Privacy Policy

The controller within the meaning of Art. 4 No. 7 GDPR is the company named in the imprint, whose provider identification follows § 5 DDG. The contact address for data protection questions is given there.

Account and billing data — name, email address, billing address and the payment reference returned by the provider — is processed to perform the contract under Art. 6(1)(b) GDPR. We never receive or store full card numbers.

Service data such as server configuration, tickets and any console output you attach is processed for the same purpose and kept with the account.

Our web servers and network record the IP address, timestamp, requested resource, referrer and user agent. The legal basis is our legitimate interest in operating and securing the service, Art. 6(1)(f) GDPR.

Logs are kept for a limited period and then deleted or aggregated. Records attached to an open abuse or security case are the exception and are kept until the case is closed.

Strictly necessary storage — the session and the cookie that remembers which language you chose — is set without consent under § 25(2) TDDDG. Anything else is set only after you agree, and that agreement can be withdrawn at any time.

Payment providers, the transactional email provider and the infrastructure operator of each location act as processors under Art. 28 GDPR. Where a transfer outside the EEA is involved, it is covered by the standard contractual clauses.

The Persian arm of the service is operated by a separate partner entity with its own customer database. Customer data is not passed between the two entities.

You have the right of access, rectification, erasure, restriction, data portability and objection under Art. 15 to 21 GDPR. A request sent from the account email address is enough; there is no form to fill in.

You may lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement, under Art. 77 GDPR.