Privacy

PRIVACY POLICY

What we collect, why we collect it, legal bases (GDPR / Swiss FADP), retention, sharing and your rights — in plain language.

No ads
NO TRACKERS
Minimal
RETENTION
October 7, 2025
LAST UPDATED

GDPR & FADP aligned

We follow EU GDPR and Swiss FADP principles: transparency, minimal data, and user rights.

No ads / no trackers

We don’t run third-party ad tracking. Only essential cookies/local storage for core features.

Security-first

Industry-standard password hashing, access controls, and operational safeguards.

Jump to section
Search + TOC

Navigate instantly

Search sections and navigate instantly.

SECTION

Overview & scope

TMCDN provides hosting and delivery for user-submitted content (e.g., TrackMania maps, skins, replays). This policy covers visitors and registered users interacting with our websites, APIs and CDN endpoints.

SECTION

Controller & contact

The data controller is TMCDN / Cloudzor. For privacy questions or requests, contact support@cloudzor.ch.

SECTION

What we collect

    Account data: email; password (securely hashed, never stored in plain text).
    Content: files you upload, metadata, folder names, share settings.
    Operational logs: IP address, user agent, request metadata, counters.
    Support data (optional): messages and attachments sent via forms/email.

SECTION

Why we collect it (purposes)

    Provide the service: authentication, uploads, delivery, link sharing, abuse prevention.
    Improve reliability: routing, performance optimization, diagnostics.
    Safety & compliance: detect abuse, respond to legal requests, enforce policies.
    Support: handle tickets and user inquiries.

SECTION

Legal bases (EU GDPR / Swiss FADP)

    Contract necessity: to create an account, store files and deliver them.
    Legitimate interests: security, abuse/fraud prevention, reliability, metrics.
    Legal obligation: comply with valid court orders and applicable laws.
    Consent (where applicable): optional communications or opt-in features.

SECTION

Cookies & local storage

We use essential session cookies or local storage for login and basic functionality. We do not run third-party ad trackers. If we introduce optional analytics, we will present a clear choice.

NAME
TYPE
PURPOSE
RETENTION
session
Essential
Keeps you signed in; CSRF protection.
Session / short-term
prefs
Functional
Stores UI preferences (theme, layout).
Until cleared

SECTION

Sharing & processors

We do not sell personal data. We may share minimal data with service providers (hosting/CDN, email) strictly to operate the platform, under data-processing terms. We may disclose data when legally required.

SECTION

Data location

Primary hosting is in the EU (e.g., Germany, Austria). When transfers outside your jurisdiction are necessary, we use appropriate safeguards (such as SCCs) where required.

SECTION

Security

    Passwords are hashed using industry-standard algorithms.
    Access is restricted on a need-to-know basis.
    Transport encryption (HTTPS) is used where available.
    Backups and audit trails exist for operational integrity.
    No system is 100% secure; we continuously improve safeguards.

SECTION

Retention

We keep personal data only as long as needed for the purposes above or to comply with legal obligations. Typical durations:

CATEGORY
EXAMPLES
TYPICAL RETENTION
Account
Email, hashed password
Account lifetime (removed on delete, unless legal retention applies)
Content
Uploaded files & metadata
Until deletion
Operational logs
IP, headers, timestamps
≈ 30 days (longer if required)
Support
Tickets, attachments
As needed / legal holds

SECTION

Your rights

    Access, rectification, deletion and portability.
    Restriction or objection to processing where applicable.
    Withdraw consent where processing relies on consent.
    Complain to a competent supervisory authority.

To exercise rights, email support@cloudzor.ch. We may need to verify your identity.

SECTION

Children

Our service is intended for users aged 16+ (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children under applicable limits. Parents/guardians can request deletion.

SECTION

Changes to this policy

We may update this policy to reflect features, legal requirements or operational changes. Material updates may be communicated via the site or email where appropriate.

SECTION

Data Processing Addendum (DPA)

If you require a DPA (for business use), contact us. We can provide controller-processor terms and SCCs where required.

SECTION

Contact

Questions about privacy? Email support@cloudzor.ch. For copyright or abuse matters, use /abuse and /appeal.

This page is for information only and does not constitute legal advice. We recommend consulting counsel for specific obligations.
Tip: Press / to search sections.
TrackMania CDN — Share maps, skins & replays