PRIVACY

Privacy policy

What we collect, why we collect it, how long we keep it, who may process it and what rights you have.

No ads
no trackers
Minimal
retention
October 7, 2025
last updated

What this policy covers

Visitors, registered users, websites, APIs and CDN endpoints.

GDPR & FADP aligned

We follow core privacy principles such as transparency, minimal data and user rights.

No ads / no trackers

We do not run third-party ad tracking. Only essential cookies and local storage where needed.

Security-first

Password hashing, access control and operational safeguards protect the platform.

Section

Overview & scope

TMCDN provides hosting and delivery for user-submitted content such as TrackMania maps, skins and replays. This policy covers visitors and registered users interacting with our websites, APIs and CDN endpoints.

Section

Controller & contact

The data controller is TMCDN / Cloudzor. For privacy requests or questions, contact hi@tmcdn.de.

Section

What we collect

Account data: email address and password hash.
Content: uploaded files, metadata, folder names and share settings.
Operational logs: IP address, user agent, timestamps and request metadata.
Support data: messages and attachments you send to us.

Section

Why we collect it

To operate the service, including login, upload, delivery and sharing.
To improve reliability, diagnostics and performance.
To prevent abuse, fraud and policy violations.
To handle support requests and legal obligations.

Section

Cookies & local storage

We use essential session cookies or local storage for login and core functionality. We do not run third-party ad trackers. If optional analytics are added later, we will present a clear choice first.

NameTypePurposeRetention
sessionEssentialKeeps you signed in and protects the session.Session / short-term
prefsFunctionalStores UI preferences like theme or layout.Until cleared

Section

Sharing & processors

We do not sell personal data. We may share limited data with service providers such as hosting, CDN or email providers only where needed to operate the platform and under appropriate data-processing terms. We may also disclose data when legally required.

Section

Data location

Primary hosting is in the EU. If data transfers outside your jurisdiction become necessary, we use appropriate safeguards where required.

Section

Security

Passwords are hashed using industry-standard algorithms.
Access is limited on a need-to-know basis.
HTTPS is used where available.
Backups and audit trails support operational integrity.
No system is 100% secure, but safeguards are continuously improved.

Section

Retention

We keep personal data only as long as needed for the purposes above or to comply with legal obligations.

CategoryExamplesTypical retention
AccountEmail, password hashAccount lifetime
ContentUploaded files and metadataUntil deletion
Operational logsIP, headers, timestampsAbout 30 days unless needed longer
SupportTickets and attachmentsAs needed / legal holds

Section

Your rights

Access, correction, deletion and portability where applicable.
Restriction or objection to processing where applicable.
Withdrawal of consent where processing depends on consent.
Complaint to a competent supervisory authority.

To exercise your rights, email hi@tmcdn.de. We may need to verify your identity.

Section

Children

Our service is intended for users aged 16+ or the age of digital consent in your jurisdiction. We do not knowingly collect personal data from children below the applicable limit.

Section

Changes

We may update this policy to reflect product, legal or operational changes. Material updates may be communicated through the site or email where appropriate.

Section

DPA

If you need a Data Processing Addendum for business use, contact us. We can provide controller-processor terms where required.

Section

Contact

Questions about privacy can be sent to hi@tmcdn.de. For copyright or abuse matters, use /abuse and /appeal.

This page is for general information and does not constitute legal advice.