🎮Kostenlose Gameserver für Minecraft, Terraria, CS & Discord · Ohne Kreditkarte!
CoalByte Logo
CoalByte
Kundenbereich
DSGVO KONFORM (EU 2016/679)

Privacy Policy & GDPR

Transparenz über Datenerhebung, Sicherheit und Ihre europäischen Datenschutzrechte auf CoalByte Cloud.

Updated: September 2026
•Version 2.4 (GDPR Compliance)
Regulation (EU) 2016/679EU-Only Data CentersZero Payment DataRight to Erasure
01

Who We Are & Data Controller

The data controller in the sense of the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) is CoalByte Cloud, operating compute infrastructure strictly hosted within the European Union.

We are firmly committed to user privacy, implementing Privacy by Design and Privacy by Default across all our systems.

02

GDPR Principles (Art. 5 GDPR)

All data processing activities carried out by CoalByte adhere to Article 5 of the GDPR:

Lawfulness, fairness, and transparency: Data is processed lawfully and clearly with user notice.
Purpose limitation: Collected strictly to provide free gaming and bot servers.
Data minimization: We collect only the absolute minimum required data.
Accuracy: User data can be kept accurate through dashboard settings.
Storage limitation: Data is retained only as long as necessary.
Integrity and confidentiality: Advanced encryption and node isolation protect against unauthorized access.
03

Personal Data We Collect

Because CoalByte is 100% free, we NEVER collect financial information, credit card numbers, or billing details. Data collected is strictly limited to:

Discord OAuth Profile Data: Unique Discord user ID, username, display name, email address, and avatar image URL.
Email Authentication: Email address and cryptographically hashed password (passwords are never stored in plaintext).
Technical Connection Data: IP addresses (used for Anycast DDoS routing and filtering), browser User-Agent strings, and API audit logs.
Server Configuration Data: Assigned game port, server settings, and instance crash logs.
Support Inquiries: Tickets opened on Discord and questions sent to the AI Debugger.
05

Purposes of Data Processing

Data collected is used exclusively for:

Provisioning, managing, and maintaining free game and bot server instances.
Facilitating seamless and secure Discord OAuth sign-ins.
Automatic server crash diagnostics via our AI Debugger.
Anycast DDoS traffic filtering and network attack mitigation.
We never sell, rent, or trade your personal data to data brokers or advertising networks.
06

Data Security & EU-Only Centers

EU Infrastructure: Our server nodes and databases reside exclusively in Tier-3/Tier-4 data centers within the European Union (Germany, France, Finland, and Poland).

Technical & Organizational Measures (TOMs):

TLS 1.3 encryption across all network communication.
Kernel-level container sandboxing (Linux namespaces and cgroups).
Supabase Row Level Security (RLS) ensuring strict per-user database isolation.
Multi-layered Anycast DDoS filtering at L4-L7 network layers.
07

Your Rights Under the GDPR

As an EU data subject, you are entitled to the full scope of GDPR rights:

Right of Access (Art. 15 GDPR): Obtain confirmation and a copy of personal data held about you.
Right to Rectification (Art. 16 GDPR): Update profile details anytime via Dashboard -> Profile.
Right to Erasure ('Right to be Forgotten', Art. 17 GDPR): Request complete deletion of your account and servers.
Right to Restriction of Processing (Art. 18 GDPR) & Right to Data Portability (Art. 20 GDPR).
Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.
Right to Lodge a Complaint: File a complaint with your national supervisory authority (e.g. ANSPDCP, BfDI, CNIL, or your local EU authority).
08

Cookie Policy

CoalByte Cloud uses only strictly necessary technical cookies:

NEXT_LOCALE: Remembers your selected language preference (ro, en, de, it, fr, es).
Supabase Auth Session Token: Maintains secure encrypted login status.

We do not use third-party marketing cookies, tracking pixels, or cross-site fingerprinting.

09

Data Retention & Erasure

We retain personal data only while your account remains active.

Upon requesting account deletion, active database records are wiped immediately, and automated security backups purge data within 30 days.

Firewall security logs are automatically flushed or anonymized every 14-30 days.

10

Exercising Your Rights & DPO Contact

To exercise your GDPR rights (data export or account deletion), contact us via:

Opening a dedicated ticket on our Discord community server.
Emailing our Data Protection team at [email protected].

We respond to all verified GDPR requests within 30 days without charge.

Fragen zum Datenschutz?

Unser Support-Team und die Community sind rund um die Uhr auf Discord für Sie da.

Datenschutz-Team Kontaktieren