PRIVACY POLICY

1. Data Controller
RogueGrind – Marco Stetefeldt
c/o Online-Impressum #9641
Europaring 90
53757 St Augustin
Email: roguegrind@gmail.com
Secondary Contact Channel

2. Your Rights
You have the right at any time to access (Art. 15 GDPR), rectify (Art. 16), erase (Art. 17), restrict the processing of (Art. 18), and receive a copy of (Art. 20) your stored data, as well as to object to its processing (Art. 21). To exercise these rights, please contact the email address given above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) - the competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

3. Login via Discord or Steam
Login is handled via Discord or Steam - we never process an email address or password ourselves as part of this. For Discord, only the identify permission scope is requested - this provides only your Discord user ID and Discord username, no email address and no further Discord profile data. For Steam, we receive only your SteamID and your publicly visible Steam display name via the open OpenID login standard. In both cases, the legal basis is Art. 6 (1)(b) GDPR (performance of a contract), since login is strictly necessary to use the game. During the login process itself, the respective provider processes your login data in accordance with its own privacy policy (Discord, Steam).

4. Stored Account and Game Data
The following data is stored on our server for your game account:

• an internal account ID and your login provider's identifier (Discord or Steam ID, pseudonymous, not your real name, no email address)
• your display name/nickname (initially taken from your Discord or Steam name, freely changeable afterward)
• optionally a self-selected gender
• your current and best-achieved Glory score
• the time of your last death in the game
• your account's creation date
• your game inventory (equipment/items, stored as a data blob so it can be restored on your next login)
• a temporary session identifier (session ID), newly generated on each login

5. What Other Players Can See About You
Not all of the data listed above is visible to other users. Specifically, the following is publicly viewable:

• Leaderboard (on the website, visible to everyone even without their own login): your display name, your best Glory score, and the time of your last death.
• Global Chat (in-game, visible to all players currently online): your display name and the chat text you write.

Not visible to other players: your gender, the contents of your inventory, your internal account ID, your Discord or Steam identifier, your session identifier, and your account's creation date. Your own profile page on the website (with display name, Glory, creation date, and inventory) is login-protected and viewable only by you, not by other users.

6. Storage Duration and Deletion
Your account and game data are stored for as long as your account exists. There is currently no automatic deletion feature in the game - to have your account deleted, please email the contact address given above.

7. Server Log Files
As with any web server, technical access data (including IP address, time of access, and page accessed) is temporarily stored in server log files when this page is accessed. The legal basis is the legitimate interest in the technically error-free and secure operation of the site (Art. 6 (1)(f) GDPR).

8. Cookies
This website uses two technically necessary cookies: a session cookie (PHPSESSID) to recognize your login status, and a cookie storing your preferred language (roguegrind_lang, valid for approximately 1 year). No tracking or advertising cookies are used.

9. No Commercial Use
This site is not operated commercially. Your data is not sold or shared for advertising purposes.

10. Donations via PayPal
The website links to a voluntary donation page (paypal.me/roguegrind). Following this link takes you away from our site to PayPal; the actual payment processing and the associated processing of your payment data take place entirely at PayPal and are subject to its own privacy policy (PayPal Privacy Center). We ourselves never receive or process any payment data.