LogoKaneohe Bay Marine Corps

Privacy Policy

GDPR information on data processing

1. Controller

Mihail Drubarov
Walahfridstraße 18
36043 Fulda, Germany
Email: headquarters@kaneohebay-community.com

2. Scope and purposes of processing

We process personal data you provide when using our website/services, particularly for unban appeals and support. Where you choose Roblox login, we receive basic account identifiers from Roblox for verification.

  • Roblox OAuth: obtain basic identifiers (e.g., Roblox user ID and username) to authenticate and verify your account.
  • Appeals/Support: store your submissions and related communication for handling and documentation.
  • Operations/Security: server logs, rate limiting, abuse prevention.

3. Legal bases (Art. 6 GDPR)

  • Art. 6(1)(b) – performance of a contract / community rules (account login, handling appeals)
  • Art. 6(1)(f) – legitimate interests (service security, preventing abuse, documentation)
  • Art. 6(1)(a) – consent, where explicitly requested (e.g., optional notifications)

4. Recipients and processors

  • Roblox – identity verification via OAuth (no passwords are received).
  • Discord – staff authentication/communication.
  • Resend – transactional email delivery.
  • Hosting/ops providers (server, PM2, logging) as processors.

We conclude data processing agreements where required and rely on appropriate safeguards for third-country transfers (Art. 44 et seq. GDPR).

5. Retention

Account linkage data are stored while the connection is active and for the duration needed for moderation and documentation. Appeals/Moderation records are retained until case closure plus a reasonable retention window (e.g., 12 months) and then deleted or anonymized. Server logs are typically retained 14–30 days unless needed for security.

6. Your rights

  • Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18)
  • Portability (Art. 20) and objection (Art. 21)
  • Complaint to a supervisory authority (e.g., BfDI)

7. Cookies & logs

We use essential cookies (e.g., session/CSRF). No advertising/profiling cookies by default. If analytics are added later, we will update this policy and (where required) collect consent.

8. Unlinking Roblox

You can revoke the Roblox connection in our account settings or on Roblox. After unlinking, we remove Roblox-specific identifiers that are no longer required (subject to legal retention).

We are not affiliated with Roblox Corporation. We use Roblox solely for authentication in accordance with the Roblox Creator Third-Party App Terms.

Last updated: 16 August 2025