Referrals, voting and bug reports. A referral is temporarily held in the existing registration session and assigned to the main account on new registration. Attribution, the qualifying points threshold and one-time reward receipts survive universe resets. A conscious visit to a voting provider passes an opaque account reference, never a login, email address or account secret. Providers process their own connection data under their notices. RetroSpace stores verified votes, times and ledger receipts, not the voter IP included in callbacks. Bug text, status, replies and internal work notes use existing private moderation; reporters cannot see internal notes. The purpose-bound retention and erasure criteria stated above continue to apply.
Controller and contact. The controller is the sole trader named in the imprint. Privacy requests can use its published email and postal contact. The game uses STRATO web hosting; a planned VPS move has not already occurred.
Accounts and play. Data include login alias, email, password hash, language and skins, world memberships, player names, game state, actions, messages and private reports. They support performance of the contract and requested play/communication functions (GDPR Article 6(1)(b)). Necessary session/security data, including existing IP/user-agent entries, support operation and abuse prevention (b or f with balancing). New acceptance records contain version, language, time and age assertion, not extra identity documents, birth dates, IP or device evidence.
Credit and payments. Account-wide DM, activations, references, amounts, currency, text consent, payment status, confirmations and withdrawal declarations support performance and evidence (GDPR Art. 6(1)(b)); legally required records also use (c). When the PayPal API is enabled, payment reference, amount, currency and assignment are sent server-side and verified status events processed. Sandbox is separate from real money. PayPal independently processes payments initiated there; the website receives no PayPal password. Registration is not marketing consent.
Support and moderation. Reports, authorized evidence references, notices, appeals, sitting grants and actor/participation logs serve safe operation, rules and legal defence ((b)/(f)). Actual delivery receipts undergo bounded processing for versioned trade hints; uncertain assignment stays explicit. There is no automatic trade block or guilt finding. Only signed-in players see expressly approved public reasons for active bans; private notes remain restricted to authorized staff. Entries disappear immediately on expiry/revocation. The link filter does not impose an automatic full ban.
Recipients. STRATO processes necessary web, database and mail data including sender, recipient and message content. Authorized operators get only necessary access. Discord and PayPal's approval page are deliberately opened; an enabled API additionally uses the server-side PayPal communication described above. No embedded social feeds, advertising platform or newsletter is introduced. Existing retention criteria remain unchanged.
Retention and erasure. Observed session validity is 120 minutes of inactivity; activity can renew it. Reset tokens are valid for 30 minutes and are deleted on successful use or replaced on a new request. Expiry does not mean immediate physical removal from every backup. Account/game data support active participation; inactivity alone does not delete them. After termination, data are erased or restricted as purposes, necessary claims and statutory duties end. Payment evidence follows applicable statutory evidence/retention duties. Moderation and acceptance records remain only as necessary to substantiate specific measures, claims or the applicable version. Logs and backups must be bounded separately by security, troubleshooting and recovery purposes; no new automatic deletion period or indefinite blanket retention is asserted.
Rights. Subject to statutory conditions, rights include access, correction, erasure, restriction, portability and objection, particularly to legitimate-interest processing. Optional consent actually given may be withdrawn for the future. Erasure requests differ from inactivity rules. Complaints can go to the competent supervisory authority; identity checks remain proportionate. Requests are normally handled within one month, with lawful extensions explained.
Minimization and security. Access controls, encrypted transport, password hashing and bounded free text are used without promising absolute security. Processing is not all based on consent. New third-party tracking/storage or a provider change requires a specific updated assessment and information.