Privacy Policy
What we log, how long we keep it and why.
Server logs
When you visit this website, our web server records your IP address, the time, the requested address, the response status, the amount of data sent and your browser's user-agent string. The country is derived from your IP address by Cloudflare and added to the log.
These server logs are kept for 14 days and then deleted automatically.
Daily statistics
We derive daily statistics from the server logs: number of requests, most requested pages, most active IP addresses (with country), browsers, status codes and countries. They are kept for 30 days. A per-day index of IP addresses (number of requests and country per address) is kept for the same 30 days.
Attack detection and evidence
If the number of requests suddenly rises far above normal and comes from many different IP addresses, we treat it as an attack on the service. For every detected attack we store the participating IP addresses, their country, the number of requests and the first and last time they were seen. This evidence is kept for 90 days.
The purpose is to defend the service, to identify attackers and to enforce legal claims, including a criminal complaint.
Sign-in IP addresses
When you register, sign in, restore a session with your access key or reset your password, we store the IP address and the time with your account. These records are kept for 90 days. We use them to detect second accounts used to circumvent bans, abuse and threats.
Cloudflare
The website is delivered through Cloudflare, which acts as a reverse proxy and protects it against attacks. Cloudflare therefore processes your IP address and request data on our behalf and according to its own privacy information.
Legal basis
We process this data to keep the service secure and available and to defend our legal claims. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Your rights
You have the right to access, rectification, erasure and restriction of your data, the right to object to processing based on legitimate interests (Article 21 GDPR) and the right to lodge a complaint with a data protection authority. To exercise your rights, use the contact page.
Questions about this policy: contact page.