Privacy policy

Controller

The forum is operated privately and non-commercially. The operator is the data controller within the meaning of Article 4(7) GDPR and can be reached at any time by messaging an administrator on the forum. Administrators are listed in the sidebar and on user profiles.

Categories of data processed

• Account data. When you register, the forum stores your chosen username, a salted cryptographic hash of your password, and the date of registration. The password itself is never stored and cannot be recovered from the hash. Optional profile settings, namely a profile picture, a profile text and a username colour, are stored if and only if you set them.
• Content data. Posts, comments, chat messages, votes, reports and uploaded media files are stored together with their creation time and their association with your account. The chat retains no more than the most recent 500 messages; anything older is deleted automatically and irrevocably as new messages arrive.
• Technical data. Your IP address is held transiently in server memory for the sole purpose of rate limiting and abuse prevention. It is not written to the database, not written to log files, and not linked to your account. It is discarded automatically within minutes.

Recipients and third parties

Your data is not sold, shared with, or transferred to any third party. The forum embeds no analytics, no advertising, no tracking pixels, no external fonts and no content delivery networks. Every request you make is answered entirely by the server that hosts the forum, and all data remains on that server.

Cookies and local storage

The forum sets exactly one cookie: a session cookie containing a random identifier, created when you log in and used solely to keep you logged in. As a strictly necessary cookie it requires no consent banner. Custom interface themes, where you configure them, are kept in your own browser's local storage and are never transmitted to the server.

Purposes and legal bases

Account and content data are processed because the processing is necessary to provide the forum you registered for, pursuant to Article 6(1)(b) GDPR. Transient processing of IP addresses for rate limiting and abuse prevention is based on the operator's legitimate interest in keeping the service available and secure, pursuant to Article 6(1)(f) GDPR. No processing is based on consent, and no automated decision-making or profiling takes place.

Retention

Content remains available until you delete it or a moderator removes it. Chat messages expire automatically as described above. Account data is retained for as long as the account exists and is erased when the account is deleted. Data held only in server memory, such as IP addresses used for rate limiting, is discarded within minutes of the last request.

Your rights

You have the right to obtain confirmation of whether your data is processed and to access it (Article 15 GDPR), the right to rectification of inaccurate data (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20) and the right to object to processing based on legitimate interests (Article 21). You further have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence (Article 77). To exercise any of these rights, message an administrator on the forum.

Contact

All enquiries concerning this policy or your personal data can be directed to the operator by messaging an administrator on the forum. Enquiries are answered without undue delay and at the latest within one month, as required by Article 12(3) GDPR.