, as does the chosen username. IP addresses are recorded on registration and with posts so that abuse can be traced. The legal basis is Art. 6(1)(b) GDPR for the account and (f) for abuse prevention. An account can be deleted at any time; on request the associated posts are removed or anonymised — a mail to the address above is enough.
When you play on the servers
Operating them involves processing your player name, player ID and IP address, and storing chat and event logs. This is necessary for running and moderating the servers (Art. 6(1)(f) GDPR).
Connecting via the gaming platforms
When you join a server, the respective platform (such as Steam or the Hytale account service) verifies your identity. Their own privacy terms apply in addition.
Where the data is held
Worlds, backups, forum and web content are stored on our own hardware in Germany. Internet access is routed through a rented server operated by ip-projects GmbH & Co. KG (Würzburg), acting as a processor under Art. 28 GDPR; a corresponding agreement is in place. No data is passed to any further third party and none is transferred outside the EU.
Minors
These services address a general audience. Anyone under 16 should only create a forum account with the consent of a parent or guardian. If we learn that an account exists without such consent, we delete it.
Retention
Server logs are deleted after 14 days at the latest; world backups are overwritten on a rolling basis. Forum accounts and posts remain stored until the account is deleted.
Your rights
Access, rectification, erasure, restriction, objection and data portability under Art. 15–21 GDPR — a mail to the address above is enough. You also have the right to lodge a complaint with a supervisory authority; the competent one here is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.