This page is a template that describes what the website software does today. Fill in the controller details and have the text checked before you go public.
Controller
[Full name or company name, address, email]
What we process and why
Server logs. When you open the site, your IP address, the time, the requested page and your browser type are processed by the web server (and any reverse proxy in front of it). This is needed to deliver the site and to protect it from abuse. Rate limiting uses your IP address in memory. Legal basis: Art. 6 (1) f GDPR. [Retention period of the logs]
Account. If you register, we store your username, a salted hash of your password (we cannot read your password), your role, an optional profile text, when you registered and when you were last active. There is no email address on file. Legal basis: Art. 6 (1) b GDPR.
Minecraft link (optional). If you link your account with /weblink, we store your Minecraft UUID and your in-game name. The website then reads your in-game rank from the game database and shows it next to your name. You can unlink at any time in your settings, which removes both values from the website. Legal basis: Art. 6 (1) a GDPR (your consent by linking).
Content. Forum posts, threads, bug reports and comments are public and are shown with your username. Legal basis: Art. 6 (1) b GDPR.
Cookie. We set one cookie called hx.sid. It keeps you logged in and protects forms against forgery. It is strictly necessary for the login. We use no tracking cookies, no advertising and no analytics.
Avatars. The head of the Minecraft skin that belongs to your username is fetched by our server from a public skin service (minotar.net or mc-heads.net) and cached. Your browser does not connect to those services. Only the username is sent.
Server status. The site asks our own Minecraft server how many players are online. No visitor data is involved.
External links
The store at store.hustix.net is run with a payment provider under its own privacy policy. Other links leave this site, and their operators are responsible for them.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing, data portability and you can object to processing (Art. 15 to 21 GDPR). To have your account deleted, contact us. You also have the right to complain to a data protection authority.
Contact
[Email address]