Privacy Policy

How we collect, use, and protect your data.

Last Updated: February 7, 2026

1. Overview

We at Deduck ("we", "us") take data protection seriously. This Privacy Policy explains how we process personal data when you use our website, game server hosting, and related services.

Our primary business model is providing infrastructure. We do not sell your personal data to advertisers or third-party data brokers.

Data Controller Deduck Hosting
Musterstraße 123, 10115 Berlin, Germany
Email: privacy@deduck.de

2. Data We Collect

2.1 Account Information

When you register, we collect:

  • Email address (for authentication and notifications)
  • Username (for identification)
  • IP Address (for security and anti-fraud)
  • OAuth Tokens (if logging in via Discord/Google/GitHub)

2.2 Server & Game Data

To provide hosting services, we process:

  • Game World Data: Maps, player inventories, and configs.
  • Console Logs: Commands executed, chat messages, and errors.
  • Player Identifiers: Minecraft UUIDs and IP addresses of players connecting to your server.

Note: Console logs are retained for 7 days for debugging purposes and then automatically deleted, unless flagged for abuse.

3. Third Party Processors

We use trusted third-party providers to operate our infrastructure. We have Data Processing Agreements (DPAs) in place with all of them.

Provider Purpose Location
Hetzner Online GmbH Physical Server Infrastructure (Bare Metal) Germany / Finland
Cloudflare, Inc. DDoS Protection & DNS Global / USA
Stripe Payment Processing (Optional) USA / Ireland
Sentry Error Tracking USA

4. Your GDPR Rights

If you are located in the EEA, you have the following rights regarding your data:

Right to Access

Request a copy of all data we hold about you.

Right to Rectification

Correct inaccurate personal data.

Right to Erasure

Request deletion of your account and servers ("Right to be Forgotten").

Right to Portability

Receive your data in a structured, machine-readable format (JSON).

To exercise these rights, please email privacy@deduck.de. We will respond within 30 days.

5. Cookies

We use minimal cookies strictly necessary for the operation of the site. We do not use third-party tracking pixels (like Facebook Pixel).

  • deduck_session
    Session Cookie Used to keep you logged in. Deleted when you close the browser.
  • XSRF-TOKEN
    Security Token Prevents Cross-Site Request Forgery attacks.