Privacy

1. Controller

Nico Fischer-Widy
Obereiderstr. 14
24768 Rendsburg
Germany
Email: cactusmodding@gmx.de

2. Website delivery through Cloudflare

This website is delivered through Cloudflare services. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

When you access the website, Cloudflare processes technically necessary connection and traffic data. This may include your IP address, the requested URL, the time of access, routing and security information, and details about your browser and device. This processing serves the secure, stable and efficient delivery of the website and the prevention of abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

Cloudflare may also process data outside the European Economic Area. For such transfers, Cloudflare describes the EU–U.S. Data Privacy Framework and standard contractual clauses as transfer mechanisms. Further information: Cloudflare privacy policy.

3. Technically necessary Cloudflare cookies

Depending on the Cloudflare security features active for this website, Cloudflare may set technically necessary cookies, for example for bot protection, security checks or preventing abusive access. Cloudflare describes these cookies as necessary for the requested security feature.

Cactus Modding does not use advertising, analytics or marketing cookies in its own website code. Any technically necessary Cloudflare cookies serve only to deliver and secure the website.

4. Visits, likes and downloads

Cactus Modding maintains simple counters for visits, likes and downloads. Its own statistics system stores only the respective counter values. No names, email addresses, user accounts or persistent browser identifiers are created for this purpose.

Visit and like status are handled only temporarily in the memory of the open page. Reloading the page or making a new visit may therefore result in another count. Independently of this, transmitting each request generates the connection data processed by Cloudflare described in section 2.

4a. Cactus forum

Posts, topics and the chosen display name are public. Guests need no account; guest names are not reserved. For members we store the username, a salted password hash, account role and creation time. Passwords are not stored in plain text. No email address is required.

Sign-in uses an essential session cookie that expires after seven days. The forum database stores only a hash of the random session identifier. To limit spam and sign-in attempts, salted IP address hashes and attempt counters are stored briefly; no plain-text IP addresses. Rate-limit windows last up to one hour. Expired entries are removed on the next write request.

Members can edit their posts and delete their account. After account deletion, posts remain without the previous account name. Remove personal information from posts beforehand or contact us. Hidden topics and posts remain stored for moderation. Contact the email address above for access or deletion requests.

5. Contact by email

If you contact us by email, we process the information you send to answer your message. Depending on its content, processing is based on Article 6(1)(b) GDPR for pre-contractual or contractual communication, or Article 6(1)(f) GDPR for other enquiries. Our legitimate interest is handling and answering your message. The data is deleted once it is no longer needed for the communication and no statutory retention obligations apply.

6. External links

Our website may contain links to external services. A connection to the respective provider is established only when you open such a link. The respective provider is responsible for subsequent processing on the destination website.

7. Your rights

Subject to the statutory conditions, you have rights including access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection to certain processing (Article 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. For Schleswig-Holstein, this is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel. Email: mail@datenschutzzentrum.de.

8. No automated decision-making

This website does not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

9. Last updated

Last updated: October 2026