Privacy by Design & Default
Protecting your privacy is a paramount priority on NTServer. We adhere to data minimization principles and collect only what is technically necessary to operate game servers and prevent fraud. We NEVER sell, lease, or share personal data with third-party advertisers.
§ 1: Data Controller & Scope
The data controller responsible for personal data processing on this website and NTServer game servers is the voluntary NTServer project administration. Inquiries regarding data privacy, account deletion, or access requests can be submitted anytime via our Support Ticket System.
§ 2: Categories of Personal Data Collected
• Username: Required to identify and manage your user account.
• Email Address: Used for account recovery, authentication, and security notices.
• Password: Stored strictly as an irreversible cryptographic hash.
To ensure server integrity, cheat detection, bug investigation, and trade dispute resolution, game servers record in-game transactions, character stats, inventory items, and chat logs. These logs are stored confidentially and accessed strictly when investigating suspected violations.
§ 3: Password Security & Cryptographic Hashing
Passwords are never stored or transmitted in plain text under any circumstances. All passwords are processed through robust cryptographic one-way hashing algorithms (SHA-512 with per-user salting / bcrypt). Neither server administrators nor developers have the ability to view your actual password.
§ 4: IP Addresses, Connection Logs & DDoS Mitigation
Each website connection and game login logs the client IP address and timestamp (Legal basis: Art. 6(1)(f) GDPR). This processing serves our legitimate interest in defending server infrastructure against DDoS attacks, brute-force attempts, multi-client abuse, and ban evasion.
§ 5: Cloudflare Turnstile (Anti-Bot Protection)
To protect our registration and login endpoints against mass-account automation, credential stuffing, and bot flooding, we employ Cloudflare Turnstile (provided by Cloudflare, Inc.). Turnstile verifies whether requests originate from human users without using invasive tracking cookies or user-facing ad profiles.
§ 7: Your Rights Under GDPR
• Right of Access (Art. 15 GDPR): Request a copy of personal data stored about you.
• Right to Rectification (Art. 16 GDPR): Request corrections of inaccurate profile data.
• Right to Erasure (Art. 17 GDPR): Request complete deletion of your account and personal records.
To exercise any of these rights, please submit a ticket via our Support System.