Privacy policy
Information on processing personal data in the forum
1. Controller
The controller responsible for processing personal data in the forum is:
Kai Gilch
c/o RAHFT Management GmbH
Schwalbenweg 15
15806 Zossen
Germany
Contact: kontakt@german-roleplay.me
2. What data we process in the forum
- Login: web account (username, e-mail, password hash) and/or game account from the shared game-server database.
- Session: technically necessary session cookie for sign-in; optional extended login cookie with “Stay signed in” (up to 30 days).
- Posts & threads: author name, content, timestamps — publicly visible in the forum.
- Profile: optional bio, signature, location, website, avatar (skin or upload), cover photo, IC character line, visibility settings (Everyone / Friends only / Invisible).
- Profile visits: the last 5 visitors to your profile (name and time) — visible only to you.
- Private messages: content, participants and likes of conversations between signed-in users.
- Notifications: type, sender, relation to threads/profiles and read status.
- Mentions (@Name): who mentioned whom in posts, PMs or the wall.
- Friends & following: friend requests, friend lists and follow relationships.
- Block lists: usernames you blocked (visible only to you, to hide content).
- Wall: entries, replies and likes on profile walls.
- Reactions: “Like” and similar reactions on posts.
- Gallery: uploaded images, albums, titles, descriptions and visibility settings.
- Forum feedback: form entries (ideas, bugs) including optional screenshots (max. 3 per report).
- Online status: who is currently active in the forum — username, rank, last activity and current page (e.g. thread, profile); guests as anonymous session tokens; search-engine bots with detected name.
- Daily visitors: who signed in today (name and last activity) — for the “Already visited the forum today” display.
- Technical data: IP address and server log files at the web host (e.g. for security and error analysis).
3. Purposes & legal bases
- Operating the forum, displaying posts and profiles — Art. 6(1)(b) GDPR (use of the community service) or Art. 6(1)(f) GDPR (legitimate interest in operation).
- Login and abuse prevention — Art. 6(1)(f) GDPR.
- Voluntary profile details — Art. 6(1)(a) GDPR (consent by voluntary input).
4. Cookies
The forum uses a technically necessary session cookie for login. Without this cookie, sign-in is not possible.
If you choose “Stay signed in” on the login page, the session cookie is extended for up to 30 days — so you do not have to log in on every visit.
We do not set marketing or tracking cookies.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operation).
5. Donator rank & payments
Purchase of the Donator rank (Premium) is only available via the UCP, not the forum. Among other things, order data and PayPal payment IDs are processed.
Details are in the “Donator rank & PayPal payment” section of the UCP privacy policy and in the terms for Donator purchases.
6. Retention
Posts and profiles remain stored as long as the forum is operated or until you request deletion, unless statutory retention obligations apply.
Session data ends on logout or session expiry (without “Stay signed in”: after 2 hours of inactivity).
Online entries (members, guests, bots) are removed automatically after about 15 minutes of inactivity. Daily visitor entries are purged after 45 days.
Profile visits: only the last 5 entries per profile.
7. Recipients & hosting
- Forum web hosting: operation of the forum files and database
grp_forum. - Game server / accounts DB: shared MySQL database with the SA-MP server for login and player data.
Data processing agreements with hosting providers exist where required by law.
8. Your rights
Under the GDPR you have, among others, the right to access, rectification, erasure, restriction, data portability, objection and withdrawal of consent given.
Data portability (Art. 20): Signed-in users can export their forum data as a JSON file — under Edit profile in the “Your data (GDPR)” section.
Erasure (Art. 17): Pure forum accounts without a linked game account and without published posts can remove themselves under Profile → Delete account. In other cases: contact the team.
Contact: kontakt@german-roleplay.me or the server team (e.g. Discord).
You may also lodge a complaint with a data protection supervisory authority.
Last updated: July 2026