Privacy Policy

The controller of personal data processed through OTServers.org is Piotr Boroń, conducting unregistered business activity pursuant to Art. 5 of the Entrepreneurs' Law Act of March 6, 2018, al. Solidarności 68/121, 00-240 Warsaw, Poland. Contact: [email protected].

• Account data — name, email address, a hash of your password (never the password itself) and your language preference. Legal basis: performance of a contract.
• Listings and content you submit — server details, descriptions, banner creatives, and the ownership claims connecting them to your account. Legal basis: performance of a contract.
• Purchase records — your coin balance, coin transactions and promotion history. Card and payment details are processed by Stripe and never reach our servers; we receive only a confirmation and the amount. Legal basis: contract and legal obligations (accounting).
• IP addresses — processed transiently to rate-limit abuse, deduplicate votes (one vote per server per day) and filter crawlers out of billed banner clicks. Where an address must be remembered for a dedupe window it is stored only as a salted hash, never in the clear. Legal basis: legitimate interest in keeping the ranking and billing honest.
• API keys — if you create keys for your own software, we store a hash of each key, its name and when it was last used, so that you can tell them apart and revoke them. Legal basis: performance of a contract.
• Server measurements — player counts, uptime and status of listed game servers. This is telemetry about game servers, not about people.

Essential cookies are set without asking: a session cookie when you sign in, your language choice, and the cookie that remembers your answer to the analytics question below. There are no advertising or cross-site tracking cookies.

We use Google Analytics 4 to understand how the Service is used. Until you accept analytics cookies it runs in consent mode: no cookie is set and no identifier is stored, only aggregate, cookieless measurements are sent to Google. If you accept, Google sets its _ga cookies for up to two years so that repeat visits can be recognised; you can change your answer at any time by clearing the "ots-consent" cookie. IP addresses are truncated before storage. Google acts as our processor under its Ads Data Processing Terms; advertising features and personalisation are switched off.

The Service may additionally be measured with Plausible, a cookieless analytics tool that stores aggregate counts only and no personal identifiers.

We send transactional email only: address verification, password resets, ownership-claim instructions, purchase receipts, expiring-promotion notices and — for listing owners — a weekly summary of their own servers. Delivery is handled by Resend acting as our processor. We do not send marketing email and we never share your address for marketing.

We use a small set of processors to operate the Service: Stripe (payments), Resend (email delivery), Google (analytics, as described above), Cloudflare (which fronts the Service as its content delivery network and so sees the address of every request, and hosts uploaded images and screenshots in its EU storage region), and infrastructure providers hosting our servers in the EU. Some processors may transfer data outside the EEA; where they do, the transfer is covered by an adequacy decision or Standard Contractual Clauses. We do not sell personal data, and no data is used for advertising personalization.

The website reader we run ourselves (summarisation, fact extraction, screenshots, favicon and logo capture) processes the public websites of listed game servers, not personal data of visitors. Ownership checks read DNS records and public files on those websites for the same reason.

• Account data: for the life of the account, deleted on request.
• Purchase records: as long as required by Polish accounting and tax law.
• IP-derived rate-limit and vote-deduplication entries: expire automatically within days of the action they protect.
• Server measurements: kept indefinitely as historical statistics about game servers.

Under the GDPR you have the right to access, rectify, erase and port your personal data, to restrict or object to processing based on legitimate interest, and to withdraw consent where processing rests on it. Write to [email protected] and we will respond within the statutory deadline. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.

Accounts require users to be at least 16 years old, or the age of digital consent in their country if higher. We do not knowingly process the data of children below that age; if you believe such a child has created an account, contact us and it will be removed.

We may update this policy as the Service evolves; material changes are announced on the Service. The date above always reflects the current version.