Draft; not yet approved.
This page says what personal data the service at https://host.buildat.org keeps, why, and for how long. The controller is Perttu Ahola, who can be reached at host@buildat.org.
| What | Why | How long |
|---|---|---|
| Your Starport ID's identifier for this site, and the name it gives | To know who you are and which servers are yours (the contract) | While you use the service, and until you ask us to delete it |
| Your e-mail address, if you give one | To tell you what matters about your servers (the contract) | Until you remove it or ask us to delete it |
| An application for an invitation: what you wrote | To decide on it (steps before a contract) | 6 months after it is decided |
| A sign-in cookie | To keep you signed in to the control panel. It is the only cookie, and there is no tracking | 30 days, or until you sign out |
| Your servers and their data | That is the service itself (the contract) | Until the server is removed, then 3 days in the snapshots and 14 days in the backups |
| Network addresses in the web servers' logs | Security and finding faults (legitimate interest) | 14 days |
| A server's output, which may name its players and their addresses | Shown to you in the control panel, for finding faults (the contract) | 7 days, inside the server |
| A notice from the report form: what it says, the e-mail you give, and your network address | To handle it, and to keep the form from being misused (legal obligation under the Digital Services Act) | As long as handling it and any dispute over it needs |
When your server keeps data about its players, such as their accounts and what they have built, you are its controller, and we process it for you. We look at it only to handle a notice, when the law requires it, or to keep the service running.
Everything is kept in the EU: the servers at Scaleway in France, and the backups on our own machines in Finland. Nothing is sold or given to anyone else, except where the law requires it.
You may ask to see, correct or delete what we have about you, or object to its use, by writing to host@buildat.org. You may also complain to the Finnish data protection authority, the Data Protection Ombudsman (tietosuoja.fi).