Privacy
Privacy Policy
This policy explains what data we collect, why we collect it, the legal bases we rely on (EU GDPR / Swiss FADP), how long we keep it, who we share it with, and your rights.
1) Overview & scope
Cloudzor (incl. TMCDN) provides hosting and delivery for user-submitted content (e.g., TrackMania maps, skins, replays). This policy covers visitors and registered users interacting with our websites, APIs, and CDN endpoints.
2) Controller & contact
The data controller is Cloudzor. For privacy questions or requests, contact support@cloudzor.ch.
3) What we collect
- Account data: email; password (securely hashed; never stored in plain text).
- Content: files you upload (maps, skins, replays), titles, descriptions, folder names, share settings.
- Operational logs: IP address, user agent, basic request metadata, download/view counters.
- Support data (optional): messages, attachments you send via forms or email.
4) Why we collect it (purposes)
- Provide the service: authentication, uploads, delivery, link sharing, abuse prevention.
- Improve reliability: routing, performance optimization, error diagnostics.
- Safety & compliance: detect abuse, respond to legal requests, enforce policies.
- Support: handle tickets and user inquiries.
5) Legal bases (EU GDPR / Swiss FADP)
- Contract necessity: to create an account, store files, and deliver them as requested.
- Legitimate interests: security, abuse/fraud prevention, service reliability, metrics.
- Legal obligation: to comply with valid court orders and applicable laws.
- Consent (where applicable): e.g., optional communications or features explicitly opted into.
7) Sharing & processors
We do not sell personal data. We may share minimal data with service providers (e.g., hosting/CDN, email) strictly to operate the platform, under data-processing terms. We may disclose data when legally required (e.g., valid court orders).
8) Data location
Primary hosting is in the EU (e.g., Germany, Austria). When transfers outside your jurisdiction are necessary, we use appropriate safeguards (e.g., SCCs) where required.
9) Security
- Passwords are hashed using industry-standard algorithms.
- Access is restricted on a need-to-know basis.
- Transport encryption (HTTPS) is used where available.
- Backups and audit trails exist for operational integrity.
- No system is 100% secure; we continuously improve safeguards.
10) Retention
We keep personal data only as long as needed for the purposes above or to comply with legal obligations. Typical durations:
| Category | Examples | Typical retention | |
|---|---|---|---|
| Account | Email, hashed password | For the lifetime of the account; deleted on request unless legal retention applies. | Account lifetime |
| Content | Uploaded files & metadata | As long as stored by you; removed on delete. | Until deletion |
| Operational logs | IP, headers, timestamps | Security, diagnostics, rate-limiting. | ~30 days (longer if required) |
| Support | Tickets, attachments | Case handling, compliance. | As needed / legal holds |
11) Your rights
- Access, rectification, deletion (erasure), and portability.
- Restriction or objection to processing where applicable.
- Withdraw consent where processing relies on consent.
- Complain to a competent supervisory authority.
To exercise rights, email support@cloudzor.ch. We may need to verify your identity.
12) Children
Our service is intended for users aged 16+ (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children under applicable limits. Parents/guardians can contact us to request deletion.
13) Changes to this policy
We may update this policy to reflect features, legal requirements, or operational changes. Material updates will be communicated via the site or email when appropriate. Continued use constitutes acceptance of the revised policy.
14) Data Processing Addendum (DPA)
If you require a DPA (e.g., for business use), contact us. We can provide controller-processor terms and SCCs where required.
15) Contact
Questions about privacy? Email support@cloudzor.ch. For copyright or abuse matters, use /abuse and /appeal.