Kryndora Privacy Policy

This Privacy Policy explains what personal data Kryndora processes, why, and on what legal basis, in line with the EU General Data Protection Regulation (GDPR). Kryndora is a private, non-commercial hobby project. We process as little data as possible and we never sell your data.

1. Controller

The controller responsible for data processing under the GDPR is the private operator of Kryndora. As this is a private, non-commercial project, you can reach us by email at support.kryndora@gmail.com.

2. What data we process

• Account data: your username and a securely hashed password.
• Email address: only if you add one to your account for two-factor authentication (2FA) or email verification.
• Content you create: games, models, images, sounds and other content you upload.
• Profile data: optional details such as display name, bio and avatar.
• Chat and social data: messages you send in chat, your friends list, and your online/play status.
• Technical data: your IP address and basic connection details, processed temporarily in server logs to run and secure the service.

3. Purposes and legal bases

We process your data on the following legal bases (Art. 6 GDPR):

• Providing your account and the service (login, games, chat, friends, uploads, avatar rendering) – to perform the usage relationship, Art. 6(1)(b) GDPR.
• Security, abuse and spam prevention, server logs, moderation, and enforcing our Terms of Service – legitimate interests, Art. 6(1)(f) GDPR.
• Sending security codes (2FA, email changes) – Art. 6(1)(b) and (f) GDPR.
• Optional features you explicitly enable (such as connecting Discord for Rich Presence) – consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.

4. Cookies

Kryndora only uses essential cookies that are strictly necessary to keep you signed in and run the site. This is permitted without consent under § 25(2) TDDDG. We do not use advertising or third-party tracking cookies.

5. Hosting

Kryndora is hosted with Hetzner Online GmbH (Germany), which processes data on our behalf as a processor (Art. 28 GDPR) on servers located in Germany/the EU.

6. Recipients and international transfers

To provide certain features, limited data is shared with the following services:

• Google / Gmail (USA) – solely to send security emails such as 2FA codes.
• Discord (USA) – only if you use Discord Rich Presence, to show your play status.

This may involve a transfer to the USA (Art. 44 et seq. GDPR). These providers rely on appropriate safeguards (EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework adequacy decision). Content you choose to make public (such as your profile, username and published games) is visible to other users. We only disclose data to authorities where required by law.

7. How long we keep it

We keep your account data for as long as your account exists. Server logs are kept only for a short time for security and troubleshooting. If you delete your account, your personal data is removed, except where we must keep something to comply with the law.

8. Your rights

Under the GDPR you have the right to:

• access (Art. 15), rectification (Art. 16), erasure (Art. 17) and restriction (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent you have given, with effect for the future (Art. 7(3)).

To exercise any of these, just email support.kryndora@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Deleting your account

You can delete your account yourself at any time under Settings → Account → “Danger Zone” → “Delete Account”. During deletion you can optionally also have the content you uploaded removed from the Kryndora servers.

10. Children

Kryndora is a community for a wide audience, including younger users. If you are under the age required in your country to consent to data processing, please use Kryndora with the involvement of a parent or guardian. If you believe a child's data has been provided without proper consent, contact us and we will remove it.

11. Changes

We may update this Privacy Policy over time. The date at the top shows when it was last changed. Continued use of Kryndora after changes means you accept the updated policy.

Questions about your privacy? Email support.kryndora@gmail.com