Privacy policy

This policy explains which personal data ogameservers.com processes, why, and which rights you have. We process data under the EU General Data Protection Regulation (GDPR) and, for visitors from Turkey, the Turkish Personal Data Protection Law (KVKK, see our KVKK disclosure).

1. Controller

[Company name] [legal form]
[Street and number]
[Postcode] [City]
[Country]
Email: [[email protected]]
Phone: [+00 000 0000000]

2. Visiting the website

When you open a page, your browser sends technical data: IP address, date and time, the page requested, referrer, browser and operating system. The web server processes this data to deliver the page and to protect the service against abuse (Art. 6 (1) (f) GDPR, legitimate interest in a secure and working website). Server log files are deleted after [14] days.

The site is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which acts as a content delivery network and protects against attacks. Cloudflare processes your IP address for this purpose. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework.

3. Voting for a server

When you vote, we check that the vote is genuine and that you have not voted for the same server in the last 12 hours.

• Bot check: the vote page uses Cloudflare Turnstile, which checks your browser for signs of automation. Turnstile processes your IP address and browser characteristics; see Cloudflare's privacy policy.
• What we store with a vote: a salted hash of your IP address (never the IP itself), the network prefix (/24 for IPv4, /48 for IPv6), the network operator number (ASN), your country as reported by Cloudflare, and the player id from the vote link if the server passed one. We keep these for 30 days; after that the vote keeps only the server, the site, the time and whether it was voided.
• Blocked networks: votes from data centres, from the Tor network and from regions the server owner has excluded are not counted. We use the free DB-IP Lite database and the public Tor exit list for this check; the lookup happens on our server.
• Fraud checks: we look for unusual patterns (many votes from one network, sudden spikes, one player id from many addresses) and may void votes. These checks use the data above and do not lead to automated decisions about you.
• Sent to the server owner: if the server owner has set up a vote callback, we send them the vote id, the server id, the site, the player id and your IP address, so their game can grant the reward and detect abuse. The owner is an independent controller for that data. Our copy of the callback, which contains the IP address, is deleted after 30 days.

Legal basis: Art. 6 (1) (f) GDPR (a fair and abuse-free ranking) and Art. 6 (1) (b) GDPR (passing your vote to the server you voted for).

4. Server pages and website visits

To show owners how many people view their page and visit their website, we count one view and one visit per visitor, server and day. For this we store a salted hash of the IP address with the date for 30 days; the daily totals we keep contain no personal data. Known crawlers are not counted.

5. Server owner accounts

If you register as a server owner we process your name, email address and password (stored only as a hash), the server details you enter, your website verification and your callback settings. We use this data to provide the account and the listing (Art. 6 (1) (b) GDPR). We keep it while the account exists and delete it when you delete the account, unless the law requires us to keep it longer.

Emails (verification, password reset, callback failures, order notices) are sent through [Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France)], which processes your email address on our behalf.

6. Paid placements

When you order a premium listing, a featured slot or an advertising banner, we process the order, billing and payment data needed to provide the service and issue the invoice (Art. 6 (1) (b) and (c) GDPR). Invoices and accounting records are kept for the periods required by tax and commercial law (up to 10 years).

7. Cookies

We only use cookies that are strictly necessary for the site to work, for example the session cookie for logged-in owners and the security token for forms. We do not use analytics or advertising cookies. Details are in our cookie policy.

8. Hosting

The website and its database run on servers of [hosting provider, address] in [country], managed through Laravel Forge. The provider processes data only on our instructions under a data processing agreement.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Because we store voters only as a salted hash, we usually cannot link a vote to you without additional information from you. To exercise your rights, write to us at the address above.

You also have the right to lodge a complaint with a supervisory authority, for example [the data protection authority responsible for the operator].

10. Security

All pages are served over HTTPS. Passwords and callback secrets are stored hashed or encrypted, and access to personal data is limited to the people who need it.

11. Changes

We update this policy when our processing changes. The date at the top shows the current version.