Privacy policy
This policy describes which data the ClanCore Team processes on clancore.de and its subdomains, and why.
Controller
The controller details are being completed.
What data we process
- Webspace application: When you fill in the application form, we process first name, last name, email address, postal address, clan name, game, requested subdomain, your Discord server invite link, your Discord name, and an optional message.
- Clan portal login: When you sign in to the clan portal via Discord, we receive your Discord ID and username through Discord.
- Server logs: When you visit our pages, the web server briefly stores IP addresses in access logs and for attack detection (fail2ban), for about 14 days.
- Running your webspace: Content your clan uploads to its webspace is stored there and served from there.
Purposes of processing
We process this data to provide your free webspace, to defend against abuse and attacks, and to keep the platform running securely.
Legal basis
Processing is based on Art. 6(1)(b) GDPR (contract or pre-contractual measures, your application) and Art. 6(1)(f) GDPR (legitimate interest in secure operation, for example server logs and abuse prevention).
Recipients and service providers
- Discord: for authentication via Discord OAuth when logging into the clan portal, and as a contact channel for applications and notifications.
- Let's Encrypt: issues the TLS certificates for encrypted connections.
- Hetzner Online GmbH: hosts our servers, located in Germany.
Your data is never passed on for advertising purposes.
No outgoing mail
ClanCore never sends emails and does not run email marketing. Notifications are handled exclusively through Discord.
Retention period
Server logs are deleted after about 14 days. Application and clan data is kept while the clan is active and deleted once the webspace is removed.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21) and data portability (Art. 20). You may also file a complaint with a data protection supervisory authority.
Contact for privacy requests
The contact for privacy requests is being completed.