Privacy Policy

Last updated: October 2026

Who is responsible

Nico Schmid
c/o Autorenglück #17212
Albert-Einstein-Straße 47
02977 Hoyerswerda
Germany
Email: info@asteria-hub.com

Hosting and server logs

AsteriaHub is hosted by Hetzner Online GmbH in Germany, with a data processing agreement in place. When you visit the site, the server logs your IP address, the time, the page requested, the referring page and your browser's user agent. These logs are deleted after 14 days.

Your account and content

When you register and use AsteriaHub, we store your username, email address, password (as a hash), the profile details you add and the content you create, such as posts, messages, listings, markers, guild data, applications, reports and support tickets. Content in public areas is visible to other visitors.

This data is kept as long as your account exists. Messages in public chat, guild chat and deal chat may be deleted after 90 days; pinned messages are kept. If you delete your account, it is removed 24 hours later. Content you created may stay on the site without any link to your account.

IP addresses

We store your IP address when you register or log in, to protect accounts, prevent abuse and detect ban evasion. It is deleted after 90 days. For banned accounts it is kept until the ban ends.

We also log security-related account actions, like logins and password or email changes. The IP addresses in this log are deleted after 90 days.

Statistics

We count page visits using the page, the time, your user ID if you are logged in, and a pseudonymised value made from your IP address. Your IP address itself is not stored. These records are deleted after 30 days; only totals are kept.

We also keep daily totals of search requests, requests with no results, displayed result counts and server response times. Search terms and visitor identities are not saved in these totals. For a one-word alphabetic search left unchanged for 1.5 seconds or followed by a result click, we temporarily keep the term and whether results appeared, without your account or IP. Staff see terms only after at least three such searches. These records are deleted after 30 days. Phrases, filters, numbers, email addresses and URLs are excluded from term reporting.

When you open a search result, we count its content type. A random response ID prevents duplicate counts and is removed after 30 days; the daily content-type totals remain. We do not attach a query or account to this count.

If you choose “Request a wiki article” after searching, we store the topic you submit, how often that same topic was requested, its review status and dates. We do not store your account or IP address with it. Wiki page editors can review these requests. Open topics are removed after 365 days without another request, linked topics after 180 days and dismissed topics after 90 days.

When you edit the wiki, an unsent draft is saved in your browser and, when available, on our server under your account. The server draft includes your article text and is deleted after a successful submission, when you discard it, or after 90 days without changes. Editor statistics separately record a random session ID, your account ID, and editing milestones without article text; session records are deleted after 30 days and only combined counts appear in the traffic dashboard.

Attack protection

Requests to addresses typically used by automated attacks are logged with the IP address and any login data entered. These logs are deleted after 7 days.

Moderation

To enforce our Terms of Service, we process reports, warnings, bans, appeals and other moderation actions. Moderators can see content and reports where needed. Moderation records are kept as long as the account exists. Records that remain after an account is deleted are no longer linked to it.

Email

Account verification, password resets, username reminders and data exports you ask to be emailed are sent through Brevo (Sendinblue SAS, France), which receives your email address and the email's content.

Discord

We use Discord (Discord Netherlands BV and Discord Inc., USA) for:

Data may be transferred to the USA under the EU-U.S. Data Privacy Framework.

Translation

When you press Translate on a post, comment or chat message, its text is sent to Microsoft Azure AI Translator (Microsoft Ireland Operations Ltd.) from our server in an EU region. No account data or IP address is sent with it. Microsoft states that Translator does not store the text it receives. We keep the translation, without any user ID, so the next reader gets it without a new request; unused translations are deleted after 90 days. We also count how many characters you translate each day, to apply a daily limit. You can change the language in Settings.

Push notifications

If you turn on push notifications, we store a subscription for your browser along with its user agent. Notifications are delivered through your browser provider's push service. The subscription is deleted when you turn notifications off or delete your account.

Cookies and local storage

We only use cookies that the site needs to work:

Settings, drafts and cached data are kept in your browser's local storage. We do not use advertising cookies. Because this local storage is needed for the site to work, no consent is required (§ 25(2) TDDDG).

Legal bases

Your rights

You can request access to your data, and have it corrected, deleted, restricted or transferred (Art. 15–20 GDPR). You can export your data and delete your account yourself in your settings.

You can object at any time to processing based on our legitimate interest, for reasons relating to your situation (Art. 21 GDPR).

You can also complain to a data protection supervisory authority.

To use your rights, email info@asteria-hub.com.