mcploot
Sign in

Privacy policy

Last updated: 28 October 2026

This policy explains what personal data mcploot.com processes, why, and your rights. The controller under the GDPR is SPARQ VENTURES UG (haftungsbeschränkt), Straße 73 49, 13125 Berlin, Germany, info@sprqvntrs.com. See the imprint for the full details.

Browsing without an account

You can use every directory page without an account. When you load a page, the server receives your IP address, the requested page, the timestamp and your browser user agent. We use this data to deliver the page and to protect the site against abuse. This is our legitimate interest (Art. 6(1)(f) GDPR). Server logs rotate and are not used to build profiles.

We do not use analytics, advertising or tracking cookies. If you do not sign in, we set no cookies.

Your account

When you sign up, we store your email address, your chosen display name and a hash of your password. We never store the plain password. We send an email to confirm your address. We also send password reset emails upon request. We process this data to provide your account (Art. 6(1)(b) GDPR).

When you sign in, we set one session cookie. It keeps you signed in, is strictly necessary and needs no consent.

To stop password guessing and spam signups, we log each sign-in and signup attempt with the email address, IP address and timestamp. We delete these records after 30 days.

Ratings and comments

When you rate an item or post a comment, we link it to your account.

  • Your comments are public. Anyone can read them with your display name and the date.
  • Your ratings appear only in aggregate totals and averages. We never display who rated.
  • You can report a comment. Only site staff can see reports.
  • Staff can hide comments. A comment with several reports stays hidden until staff review it.

Who processes your data

  • Hosting: Hetzner Online GmbH, Gunzenhausen, Germany. The server and database run in Hetzner's data center in Ashburn, Virginia, in the United States. Hetzner processes data on our behalf under a data processing agreement.
  • Email delivery: Amazon Web Services EMEA SARL, via its email service in Frankfurt, Germany. It receives your email address and the content of our account emails.

We do not sell your data. We do not share it with third parties unless required by law.

How long we keep data

We store your account data, ratings and comments until you ask us to delete your account. We delete sign-in and signup records after 30 days. Database backups exist for a short time and are then overwritten.

Your rights

You have the right to access, correct, delete, restrict, object to the processing of, and export your data. To use these rights, or to delete your account, email info@sprqvntrs.com from your registered address. Account deletion also deletes your ratings and comments.

You may also lodge a complaint with a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).