Skip to content

Privacy Policy

Privacy Policy

In this Privacy Policy, we explain how we handle your personal data. The applicable legal framework is the current data protection law, in particular the General Data Protection Regulation (GDPR). With the exception of the service providers and third parties explicitly named in this Privacy Policy, we do not share any data with third parties. If you have any questions, please feel free to contact us.


Table of Contents

  1. Data Controller
  2. General Information
  3. Website Hosting (Netcup)
  4. Cookies, Pixels, and Consent Management
  5. Contacting Us
  6. Sweepstakes
  7. Affiliate Links
  8. Surveys
  9. System Emails and Newsletters (Brevo)
  10. Comments
  11. Registration and Login (incl. Discord Single Sign-On)
  12. Community Features, Raid Planner, and Game Data
  13. Data Backups (Hetzner)
  14. AI Chatbot
  15. Other Third-Party Services
  16. Rights of Data Subjects

1. Data Controller

The entity responsible for data processing on this website is:

Lukas Metzger
Hauptstr. 173
79365 Rheinhausen
Germany

Data Protection Officer:
Lukas Metzger
Email: [email protected]
Phone: +49 1573 7930766


2. General Information

Provision of Data Using our website generally does not require you to provide personal data by law or contract. If providing data is necessary for concluding a contract or if the user is obliged to provide personal data, we will inform you about this and the consequences of not providing the data within this Privacy Policy.

Data Transfer to Third Countries We may use service providers and third parties located outside the European Union (EU) and the European Economic Area (EEA). The transfer of personal data to such third countries occurs—unless the user has consented to the transfer—on the basis of an adequacy decision by the European Commission (Art. 45 GDPR) or provided that we have implemented appropriate safeguards to ensure data protection (Art. 46 GDPR). If an adequacy decision exists, we will point this out in this Privacy Policy. Otherwise, users can request a copy of the appropriate safeguards from us.

Automated Decision-Making Should we engage in automated decision-making, including profiling, we will inform you about this, the underlying logic, and the significance and envisaged consequences of such processing. Otherwise, no automated decision-making takes place.

Processing for Other Purposes Data is generally only processed for the purposes for which it was collected. Should it exceptionally be processed for other purposes, we will inform you about these other purposes prior to such processing.


3. Website Hosting (Netcup)

We host our website and the forum infrastructure with an external service provider. The servers we use are provided by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany.

Personal data collected on this website (e.g., IP addresses, log files, forum posts) are stored on Netcup's servers. With every visit to our website, the user's browser transmits various data, which are stored in log files:

  • Browser type and version
  • Operating system
  • Accessed pages and files
  • Amount of data transferred
  • Date and time of access
  • IP address (in anonymized form)

We use Netcup to provide a secure, fast, and reliable online service through a professional provider. Legal Basis: Art. 6(1)(f) GDPR. Log files are automatically deleted after 30 days. Data Processing Agreement (DPA): We have concluded a Data Processing Agreement with Netcup to ensure that data is processed solely according to our instructions and in compliance with the GDPR.


4. Cookies, Pixels, and Consent Management

We use technologies on our website to recognize the device being used (e.g., cookies, tracking pixels, mobile identifiers). These may be necessary for our website to function properly. The legal basis for the use of strictly necessary cookies is our legitimate interest (Art. 6(1)(f) GDPR).

We use cookies that are not necessary for the operation of our website to make our service more user-friendly or to analyze user behavior. The legal basis here depends on whether we ask for your consent.

Consent Management (Cookie Banner) We use our own self-hosted consent management tool (cookie banner) to obtain and document legally compliant consent for the use of cookies and technologies that require approval (e.g., Google Analytics). When you visit our website, certain scripts and cookies will only be executed after you have actively given your explicit consent via the banner.

Your preferences are stored locally in your browser (via a strictly necessary cookie or local storage) so that you do not have to be asked again on your next visit. Since this solution is self-hosted by us, no personal data is transferred to third-party providers as part of the consent management process. Legal Basis: Art. 6(1)(c) GDPR in conjunction with national telecommunications privacy laws.


5. Contacting Us

If you contact us, we process your details to handle your inquiry. Legal Basis: Art. 6(1)(f) GDPR (answering inquiries). An additional legal basis is Art. 6(1)(b) GDPR for pre-contractual measures. Data will be deleted as soon as the inquiry has been resolved.


6. Sweepstakes

We offer users the opportunity to participate in sweepstakes. We process the data provided by the user to determine and notify the winner. Legal Basis: Art. 6(1)(b) GDPR. Data will be deleted three months after the winner has been determined.


7. Affiliate Links

We participate in affiliate programs and place links to partner companies. If a user clicks on such an affiliate link, we may receive a commission. It is necessary to assign the user's activities to our offer (e.g., via cookies). Legal Basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (financing of our service).


8. Surveys

We conduct online surveys to improve our services. In personalized surveys, we use inputs to prevent multiple participations. Answers are evaluated anonymously. Legal Basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (improving our services).


9. System Emails and Newsletters (Brevo)

For sending system-relevant emails (such as double opt-in confirmations for registration, password resets, or forum notifications) as well as our newsletter, we use the service provider Brevo. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Your email address and, if applicable, your username are transferred to Brevo's servers for this purpose. Brevo logs the time and IP address for technical verification. Legal Basis: The sending of system emails is based on Art. 6(1)(b) GDPR (contractual fulfillment to provide your account). The sending of newsletters is based solely on your active consent according to Art. 6(1)(a) GDPR. You can revoke your consent at any time via the unsubscribe link in the emails. Data Processing Agreement (DPA): We have concluded a DPA with Sendinblue GmbH. Brevo Privacy Policy


10. Comments

When a comment is submitted on our website, we process the user's details as well as the date, time, and IP address to protect against misuse. Legal Basis: Art. 6(1)(f) GDPR.


11. Registration and Login (incl. Discord Single Sign-On)

Users can register for our central community system. We process the entered data (double opt-in via email) along with the IP address and timestamp. Data is deleted when the account is deleted, provided no retention periods apply. Legal Basis: Art. 6(1)(a), (b), or (f) GDPR.

Central Login via Discord (Single Sign-On) For our central forum software (Discourse on Prontera.info), we offer the option to register and log in using the "Discord" service. The provider is Discord Inc., 444 Rhode Island Street, Suite 400, San Francisco, CA 94107, USA.

Authentication runs through three stages:

  1. Discord — You authenticate with Discord. Only after you approve Discord's authorization prompt does Discord transmit your Discord User ID, username, email address, and avatar to our forum.
  2. Our forum (Discourse) — Discourse on Prontera.info, which we host ourselves (see "Website Hosting"), acts as the central identity provider (DiscourseConnect) and manages your community account (forum posts, group memberships).
  3. Our subdomains (Ro3.Prontera.info, RoZ.Prontera.info) — When you sign in on a subdomain, our forum passes your User ID, username, avatar, and group memberships to that subdomain via DiscourseConnect so it can display your logged-in state.

Data Minimization: Your email address is processed only by Discord and by our forum; it is not transferred to or stored on the subdomains. On a subdomain, your session is held in an encrypted, signed cookie, and only your User ID together with a cached copy of your username (for display) is stored alongside content you create there.

Legal Basis: Art. 6(1)(a) and (b) GDPR (your consent to using the Discord login and performance of the account relationship you request). The transfer to Discord Inc. in the USA takes place on the basis of the EU-U.S. Data Privacy Framework, under which Discord is certified; insofar as this does not apply, on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR). Discord Privacy Policy


12. Community Features, Raid Planner, and Game Data

For our main community on Prontera.info, we use the forum software Discourse. This also serves as the central login and management system for our subdomains (RoZ.Prontera.info and Ro3.Prontera.info).

When you log into the subdomains using your central Discourse account, we offer you the ability to manage specific game content as part of your active use. This includes:

  • Creating and saving character builds
  • Managing favorites
  • Participating in and organizing the Raid Planner
  • Writing forum posts and comments (on the main page)

Data Minimization The data generated when using additional features (like the Raid Planner or builds) on the subdomains is stored in a separate database. To link this data to your account, we store your Discourse User ID together with a cached copy of your username (for display) in this database. No email address or further profile data is duplicated there.

Content you make public (e.g., forum posts or explicitly shared builds) is visible to other users. Legal Basis: Art. 6(1)(b) GDPR, as processing is necessary to provide the community services and tools you have requested.

Deletion: If you delete your central user account, your private plan data and favorites in the separate database associated with your User ID will also be deleted. Public forum posts may remain in anonymized form so as not to disrupt the flow of discussions, provided no legal obligations prevent this.


13. Data Backups (Hetzner)

To ensure the security and continuous availability of our community, user data, and the separate databases (for character builds, favorites, etc.), we regularly create system backups (Art. 32 GDPR).

These backups are stored in encrypted form on the storage infrastructure of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Technical measures prevent the storage provider from viewing the encrypted data. Legal Basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting against data loss and securing the platform's operation. Data Processing Agreement (DPA): We have concluded a DPA with Hetzner.


14. AI Chatbot

We provide an AI chatbot to assist users with questions about the platform and game content. We process your text inputs as well as the date and time of the request. Please do not enter any sensitive data (passwords, addresses).

To generate the responses, we use the API from OpenRouter, through which we access the Gemini 2.5 Flash model by Google LLC. Your inputs are transmitted to OpenRouter LLC and Google. The providers explicitly do not use the API data to train their AI models, according to their current guidelines. Legal Basis: Art. 6(1)(f) GDPR (providing modern, interactive support). OpenRouter Privacy Policy


15. Other Third-Party Services

Google Analytics We use Google Analytics for website analysis. Provider: Google Ireland Ltd., Gordon House, Barrow St, Dublin 4, Ireland. We use Analytics with the anonymize IP extension. Analyzed data includes location, device, browser, and visited pages. Data is deleted after 14 months. Legal Basis: Art. 6(1)(a) GDPR (consent). Google Analytics Opt-Out | Google Privacy Policy

Google AdSense We use Google AdSense to display personalized advertisements. Provider: Google Ireland Ltd. Legal Basis: Art. 6(1)(a) GDPR (consent). Google AdSense Opt-Out | Google Privacy Policy

Cloudflare We use the Cloudflare Content Delivery Network to improve speed and security. Provider: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. Legal Basis: Art. 6(1)(f) GDPR. Cloudflare Privacy Policy

YouTube We embed YouTube videos in privacy-enhanced mode. Provider: Google Ireland Ltd. Legal Basis: Art. 6(1)(f) GDPR. YouTube Opt-Out | Google Privacy Policy


16. Rights of Data Subjects

Under the GDPR, data subjects have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Status of this Privacy Policy: July 23, 2026