Privacy Policy

• – Username. Provided by you when you register.
• – IP address. Recorded whenever your browser or client sends a request to the Core API.
• – Hardware identifier (HWID). A unique identifier derived by the Core client, submitted during the same interactions.

Your password and account recovery code are collected at registration but are only ever stored in hashed form (see Data security below). Support tickets also store the messages you send so your request can be handled.

• – IP addresses are used to detect and prevent abuse of the Core API. They are not used for any other purpose and are never publicly visible.
• – HWID is used for internal analytics of user behaviour — for example understanding how many devices are in use and spotting unusual account activity.
• – Username and support ticket content are used to operate your account and respond to the requests you make to our team.

We protect your data by restricting access to it, so that only the systems and staff that genuinely need it can reach it, and by rejecting unauthorized access attempts. Sensitive information such as passwords and recovery codes is stored only as a salted hash and is never kept in plain text.

Our handling of personal data follows applicable German and EU law, including the EU General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG), and our technical measures are oriented on the IT security recommendations of the German Federal Office for Information Security (BSI IT-Grundschutz).