1. Controller
1.1Twari, L.M. Kuperusstrjitte 6, 9041 AJ Berltsum, the Netherlands, Chamber of Commerce (KvK) 89567323, is the controller for the personal data described here. Questions and requests go to privacy@getatlas.gg.
1.2This statement covers getatlas.gg, Atlas accounts and licences, the licence checks Panels make, and downloads of Atlas.
1.3Data a Panel holds about the players on a network stays on the servers of whoever runs that Panel, who is responsible for it.
2. Data we process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, password stored hashed, two-factor secret stored encrypted | The account and signing in | Contract | Until the account is deleted |
| Network name, number of nodes, billing period, licence keys | Licences | Contract | Until the account is deleted |
| Payments, invoice name, company, VAT number and address | Payments and invoices | Legal obligation | 7 years, as Dutch tax law requires |
| IP address, browser and time of each sign-in | Showing active sessions and preventing misuse | Legitimate interest | 30 days after the session ends |
| Licence id, panel version, install id, network name, node ids and hostnames, IP address | Renewing licence keys and stopping leaked keys | Contract and legitimate interest | 30 days |
| Staff changes to an account or licence, with the reason | A record of every staff action | Legitimate interest | As long as the invoice records of that licence |
| Emails we send | Proof that account and order emails were sent | Legitimate interest | 90 days |
| IP address and requested page or file | Delivering the website and downloads, and blocking abuse | Legitimate interest | 3 days |
2.1We send no marketing email, make no decisions about you by automated means alone, and do not sell personal data.
3. Recipients
| Party | Task | Role |
|---|---|---|
| Mollie B.V., the Netherlands | Processes payments | Independent controller for payment data |
| Moneybird B.V., the Netherlands | Creates and sends invoices | Processor |
| Scaleway SAS, France | Sends our emails and stores the files you download | Processor |
| BunnyWay d.o.o., Slovenia | Delivers the website and downloads, and runs our DNS | Processor |
| Hetzner Online GmbH, Germany | Hosts the website and the licensing service | Processor |
3.1Processors act only on our instructions, under a processing agreement.
3.2All personal data stays within the European Economic Area.
3.3We share data with authorities only when the law requires it.
4. Cookies
4.1getatlas.gg sets only functional cookies: one keeps you signed in, one follows a payment in progress for at most an hour, and one remembers your theme.
4.2Functional cookies need no consent. We use no analytics, advertising or tracking cookies.
5. Security
5.1We store passwords hashed and backup codes encrypted, offer two-factor sign-in to everyone and require it for staff, and encrypt all traffic.
6. Your rights
6.1You have the right to access, correct, delete and receive a copy of your data, and to object to or restrict its processing.
6.2You can download your data and delete your account under Profile and data in your account. Invoice records stay for 7 years because tax law requires them.
6.3For any other request, email privacy@getatlas.gg. We reply within one month.
6.4You may complain to the Autoriteit Persoonsgegevens or to the data protection authority in your own country.
7. Changes
7.1We email account holders before a change that affects how we use their data. The date at the top shows the current version.