Privacy

The short version

No cookies. No analytics. No accounts. No tracking pixels. Nothing here follows you anywhere.

Three things do happen, and all three are explained below: the web host writes down each request, two fonts and an icon set load from other companies' servers so those companies see your IP address, and closing the notice in the corner is remembered until you close the tab.

Who runs this site

This site is run by FILL IN. The full address and contact details are on the Impressum.

In the wording the GDPR uses, that makes them the controller — the person who decides what happens to your data and answers for it. It is an ugly word for a simple thing, and the law insists on naming it, so there it is.

Server logs

This site is hosted by FILL IN. Like every web host, it writes down each request that reaches the server: your IP address, the time, the page you asked for, and which browser and system you used. That is how a site stays online and how an attack on it gets noticed.

We keep those logs because running a working site is a fair reason to — the GDPR calls that a legitimate interest (Art. 6(1)(f)), which simply means we did not need to ask permission for something this basic. You can object to it, and the “your rights” box below says how.

Get the data processing agreement from the host and name it here: FILL IN.

Fonts and icons

The page loads its typefaces from Google Fonts and its icons from Cloudflare's CDN. Both are requests your browser makes directly to those companies, which means both of them see your IP address. EU courts and data protection authorities have held that loading Google Fonts this way without consent is unlawful.

The fix is to stop asking. Both can be downloaded once and served from this site, and then nobody's browser talks to anybody else. Until that is done, this is what happens and you should know it.

What is kept in your browser

Two entries, and only if you cause them:

Your light or dark choice, stored under moonhaven-theme, so the site looks the way you left it.
Whether you closed the notice in the corner, stored under moonhaven-notice, so it does not ask you twice.

They live in local storage, which is not a cookie — neither is ever sent to us or to anyone else, and no other site can read them. Clearing your browser data removes both.

That is the entire extent of it. No identifier, and no history of what you looked at.

Server status

The player count on this site is fetched by our server from the game server and handed on to you as plain text. Your browser never contacts the game server, and the result is cached for a few seconds so a busy page asks once rather than once per visitor.

Discord

Applications, tickets and most conversation happen in Discord, which is a separate service with its own privacy policy. What you write there is held by Discord under their terms, not ours. We read it, we answer it, and we delete what we no longer need.

If you apply to play here, we keep your application for as long as your account exists, so a decision made a year ago can still be looked up. Ask and it goes.

Playing on the server

The game server records what any game server has to record to work and to be moderated: your Cfx.re, Steam or Discord identifiers, your IP address, your characters and what they own, and administrative notes such as warnings and bans. That is the basis on which a report can be investigated at all.

Bans are kept indefinitely, because a ban that expires from the record is not a ban. Everything else goes when your account does.

Your rights

You can ask us, at any time and without giving a reason:

— what we hold about you, and for a copy of it
— to correct it if it is wrong
— to delete it
— to stop using it while a disagreement is sorted out
— to hand it over in a form you can take elsewhere
— to stop entirely, where we are relying on that “fair reason” above

Those are Articles 15 to 21 of the GDPR, and asking costs nothing. Write to team@moonhavenrp.com.

If you think we have got it wrong and we are not fixing it, you can complain to the data protection authority for your own country or region — the public body that supervises this. You do not need us or a lawyer to do that.

Children

This server is not intended for children. If you are under the age where you can agree to this yourself, ask whoever is responsible for you first.

Changes

If this page changes, the change goes live here. There is no mailing list to notify, because there is no mailing list.