Last updated: 13.05.2025

This Privacy Policy explains how we (FurryCraft, we, us) collect, use, and protect your personal data when using our forum.

Data Controller:
Jonas Pötter (private individual)
c/o Online-Impressum.de #28171
Europaring 90
53757 Sankt Augustin, Germany
Email: kontakt@furrycraft.net

2. Types of Personal Data We Process (Art. 13(1)(c) GDPR)

• Registration data: Username, email, password (hashed)
• Profile data: Avatars, optional profile fields
• Content data: Posts, private messages, comments, uploads
• Usage data: Last login, login attempts, visited pages
• Technical data: Browser, OS, IP address, device info
• Cookies/session data: Login status, CSRF tokens
• Server logs: IP, user agent, accessed URLs (via web host)

3. Purpose of Processing (Art. 13(1)(c), Art. 5(1)(b) GDPR)

• Providing access to the forum and community features
• User registration and account management
• Spam and abuse prevention (e.g., StopForumSpam)
• Community moderation and rule enforcement
• Performance monitoring and security

4. Legal Bases for Processing (Art. 6 GDPR)

• Art. 6(1)(a) GDPR: Your consent (e.g. registration)
• Art. 6(1)(b) GDPR: Contract-like use of forum services
• Art. 6(1)(f) GDPR: Legitimate interest (e.g. moderation, logs)

5. Data Retention (Art. 5(1)(e) GDPR)

We store data as long as necessary for the forum to operate. Posts and messages are retained unless manually removed. Accounts may be deleted due to inactivity after extended time.

6. Cookies (Art. 6(1)(f) + ePrivacy Directive)

We use essential cookies for:

• Login session management
• CSRF protection and form validation
• User preferences (e.g. theme, language)
• We use cookies such as mybb[lastvisit] and mybb[session] to remember your login state and track thread read status.

7. Server Logs (Art. 6(1)(f) GDPR)

Our hosting provider automatically logs access data (IP, time, browser info, request URLs) to ensure performance and security. These logs are retained temporarily and deleted automatically.

8. Third Parties & External Content (Art. 13(1)(e))

• YouTube: Embedded videos may load third-party cookies and track interactions.
• Google Fonts: Fonts may be loaded from Google servers during site visit.
• StopForumSpam: Used at registration to prevent spam accounts (IP/Email checked)
• Discord links: Optional integrations outside our control

9. Data Deletion Requests (Art. 17 GDPR - Right to Erasure)

You may request deletion of your user account and profile data at any time by emailing admin@furrycraft.net. Public posts may be anonymized instead of deleted to preserve discussions.

10. Your Rights under GDPR (Art. 15–21)

• Access to your stored data
• Rectification of incorrect data
• Erasure (right to be forgotten)
• Restriction of processing
• Data portability
• Right to object
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
• If you believe your data is being unlawfully processed, you have the right to lodge a complaint with the competent supervisory authority in your country.

11. Security Measures (Art. 32 GDPR)

• SSL (HTTPS) encryption
• Regular server software updates
• Password hashing (bcrypt)
• Spam filters & moderation tools

12. Age (Art. 8 GDPR)

Our forum is not directed at users under 13 years old. We do not knowingly process data of children under 13.

13. Changes to This Policy

We reserve the right to change this policy at any time. The most recent version will always be available on this page.

14. Indication of no automated decision-making (Art. 22 GDPR)

• We do not use automated decision-making or profiling as defined in Article 22 of the GDPR.

15. Retention period (Art. 22 GDPR)

• Server logs are retained for 14 days by our hosting provider, unless required longer for legal purposes.
  User accounts remain active indefinitely unless manually deleted or inactive for more than 2 years.

If you have any questions about this policy, please contact us at kontakt@furrycraft.net.

Thank you for being part of the FurryCraft community!