Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: username, email address, and password (hashed)
• Profile information: display name, avatar, bio, and any other details you choose to provide
• Payment information: processed securely through Stripe — we never store your full card details
• Usage data: pages visited, features used, server activity, and interaction logs
• Technical data: IP address, browser type, device information, and operating system

2. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and manage your account
• To communicate with you about your account, updates, and support
• To enforce our Terms of Service and protect against abuse
• To generate anonymous, aggregated analytics to improve the platform

3. Data Storage and Security

Your data is stored on servers located in Frankfurt, Germany. We use industry-standard encryption (TLS/SSL) for data in transit and encrypt sensitive data at rest. Access to personal data is restricted to authorized personnel only.

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing
• Cloudflare — CDN, DDoS protection, and DNS
• Discord — community integration and OAuth login
• Umami — privacy-focused, cookie-free analytics (self-hosted)

We do not sell your personal information to third parties.

5. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. Our analytics (Umami) is cookie-free and does not track individuals.

6. Data Retention

• Account data is retained as long as your account is active
• Server logs and usage data are retained for up to 90 days
• Payment records are retained as required by law (typically 7 years)
• Upon account deletion, personal data is removed within 30 days, except where legal retention is required

7. Your Rights (GDPR)

As our infrastructure is in the EU, you have the following rights under GDPR:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data
• Objection — object to data processing

To exercise these rights, contact privacy@24hgaming.com.

8. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through our platform or by email. Continued use of our services after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at privacy@24hgaming.com or through our Discord server.