← SXS Progress

Privacy

In short: SXS Progress is a private, non-commercial hobby project with no ads, no tracking and no income. It only stores the progress you enter, linked to a random anonymous ID. There are no accounts, names or email addresses. Data is stored on a server in Germany and deleted after two years without a visit.

1. Controller

Nikolai Rausch
Email: webmaster@teamboard.dev

This site is a private service without any intention to make a profit and without advertising. A legal notice (Impressum) under § 5 DDG is therefore not provided.

2. What data is processed

Your input: the progress data you enter in the tracker (e.g. level, class, server, season values), plus the times it was created, last changed and last visited.
Anonymous ID: the first time you save, the server creates a random ID and stores it in the cookie sxs_uid. The server only keeps a hash of this ID.
Transfer code: when you open it, a random code is created and stored so you can open your data on another device. Anyone who knows the code can see and change the linked data – don't share it.
Server directory: for every server you track with a name and launch date, these two values are added to a public server list so other players can find their server and its launch date. The list only shows server names, launch dates and how many players entered them – never which player entered what. When you change or remove a server, your entry changes with it.
Server comparison (optional, off by default): if you tick “Compare anonymously” for a server, your logged account levels for that server are converted to server days and used to calculate statistics for other players on the same server who have also ticked it: medians and ranges (10th to 90th percentile) per server day. Statistics are only shown for days with at least three players, and never individual entries or which player entered what. Only levels and server days are used, nothing else from your entries. Untick the box and your data is removed from the comparison with your next save.
Access logs: for technical reasons the reverse proxy in front of the site logs every request with IP address, time, requested address and browser identifier. These logs are used to run the service and prevent abuse; they are limited in size and overwritten automatically. To prevent abuse, IP addresses are also counted briefly in memory (e.g. number of new saves per hour) but not stored permanently. The application itself does not log IP addresses.

3. Purpose and legal basis

The data is processed only to provide the tracker and store your input (Art. 6(1)(b) GDPR) and to operate the site securely (Art. 6(1)(f) GDPR; legitimate interest in stability and abuse prevention). The optional server comparison is based on your consent when you tick it (Art. 6(1)(a) GDPR); you can withdraw it at any time by unticking it. Apart from that comparison there is no analysis, no profiling and no sharing for advertising.

4. Cookie and browser storage

sxs_uid – holds the anonymous ID so the server can find your data. HttpOnly, HTTPS only, valid for 400 days and renewed when you visit.
localStorage – a copy of your input in the browser so the tracker also works offline.

Both are strictly necessary for the service you request (§ 25(2) no. 2 TDDDG), so no consent is needed. No tracking or advertising cookies are used. You can delete the cookie and storage in your browser at any time – without your transfer code the data can then no longer be reached by you.

5. Hosting and recipients

The site runs on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in the Nuremberg data centre. Backups are additionally kept on a storage service of Hetzner Online GmbH in the EU. Fonts are served from this server; no third-party services (e.g. Google Fonts, analytics, CDNs) are used. The source links in the footer lead to other websites, which have their own privacy policies.

6. Retention

Your input, the ID, the transfer code and your server directory and comparison entries are deleted automatically if the site has not been opened with that ID for 730 days (2 years).
Backups are deleted after 7 days.
Access logs are overwritten continuously once their size limit is reached.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Since no names are stored, please send your transfer code with any request to webmaster@teamboard.dev so the data can be identified. You can also lodge a complaint with a data protection supervisory authority.