Contractual document
Privacy policy
Last updated: October 28, 2026
On this page
Data controller
BasiX LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States. For any question about your data: [email protected].
Data processed and purposes
Data you store with us
The files you upload, the log events your game server sends and the contents of your databases (including their daily backups, kept seven days) are processed on your behalf and on your instructions: for that content you are the controller and we act as your processor. Only send the player data your server actually needs, and tell your players about it.
What we do not collect
No advertising tool, no tracking pixel and no third-party analytics are used on this site. Audience is measured in-house: we record the pages viewed, the referring site, campaign tags, country, device type, browser and language, under an identifier that changes every day; IP addresses are not stored and page-level records are deleted after 90 days. When you create an account, how you first reached the site and the country you signed up from are attached to it. We do not sell or rent any data. We collect no name, postal address or phone number to create an account: an email address is enough. Payment card details are handled by the payment provider and never reach our servers.
The cookies this site sets are listed in the cookie policy.
Visitor IP addresses
Serving a file produces a log line containing the visitor’s IP address. Those addresses are truncated as they are written — the last octets are removed — so that they cannot identify a person. These logs are used only to measure the volume served per account per day, and are kept for thirty-one days.
Retention periods
- Account and files: until the account is deleted.
- Sign-in sessions: thirty days.
- Delivery logs: thirty-one days.
- Security logs: twelve months.
- Accounting records and tax registers: for the period required by the applicable regulations, which may be up to ten years.
Sub-processors
Files and the database are hosted exclusively within the European Union. Some sub-processors are established in the United States; the corresponding transfers rely on the European Commission’s standard contractual clauses.
Sub-processors are listed above by category. The named list, with each company’s identity, is sent on request to any user who asks for it at [email protected].
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. You can exercise these rights by writing to [email protected]. You will receive an answer within one month.
You may also lodge a complaint with the data protection authority of your country of residence.
Security
Traffic is encrypted end to end with TLS. API keys are never stored in the clear: only their fingerprint is kept. The database is not reachable from any public network.