Privacy Policy

Last updated: August 2025

The party responsible for data processing as defined by the GDPR is:

Sebastian Unterschütz
Göltzschtalblick 16
08236 Ellefeld, Germany
Email: admin@zb-server.de

This privacy policy applies to the services offered under the domain map.gtg-arma.de.

When you access our website, our system automatically collects data and information (log files) necessary for secure operation. This includes your IP address (anonymized), date and time of access, and your browser type. This data is not merged with other data sources and is deleted after a short period. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR).

We use technically necessary cookies to ensure the functionality of our website.

  • Session Cookie: When you log in via Discord, a session cookie is stored on your device. This cookie is essential for our server to recognize you on subsequent page views and keep you logged in. It contains a random ID and no direct personal data.
  • Consent Cookie: When you accept the cookie notice, a cookie (`cookie_consent`) is stored to save your choice for future visits.

These cookies are essential for the site's functionality. The legal basis for using these necessary cookies is our legitimate interest in providing a user-friendly and functional website (Art. 6(1)(f) GDPR). We do not use third-party cookies for marketing or analytics.

To use the dashboard and manage servers, you can log in with your Discord account. During this process, the following data is transmitted from Discord to us and stored in our database:

  • Your unique Discord User ID
  • Your Discord Username
  • The URL to your Discord Avatar

This data is required to verify your identity and manage your user account. The legal basis is the performance of a contract (user agreement) with you (Art. 6(1)(b) GDPR).

As a server owner, you can connect your Arma Reforger server to our service. The service processes two types of game data, which you provide:

  • Position Data (via API): Your game server sends player positions, vehicle status, and faction data to our API. This includes the in-game Player Name and their persistent GUID. We store this data to display it on the map and for the replay function. We also store the Player Name associated with the GUID for display purposes.
  • Event Data (via FTP/SFTP): Our system connects to your server to download log files containing damage and kill events. This data, including the GUIDs of the involved players, weapon names, and other details, is stored to be displayed on the map.

The processing of this game data is carried out on your behalf as the server owner. The legal basis for this processing is the performance of the service contract with you (Art. 6(1)(b) GDPR). You are responsible for ensuring that your players are informed about the use of this service.

The data is automatically deleted after the retention period has expired. The retention period is 7 to 31 days, depending on how you have configured your server.

When you configure a server in the dashboard, we store the settings you provide. This includes FTP/SFTP connection details. Passwords and SSH private keys are **always encrypted** before being stored in our database, using a strong encryption algorithm (AES-GCM). They are only decrypted in memory by our background workers to establish a connection to your server and are never exposed elsewhere.

Regarding your personal data stored by us, you have the following rights: right of access, rectification, erasure, restriction of processing, objection to processing, and the right to data portability. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, please contact us at the email address provided above.

You can delete your account and all associated data (your user profile, all servers you own, and any access rights granted to you) at any time via the dashboard.