← Back to dashboard

Privacy Policy

1. Controller

Deacon Härschel, Roermonder Straße 48, 41812 Erkelenz, Germany
Email: [email protected]

2. Overview of processing

Login via Discord, operating the Discord bot (server, channel, and role assignments), your own Nitrado access, the server logs of your DayZ server, publishing recognised events in Discord, stored statistics and settings, hosting, technical log files, and – if used – donations via PayPal.

3. Login via Discord (OAuth)

When you log in, Discord transmits your Discord ID, username, and avatar, plus the Discord servers (guilds) you are a member of (scope requested: identify guilds – no messages, no email address). The access token issued for this is used only for the login itself and is not stored; no long-lived refresh token is requested. Legal basis: Art. 6(1)(b) GDPR (performance of the usage relationship).

4. Discord bot operation

To respond to commands and post events, the bot processes Discord server, role, channel, and message IDs as well as the ID of the respective interaction. These identifiers are only processed as far as needed for the relevant feature, and only stored long-term to the extent you configure it in the dashboard (e.g. a chosen feed channel). Legal basis: Art. 6(1)(b) GDPR.

5. Your Nitrado access

If you connect your own Nitrado server, the Service stores the Nitrado token you enter and the FTP credentials derived from it, for that server only. This access data is used exclusively to operate your own server and is not shared with other customers. Legal basis: Art. 6(1)(b) GDPR.

6. Your DayZ server's logs

From your Nitrado server's logs (ADM files), the Service reads player identifiers/gamertags, kills, hits, positions, connection times, and possibly chat messages, in order to operate the kill feed, statistics, and map display. This data does not come directly from the affected players, but from the server you operate (Art. 14 GDPR); you, as the operator of your server, remain responsible for the original collection towards your players – see the Data Processing Agreement (DPA), available via the dashboard footer.

7. Publication in Discord channels

Recognised events (e.g. kills, connections) are published by the Service in the Discord channels you select for this. The recipients are all members of your Discord server with access to that channel – who you invite there is your decision.

8. Stored statistics, settings, and databases

Kill statistics, play time, economy/currency data, zones, shop purchases, ban list, whitelist, announcements, and scheduled tasks are stored for as long as the associated server access exists with this Service. If you disconnect your server, this data is NOT automatically deleted, so it is available again if you reconnect; you can request deletion at any time via email to the address above.

9. Hosting

This dashboard runs on servers provided by PebbleHost. When you access it, PebbleHost processes technically necessary connection data (including your IP address).

10. Log files

The technical application log on the server records operational messages and may contain server names as well as names from processed events; it is not automatically rotated or deleted. Separately, the dashboard keeps an administration log of the last 500 actions (who changed which setting, and when) for traceability and abuse detection. The Service does NOT keep its own HTTP access log; purely connection-technical data (e.g. IP address on page load) is only processed by the hosting provider (see item 9). Legal basis in each case: Art. 6(1)(f) GDPR (legitimate interest in operation, troubleshooting, and abuse prevention).

11. Donations

Voluntary donations can be made via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). If you choose to donate, PayPal processes the payment data required for this (including name, payment amount, transaction data) under its own responsibility, based on its own privacy policy (paypal.com/en/webapps/mpp/ua/privacy-full). As the recipient of the donation, I also receive name, email address (if provided to PayPal), amount, and transaction data, and process this for allocation and for my own tax record-keeping obligations. Legal basis: Art. 6(1)(b) and (c) GDPR.

12. Contacting me by email

If you write to me at the email address above, I process your details (including sender address, content) exclusively to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR.

13. Cookies / session

A technically necessary session cookie is set on login, which automatically expires after a maximum of 12 hours of inactivity. It has no tracking function and is not used for advertising purposes. Legal basis: Art. 6(1)(f) GDPR as well as § 25(2) No. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act; the cookie is strictly necessary to provide the service you explicitly requested).

14. Recipients and processors

Depending on the processing, recipients are: Discord (login, publishing in your channels), Nitrado (your own server access), PebbleHost (hosting), and – for donations – PayPal.

15. Transfers to third countries

For some of the services named above, data may be transferred to countries outside the EU/EEA. The respective providers state that they are obliged to provide suitable safeguards for this (e.g. EU standard contractual clauses); details are set out in the respective providers' own privacy policies.

16. Storage period and deletion

Session cookie: max. 12 hours. Administration log: rolling, last 500 actions. Application log: unlimited, no automatic rotation. Server and player data (kills, zones, economy, ban list, etc.): until deletion is requested, even after disconnecting your server (see item 8). Email enquiries: until resolved.

17. Automated decisions

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

18. Consequences of not providing data

Without logging in via Discord and without your Nitrado server's credentials, the Service cannot be used – this data is necessary to provide it.

19. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your data. Contact the email address above to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority. If you operate a server through this Service yourself, the Data Processing Agreement (DPA) additionally applies to the processing of your players' data.