Privacy Policy

Last updated: September 1, 2026

1. Controller

The controller of personal data processed through OTServers.org is Piotr Boroń, conducting unregistered business activity pursuant to Art. 5 of the Entrepreneurs' Law Act of March 6, 2018, al. Solidarności 68/121, 00-240 Warsaw, Poland. Contact: [email protected].

2. What We Collect

  • Account data — name, email address, a hash of your password (never the password itself) and your language preference. Legal basis: performance of a contract.
  • Listings and content you submit — server details, descriptions, banner creatives, and the ownership claims connecting them to your account. Legal basis: performance of a contract.
  • Purchase records — your coin balance, coin transactions and promotion history. Card and payment details are processed by Stripe and never reach our servers; we receive only a confirmation and the amount. Legal basis: contract and legal obligations (accounting).
  • IP addresses — processed transiently to rate-limit abuse, deduplicate votes (one vote per server per day) and filter crawlers out of billed banner clicks. Legal basis: legitimate interest in keeping the ranking and billing honest.
  • Server measurements — player counts, uptime and status of listed game servers. This is telemetry about game servers, not about people.

3. Cookies and Analytics

The Service sets only essential cookies: a session cookie when you sign in and your language choice. There are no advertising or cross-site tracking cookies, which is why the Service shows no cookie banner.

Traffic is measured with Plausible, a cookieless analytics tool that stores aggregate counts only and no personal identifiers. Confirmed page views cannot be traced back to an individual visitor.

4. Emails

We send transactional email only: address verification, password resets, ownership-claim instructions, purchase receipts, expiring-promotion notices and — for listing owners — a weekly summary of their own servers. Delivery is handled by Resend acting as our processor. We do not send marketing email and we never share your address for marketing.

5. Processors and Transfers

We use a small set of processors to operate the Service: Stripe (payments), Resend (email delivery), and infrastructure providers hosting our servers in the EU. Some processors may transfer data outside the EEA; where they do, the transfer is covered by an adequacy decision or Standard Contractual Clauses. We do not sell personal data, and no data is used for advertising personalization.

Enrichment services we use (website summarisation, screenshots, favicon resolution) process the public websites of listed game servers, not personal data of visitors.

6. Retention

  • Account data: for the life of the account, deleted on request.
  • Purchase records: as long as required by Polish accounting and tax law.
  • IP-derived rate-limit and vote-deduplication entries: expire automatically within days of the action they protect.
  • Server measurements: kept indefinitely as historical statistics about game servers.

7. Your Rights

Under the GDPR you have the right to access, rectify, erase and port your personal data, to restrict or object to processing based on legitimate interest, and to withdraw consent where processing rests on it. Write to [email protected] and we will respond within the statutory deadline. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.

8. Children

Accounts require users to be at least 16 years old, or the age of digital consent in their country if higher. We do not knowingly process the data of children below that age; if you believe such a child has created an account, contact us and it will be removed.

9. Changes

We may update this policy as the Service evolves; material changes are announced on the Service. The date above always reflects the current version.