Privacy policy
This policy explains what data is processed on the website, verification system, webchat, player profiles, uploads and community features.
Last updated: 28 May 2026
Controller
Varga-Tech – Attila Varga
Leipziger Str. 3
37085 Göttingen
Deutschland
Privacy contact: vargatech@attila-varga.eu
Quick navigation
Overview
We operate a public Windrose community server with website, live status, connection guide, verification system, player profiles, webchat, Discord integration, support/feedback features and opcional uploads. Data is processed only where required for operation, security, abuse prevention, support and community features.
No advertising profiles are created and data is not sold for advertising purposes. Any analysis or logging is used for technical operation and security.
Data processed
- Kontaktdaten und freiwillige Angaben bei Support, Feedback oder Verify
- Technische Zugriffsdaten wie IP-Endereço, User-Agent, Zeitpunkt und Estadocodes
- Jogador-/Charakternamen, Estado do servidor, Chat- und Community-Inhalte, soweit du sie nutzt
- Upload-Dateien wie Avatare oder Anhänge, soweit diese Funktion verwendet wird
Server and security logs
When visiting the website, IP address, date/time, requested URL, referrer, user agent, status codes and technical connection data may be processed in web server logs. This is used for secure operation, troubleshooting, abuse detection and attack prevention.
Cookies and local storage
The website uses technically necessary cookies or localStorage, for example for the selected language, interactive checklists, guide progress, chat/UI state and security functions. These stores are used for usability, stability and operation and do not create advertising profiles.
Verification system and magic link
For server verification, email address, Discord name/ID, character name, confirmation status, timestamp, IP address, user agent, security/captcha information and technical events may be processed. The password is provided only after successful review or confirmation. Webhooks may notify admins about new or suspicious verifications.
Webchat, Discord and community features
Chat, Discord, feedback, support and community features may process entered names, messages, timestamps and technical metadata. When using Discord, Discord’s own privacy terms also apply. Publicly posted content may be visible to other users.
Player profiles, status, live map and uploads
Public player profiles and status pages may display player names, online status, playtime, last seen, opcional profile details, avatar uploads and server-related data. Uploads are processed only where required for profile, support or community functions.
External services and recipients
Depending on use, external services may be involved, such as Discord for community/webhooks, jsDelivr for frontend libraries, SumUp for voluntary support/payments and technical hosting infrastructure. When opening external links or embedded content, data may be transferred to the respective providers.
Legal bases
Processing may be based on Art. 6(1)(b) GDPR for requested functions, Art. 6(1)(f) GDPR for operation, security, abuse prevention and community administration, Art. 6(1)(c) GDPR for legal obligations and Art. 6(1)(a) GDPR where consent is required.
Retention
Data is stored only as long as required for operation, security, support, evidence, abuse prevention or legal obligations. Security and verification-related data is regularly reduced or deleted; as a guideline, about 90 days is used unless a security incident, support case or legitimate evidence need requires longer storage.
Your rights
Subject to the GDPR, you have rights of access, rectification, deletion, restriction, data portability, objection and withdrawal of consent. You may also lodge a complaint with a data protection supervisory authority. In Lower Saxony, the competent authority is the State Commissioner for Data Protection of Lower Saxony.
Security
We use HTTPS, access restrictions, technical safeguards, server hardening and data-minimising processes where possible. However, no internet transmission can be absolutely risk-free.