Privacy Policy

1. Introduction

Welcome to Better Arma Workshop ("we," "our," or "the platform"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy explains how we collect, use, and safeguard your information when you use our services, including our website, API, and community features.

2. Data We Collect

We collect only the minimum amount of data necessary to provide and secure our services.

Account & Profile

Email Address: Used for authentication (Magic Links) and critical notifications.
Discord Integration: If you log in via Discord, we store your Discord ID and Username to link your account.
Display Name: A public name chosen by you for community features.
Password: If set, stored only as a secure cryptographic hash (argon2/bcrypt).

User Content

Mod Lists: Collections of mods you create, including descriptions and metadata.
Suggestions: Mods you suggest to other lists, including your reasons and form answers.
Votes: Records of your upvotes or downvotes on community suggestions.

Technical Logs

IP Address: Logged briefly for rate-limiting, security monitoring, and abuse prevention.
Browser Metadata: User-agent strings and language settings used to optimize site rendering.
Trace IDs: Unique identifiers for debugging API requests (non-persistent).

3. Legal Basis for Processing

Under the GDPR, we process your data based on the following legal grounds:

Contractual Necessity (Art. 6(1)(b) GDPR): To provide the core services you signed up for (e.g., managing your mod lists).
Legitimate Interests (Art. 6(1)(f) GDPR): To ensure the security of our infrastructure, prevent spam/abuse, and improve the user experience.
Consent (Art. 6(1)(a) GDPR): For optional features such as marketing-related notifications (if implemented in the future).

4. Data Retention & Deletion

We retain your personal data only as long as your account is active or as needed to provide you with services.

Account Data: Permanently deleted immediately upon your request via the "Delete Account" feature.
Verification Tokens: Automatically expire and are purged after 24 hours.
Backups: Encrypted backups are kept for up to 30 days and are overwritten on a rolling schedule.

5. Data Sharing & Third Parties

We do not sell your data. We only share data with third parties when strictly necessary:

Authentication Providers: If you use Discord login, Discord receives metadata about the login attempt.
Infrastructure: Our servers are hosted within the EU/EEA (Hetzner Online GmbH) to ensure GDPR compliance.
Legal Requirements: If required by law to comply with a valid legal process.

6. Your Rights (GDPR)

You have comprehensive rights regarding your data:

Access & Portability

Download a complete copy of your data in JSON format via the settings menu.

Right to Erasure

Delete your entire account and all associated records permanently at any time.

Correction

Update your email, display name, and preferences directly in your profile.

Right to Complain

You have the right to lodge a complaint with a data protection authority.

7. Cookies & Tracking

We do not use tracking cookies or third-party analytics (like Google Analytics). We use Local Storage only to store your authentication token (JWT) to keep you logged in. No personal information is tracked across other websites.

8. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

sebastian@unterschutz.de

👋 Welcome! Set your display name