YOUR DATA

Privacy

Last updated: 27 October 2026

Data controller

Rico Sonntag, Waldstraße 48, 75181 Pforzheim, Germany.
E-Mail: rico.sonntag@asd-sonntag.de

Website and hosting

This website and the account service run on a STRATO VPS. Visits involve processing technically necessary connection data, including IP address, time and requested URL. This supports delivery, operational security and troubleshooting under Article 6(1)(f) GDPR. Technical error logs are retained for no more than 7 days. The operator and hosting provider access operational data as needed for their duties.

Your account

When you register, we store your username, player name, salted password hash, recovery key hash and account creation and login timestamps. Your first launcher sign-in links your local player profile. Session identifiers are stored on the server only as hashes. Account data provides the account and game features you request (Article 6(1)(b) GDPR).

Online features also process necessary friends, guild, ranking, event and match data. When signed in to the launcher, your complete save, including collections, progress and local profile settings, is transferred to the server to sync between your PCs. Other players may see your player name and associated game stats. Account data is retained while you use the service. Request deletion via the contact address; after verifying your identity, we remove the data unless legal retention duties or necessary legal claims prevent this. Backups are overwritten after no more than 7 days.

Essential cookies

We use the cookie lumy.session for sign-in (up to 7 days) and lumy.csrf to protect against forged form requests (browser session). These are necessary for your requested sign-in and secure account use. Access to your device is based on section 25(2)(2) TDDDG; subsequent processing is based on Article 6(1)(b) or (f) GDPR. We use no advertising or analytics cookies. Fonts and images load from this server.

Contact by email

If you email us, we process your sender address and message to handle your request. The basis is Article 6(1)(b) GDPR for service-related requests or (f) for general enquiries. Messages are deleted once the matter is resolved and further retention is unnecessary.

Your rights

Subject to legal requirements, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Contact us at the address above. You may complain to a data protection authority, in particular the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Providing account details is voluntary, but necessary to create an account. You can view the website and download the launcher without an account. There is no automated decision-making with legal effects.

Legal bases: General Data Protection Regulation and § 25 TDDDG.