Privacy Policy

How we collect, use, and protect your data.

Last Updated: February 7, 2026

1. Overview

We at Deduck ("we", "us") take data protection seriously. This Privacy Policy explains how we process personal data when you use our website, game server hosting, and related services.

Our primary business model is providing infrastructure. While we use third-party advertising partners to keep our services free, we never sell your data to brokers.

Data Controller Benedikt Zadow
Springbornstraße 114,
12487 Berlin, Germany
Email: privacy@deduck.de

2. Data We Collect

2.1 Account Information

When you register, we collect:

  • Email address (for authentication and notifications)
  • Username (for identification)
  • IP Address (for security and anti-fraud)
  • OAuth Tokens (if logging in via Discord/Google/GitHub)

2.2 Server & Game Data

To provide hosting services, we process:

  • Game World Data: Maps, player inventories, and configs.
  • Console Logs: Commands executed, chat messages, and errors.
  • Player Identifiers: Minecraft UUIDs and IP addresses of players connecting to your server.

Note: Console logs are retained for 7 days for debugging purposes and then automatically deleted, unless flagged for abuse.

3. Third Party Processors

We use trusted third-party providers to operate our infrastructure. We have Data Processing Agreements (DPAs) in place with all of them.

Provider Purpose Location
Hetzner Online GmbH Physical Server Infrastructure (Bare Metal) Germany / Finland
Cloudflare, Inc. DDoS Protection & DNS Global / USA
Stripe Payment Processing (Optional) USA / Ireland
Sentry Error Tracking USA

4. Your GDPR Rights

If you are located in the EEA, you have the following rights regarding your data:

Right to Access

Request a copy of all data we hold about you.

Right to Rectification

Correct inaccurate personal data.

Right to Erasure

Request deletion of your account and servers ("Right to be Forgotten").

Right to Portability

Receive your data in a structured, machine-readable format (JSON).

To exercise these rights, please email privacy@deduck.de. We will respond within 30 days.

5. Cookies & Advertising

We use cookies to ensure you get the best experience on our website and to serve personalized advertisements.

  • deduck_session
    Session Cookie Used to keep you logged in. Deleted when you close the browser.
  • XSRF-TOKEN
    Security Token Prevents Cross-Site Request Forgery attacks.
  • _gads
    Google AdSense Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our sites. You may opt out of personalized advertising by visiting Ads Settings or www.aboutads.info.