Privacy Notice (KVKK disclosure)
Version 2026-10-16. Draft until reviewed by a lawyer.
Who is responsible
Data controller: [to be filled in before launch]. Contact: [to be filled in before launch], or Contact admin after logging in.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| First and last name, phone, e-mail | To know who uses the tool, approve sign-ups by hand and contact you about your account. | Until you delete your account; rejected sign-ups 30 days. |
| In-game name, Discord username (optional) | The admin checks the in-game name by hand before approval. | Until you delete your account. |
| Password | Login. Stored only as an argon2id hash; nobody can read it. | Until you delete your account. |
| Login records (time, IP address, browser), devices | Security: lock out password guessing, show you your devices, detect account sharing. | 90 days. |
| Market pages your data client sends (prices, amounts, order ids, market, time) | To show checked prices to all members. Linked to your account so bad data can be traced and removed. | 7 days with your account; after that only daily counts. |
| Your game settings, hidden trades, messages to the admin | To calculate profit your way and to answer you. | Until you delete your account. |
We do not read anything else from your computer. The data client only reads Albion Online market pages.
Legal basis
Your explicit consent at sign-up and the performance of the service you ask for (KVKK art. 5). You can withdraw consent by deleting your account.
Where the data is stored and who receives it
- Servers: Hetzner Online (Finland, EU).
- E-mail delivery: Brevo (EU) receives your e-mail address and the e-mail text.
- Cloudflare (network protection) sees your IP address and the pages you open.
These are transfers abroad under KVKK art. 9. Prices you send (without your name) are also shared with the public Albion Online Data Project by your own data client, as with any user of that client.
Your rights (KVKK art. 11)
You may ask whether your data is processed, get a copy, ask for correction or deletion, learn who received it, and object to processing. Most of this you can do yourself in your Profile (edit, delete account). For anything else, use Contact admin; we answer within 30 days.