Privacy policy

1. Controller

The controller is FNLY IT UG (haftungsbeschränkt), Am Kraftwerk 23, 34582 Borken, Germany, represented by its managing director Alina Schmid. Email: support@hyplio.com.

2. Data protection officer

Under Art. 37 GDPR and Section 38 BDSG we are not obliged to appoint a data protection officer. Your requests are handled directly by the management.

3. This website

The website hyplio.com runs on servers we operate ourselves in the data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place with Hetzner. The connection is encrypted with TLS.

When you visit, your browser technically transmits your IP address, date and time, the page requested, the referrer and your browser and operating system. Our server processes this data only to deliver the page to you (Art. 6 (1) (f) GDPR). We do not store access logs with this data.

If you open hyplio.com without a language in the address, we redirect you to the matching language version. To do so we determine the country you are in from your IP address and take your browser language into account. We determine the country with a database on our own server (IP geolocation by DB-IP, https://db-ip.com, licence CC BY 4.0). Your IP address is neither passed to third parties nor stored for this. The legal basis is our legitimate interest in showing you the site in your language (Art. 6 (1) (f) GDPR).

If you choose a language version in the language switcher yourself, we store this choice in a cookie ("fnly_hyplio_locale", one year) so that we do not redirect you again on your next visit. We store the chosen colour scheme in your browser's local storage (entry "hyplio-theme"). Both are required for the function you expressly requested (Section 25 (2) no. 2 TDDDG) and contain only the code of your choice.

We serve fonts and images from our own server.

4. Consent and local storage

We store your choice in the consent banner in your browser's local storage (localStorage, entry "fnly-consent") so that the banner does not reappear on every page. This storage is strictly necessary for the service you requested and permitted under Section 25 (2) no. 2 TDDDG.

We load services that are not strictly necessary only with your consent under Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of every page. Withdrawal applies for the future.

5. Analytics with Matomo

If you consent to the "Statistics" category, we use the open-source software Matomo to measure how our website is used. The analytics server at statistik.fnly-group.com is operated by the FNLY Group in Germany; the data is not passed to third parties.

We process your IP address, shortened by its last two bytes before storage, the pages visited and time spent, the website you came from and details of device, browser and screen size. Matomo sets the cookies "_pk_id" (13 months) and "_pk_ses" (30 minutes).

We use the analysis to improve our content. The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Raw data is deleted after 395 days.

6. Contact by email and live chat

If you write to us, we process your details to handle your request (Art. 6 (1) (b) GDPR where a contract is concerned, otherwise (f)). Emails are kept in our mailbox at Microsoft 365 (Microsoft Ireland Operations Limited, Dublin, Ireland), with which a data processing agreement is in place. Live chat messages are stored in the customer portal with your account. We delete requests once they are resolved and no retention obligations apply.

7. Customer account and contract processing

Ordering, managing and billing your servers takes place in the customer portal at portal.hyplio.com. For registration and performance of the contract we process master and billing data such as name, email address, order and server data and payment information (Art. 6 (1) (b) GDPR). Commercial and tax retention periods, usually six to ten years, remain unaffected (Art. 6 (1) (c) GDPR).

8. Payment processing

We process payments through the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). The data needed for payment is transmitted to Stripe; we do not store full card details. The legal basis is Art. 6 (1) (b) GDPR.

9. Running the game servers

Your game servers run on servers of Hetzner Online GmbH in data centres in Germany and Finland, with which a data processing agreement is in place. Data that you or your players store on the server is processed on your behalf; the data processing agreement (DPA) applies to it.

10. AI assistant

For the AI assistant in the customer portal we transmit your request and, if you ask it to explain an error, the necessary excerpts of the server log to Anthropic, PBC (USA). Anthropic processes this content only to generate the answer and not for training. We base the transfer to the USA on standard contractual clauses under Art. 46 GDPR. The legal basis is Art. 6 (1) (b) GDPR where you use the assistant under your contract, otherwise our legitimate interest in quick help ((f)).

11. Recipients

Your data is received only by those who need it for the purposes stated: our staff within their duties and the service providers named, Hetzner, Microsoft, Stripe and Anthropic. With your consent the FNLY Group analytics server also receives data about your visit to this website. There is no disclosure for advertising purposes.

12. Your rights

• Access under Art. 15 GDPR
• Rectification under Art. 16 GDPR
• Erasure under Art. 17 GDPR
• Restriction of processing under Art. 18 GDPR
• Data portability under Art. 20 GDPR
• Withdrawal of consent under Art. 7 (3) GDPR with effect for the future

Right to object under Art. 21 GDPR: where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. Send requests to support@hyplio.com.

13. Complaints

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de.

14. Changes

We update this policy when HYPLIO or the legal situation changes. The version published here applies.