Privacy Policy

Pursuant to the GDPR (EU) 2016/679

1. Controller

The controller responsible for data processing on this website is:

Oliver Grimm
Donauweg 112, 63071 Offenbach am Main
Email: gamehubbot@rustflash.de

2. What Data We Collect

  • Discord OAuth data: Discord user ID, username, avatar URL, and email address (if provided by Discord) for login and account management.
  • TikTok OAuth data (optional): If you choose to connect your TikTok account, we collect and securely store your TikTok open ID, display name, and encrypted access/refresh tokens to enable content creator features.
  • Session data: Temporary session cookies used to maintain your session (no tracking).
  • Server configuration data: Settings you store for your Discord server, such as channel IDs, messages, and similar information.
  • Payment data: Processed exclusively via Stripe. We do not store full payment details. We only store the Stripe session ID, subscription tier, and payment status.
  • Server logs: IP addresses and technical request data are stored briefly in server logs and then deleted automatically.

3. Purpose of Processing

  • Provision and operation of the GameHub Bot service
  • Authentication via Discord OAuth 2.0
  • Processing payments for Premium subscriptions and the Platinum package
  • Technical communication, including support and transactional emails

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interests).

4. Disclosure to Third Parties

We do not share your data with third parties, except:

4a. Transfers to Third Countries (USA)

Stripe Inc. and Discord Inc. are based in the United States. When using these services, personal data may be transferred to the USA. The providers are certified under the EU-US Data Privacy Framework or rely on the European Commission's Standard Contractual Clauses (Article 44 et seq. GDPR) to ensure an adequate level of data protection.

4b. Hosting

This website and the service are hosted by an external hosting provider that processes data on our behalf (processing pursuant to Article 28 GDPR). This includes, among other things, technical access data such as IP address, timestamp, and requested resource in server logs. Hosting provider: SpexHosting, Ellenbogen 12, 20144 Hamburg, Germany.

5. Retention Period

Your data is stored for as long as your account remains active or you continue to use the service. After account deletion, personal data is deleted within 30 days unless statutory retention obligations apply, such as tax law requirements to retain payment-related data for 10 years.

6. Your Rights

Under the GDPR, you have the following rights:

  • Access to stored data (Article 15 GDPR)
  • Rectification of inaccurate data (Article 16 GDPR)
  • Erasure of your data (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Object to processing (Article 21 GDPR)

To exercise your rights, please contact: gamehubbot@rustflash.de
You also have the right to lodge a complaint with a data protection supervisory authority.

4c. Payment Processing & Stripe.js

On our pricing and checkout page, we integrate the script Stripe.js (js.stripe.com) from Stripe Payments Europe, Ltd. Stripe uses this script for secure payment processing and fraud prevention. In doing so, Stripe may set technically necessary cookies or similar technologies, including __stripe_mid and __stripe_sid, and may process information such as IP address, device data, and browser data. This processing is necessary to provide the service requested by you and to prevent fraud.

The legal basis is Section 25 (2) No. 2 TDDDG (strictly necessary for a service expressly requested by the user) as well as Article 6(1)(b) and Article 6(1)(f) GDPR. Further information: stripe.com/de/privacy and stripe.com/de/cookie-settings.

7. Cookies

We use technically necessary session cookies for the login process. On the pricing and checkout page, Stripe also sets the technically necessary cookies described above in Section 4c. We do not use any tracking or advertising cookies. Since all cookies used are strictly necessary for the services requested by the user, no consent is required under Section 25 (2) No. 2 TDDDG.

Last updated: June 11, 2026