--- title: "Privacy policy — Skullrock Gaming" description: "Information on the processing of personal data on skullrock-gaming.com and by the services shared by all Skullrock Gaming fan sites. Last updated: 7 October 2026." lang: en canonical: https://skullrock-gaming.com/hub/privacy/ --- [← Back to the legal hub](/hub/) SKULLROCK GAMING / LEGAL # Privacy policy Information on the processing of personal data on skullrock-gaming.com and by the services shared by all Skullrock Gaming fan sites. Last updated: 7 October 2026. ## 1\. Controller The controller within the meaning of the General Data Protection Regulation (GDPR) is: Marco Foof Joachim-Friedrich-Straße 25 10711 Berlin, Germany Email: [privacy@skullrock-gaming.com](mailto:privacy@skullrock-gaming.com) No data protection officer has been appointed, as the legal requirements for doing so are not met. ## 2\. Scope This policy applies to skullrock-gaming.com and to the services shared by all Skullrock Gaming fan sites, currently [satisfactorybase.com](https://satisfactorybase.com/) and [valheimbase.com](https://valheimbase.com/). Features offered by only one site are described by that site in its own supplement (section 13). We only process the data required to run the sites and the features you use. You can read public content without an account. An account is optional and free of charge. ## 3\. This website (skullrock-gaming.com) skullrock-gaming.com introduces the gaming network, its projects and these legal texts. This website uses no cookies, tracking, analytics or advertising services. There are no user accounts, contact forms or external embeds here, and we do not use local storage. Fonts and images are delivered with the website; no requests are made to Google Fonts or other external services. The website is provided through Cloudflare Pages (provider: see section 5). When you visit, Cloudflare processes technically necessary connection data, in particular your IP address, the requested address, the time of access, and device and browser information transmitted by your browser. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is in providing the website securely, reliably and efficiently. We do not maintain our own visitor database or measure audience reach for this website. **Contact by email:** If you email us, we process your email address, the contents of your message and any other information you provide in order to respond to your enquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for enquiries concerning a contract or pre-contractual measures. We retain this data only for as long as necessary to handle the enquiry or as required by statutory retention obligations. ## 4\. Hosting of the fan sites (Hetzner) The fan sites run on servers of **Hetzner Online GmbH**, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. This is also where the databases with account and content data are stored. Database backups are kept encrypted in the EU. **Legal basis:** Art. 6(1)(b) GDPR where your account is concerned, otherwise Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). ## 5\. Cloudflare (delivery, protection and file storage) All sites sit behind the content delivery network of **Cloudflare** (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare handles DNS, caching, TLS encryption and protection against attacks (WAF, DDoS) and acts as a proxy for this: every request passes through Cloudflare, which necessarily processes the IP address and request data. We store uploaded files, such as profile pictures, in non-public object storage (**Cloudflare R2, EU region**). They are only delivered through our sites, never directly from storage. Cloudflare operates a global network; processing outside the EU, particularly in the USA, is possible. Cloudflare provides a [Data Processing Addendum](https://www.cloudflare.com/cloudflare-customer-dpa/) with standard contractual clauses and participates in the EU-US Data Privacy Framework. More information is available in [Cloudflare’s privacy policy](https://www.cloudflare.com/privacypolicy/). **Legal basis:** Art. 6(1)(f) GDPR (secure and fast delivery), and Art. 6(1)(b) GDPR for files belonging to your account. ## 6\. Server logs Each time a fan site is accessed, we process in server logs the IP address of the accessing device, the date and time of access, the requested address, HTTP method and status code, the amount of data transferred, the referrer URL (if sent by the browser) and the browser type, browser version and operating system (user agent). **Purpose:** technical delivery, stability and security (detection of attacks and errors). **Legal basis:** Art. 6(1)(f) GDPR. **Retention:** logs are rotated by size and are usually overwritten after a few days to weeks. They are only analysed when there is a specific reason. ## 7\. Sign-in with Google and Discord On our fan sites you can sign in with an existing Google or Discord account. All sites use the same sign-in app named **“Skullrock Gaming”**; the provider shows you this name when you sign in. You are redirected to the provider and give your approval there. We then receive via OAuth 2.0: the provider-internal account ID, your email address, your name or display name and the address of your profile picture (avatar), as well as an access token that we only use to confirm the sign-in. We use this to create your account on the respective site or to sign you in to your existing account. The provider learns that you are signing in to a Skullrock Gaming site. What data the provider processes itself is governed by its privacy policy: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: [policies.google.com/privacy](https://policies.google.com/privacy) Discord Netherlands B.V., Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands: [discord.com/privacy](https://discord.com/privacy) **Legal basis:** Art. 6(1)(b) GDPR (sign-in method chosen by you). Data may be transferred to the USA; Google and Discord are certified under the EU-US Data Privacy Framework or use standard contractual clauses. **Retention:** until you delete your account or unlink the provider. ## 8\. Email delivery (Resend) We send confirmation, sign-in, password and notification emails through the service provider **Resend** (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Emails are sent via Resend’s EU region (eu-west-1, Ireland). Resend processes the recipient address, subject, content, delivery status and time. A data processing agreement is in place with Resend; where data reaches the USA, we rely on the EU-US Data Privacy Framework or standard contractual clauses. **Legal basis:** Art. 6(1)(b) GDPR (performance of the user agreement) or point (f) (account security). ## 9\. Error tracking (Bugsink) To detect errors, we run a **self-hosted** error tracking service (Bugsink) on our own servers at Hetzner in Germany. No external error service is used and no data is passed on to third parties. When an error occurs, we store technical details such as the error message, the affected page, browser type, time and, where applicable, a user ID. **Legal basis:** Art. 6(1)(f) GDPR (interest in error-free operation). **Retention:** until the configured retention period expires. ## 10\. Recipients, third-country transfers and retention We only pass on personal data to the service providers named above (Hetzner, Cloudflare, Resend and the sign-in providers you choose) and to the services named in the site-specific supplements, or where we are legally obliged to do so. Contracts pursuant to Art. 28 GDPR are in place with processors. For transfers to third countries, we rely on the EU-US Data Privacy Framework or standard contractual clauses. Unless stated otherwise, we only store data for as long as the purpose requires: account data and content until the account is deleted, server logs until rotation. After an account is deleted, data may remain in backups for the duration of the backup retention period; backups are not used for production. ## 11\. Your rights Subject to the applicable legal conditions, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can change or delete much of your account data yourself in the account settings of the respective site. **You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).** Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, email [privacy@skullrock-gaming.com](mailto:privacy@skullrock-gaming.com); please use the address registered with us. ## 12\. Right to lodge a complaint You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for the operator is the Berlin Commissioner for Data Protection and Freedom of Information: Alt-Moabit 59–61 10555 Berlin, Germany [mailbox@datenschutz-berlin.de](mailto:mailbox@datenschutz-berlin.de) [www.datenschutz-berlin.de](https://www.datenschutz-berlin.de/) ## 13\. Site-specific supplements Each fan site may offer features not described here, for example its own audience measurement, cookies and consent, comments, file uploads or additional sign-in methods. Each site describes these in its own privacy policy, which supplements this policy: SatisfactoryBase: [satisfactorybase.com/datenschutz](https://satisfactorybase.com/datenschutz) ValheimBase: [valheimbase.com/datenschutz](https://valheimbase.com/datenschutz) ## 14\. Security, no automated decisions, changes All connections to our sites are encrypted with TLS. Access to servers and databases is restricted to the operator. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. We update this policy when our processing or the legal situation changes; the version published here applies. An overview of all legal texts is available on the [legal hub](/hub/).