Privacy policy

1. Who is responsible

Controller

···

Address

···

Email

···

The law does not require a data protection officer: the site is run by one person.

2. When you visit the site

The site is hosted by: Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA. For every request, the server writes a technical log:

• IP address;
• date and time of the request;
• requested page and status code;
• the page you came from;
• browser and operating system.

Purpose: delivering pages, finding errors and fending off attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The log is kept for 14 days and then deleted; longer only for entries needed to investigate a specific incident.

A data processing agreement is concluded with the hosting provider (Art. 28 GDPR). Fonts are loaded from our own server, without requests to Google.

The provider is a US company; the site runs on servers in the EU (Amsterdam, the Netherlands). If data reaches the USA while the service is maintained, the transfer relies on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses in the data processing agreement.

3. Cookies and browser storage

Without your consent, the site only stores what the features you use need: your choice in the cookie window, the site language and the project (Majestic RP or GTA5RP). Legal basis: § 25(2) no. 2 TDDDG and legitimate interest (Art. 6(1)(f) GDPR). These entries never leave your browser.

Analytics cookies are set only after you consent. The full list with durations is in the cookie policy.

4. Google Analytics — only with consent

If you allow analytics, the site loads Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

• Data: a pseudonymous identifier in the _ga and _ga_<ID> cookies, pages viewed, time and length of the visit, referrer, device type, browser, language and approximate location (country, city).
• According to Google, IP addresses of EU users are only used to derive the location and are not stored.
• Purpose: understanding which sections are useful and improving the site.
• Legal basis: your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
• Data may be transferred to Google LLC in the USA. Google LLC participates in the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission.
• Event data is kept in Google Analytics for 2 months.

You can withdraw consent at any time with “Cookie settings” in the footer: analytics turns off and its cookies are deleted. Withdrawal does not affect the lawfulness of processing before it.

5. When you write to us on Discord or Telegram

The site has no forms; contact happens through messengers. When you write, we receive your username and ID, the messages, files and message times.

Purpose: replying, discussing the task and carrying out the order. Legal basis: preparing and performing a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR).

Discord and Telegram process data under their own terms as independent controllers. For users in the EU these are Discord Netherlands BV (Schiphol Boulevard 195, 1118 BG Schiphol, the Netherlands) and Telegram, whose representative in Europe is Telegram UK Holdings Ltd (71–75 Shelton Street, London WC2H 9JQ, United Kingdom). The services may process data outside the EU; details are in their privacy policies.

We keep the conversation while the work and support last, then for up to 3 years for questions about the order (regular limitation period, § 195 BGB). Business letters that tax law requires us to keep: 6 years.

6. Bot builder

The builder runs only in your browser: the family name, modules and other answers are not sent anywhere. The finished brief is copied to your clipboard, and you decide whether to send it to us.

7. Orders and payment

An order needs a name or nickname, a way to contact you, the task and payment details. Legal basis: performing the contract (Art. 6(1)(b) GDPR) and tax obligations (Art. 6(1)(c) GDPR).

• PayPal: the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, as an independent controller.
• Bank transfer: your bank and ours receive the data.
• Cryptocurrency: transactions are recorded on a public blockchain, visible to anyone and impossible to delete. A wallet address may be linked to your identity.

Invoices and accounting records are kept for 8 years (§ 147 AO, § 14b UStG) and then deleted.

8. Who else receives data

• the hosting provider — on our behalf and on our instructions;
• Google — only if you allowed analytics;
• Discord, Telegram, PayPal and banks — when you use them yourself to contact us or pay;
• tax advisors and tax authorities — when the law requires it.

We do not sell data or use it for advertising.

9. Your rights

Under the GDPR you can:

• find out what data about you is processed and get a copy (Art. 15);
• have inaccurate data corrected (Art. 16);
• have data erased (Art. 17) or processing restricted (Art. 18);
• receive your data in a machine-readable format (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time (Art. 7(3)).

Write to ···. You may also lodge a complaint with a data protection supervisory authority — for example in the country where you live or in the German state where the controller is registered (Art. 77 GDPR).

10. Visitors from Russia

The controller is based in Germany; data is processed on servers in the EU and by the services listed above. Analytics data is processed on the basis of a separate consent to personal data processing — its text is linked from the cookie window and the footer.

You can request information about how your data is processed, demand its correction, blocking or destruction and withdraw consent (Art. 14 and Art. 9(2) of Federal Law No. 152-FZ). Requests go to ···; we reply within 10 working days.

11. Other

• You do not have to provide any data to use the site. An order needs contact details and a task description — without them we cannot reply.
• There is no automated decision-making or profiling.
• We update this policy when services or the law change. The version and date are shown at the top of the page.