Privacy
In short
The reference itself consists of pre-generated files: no analytics, nothing from third-party servers, no advertising. Two areas go beyond that — the list/tile toggle remembers your choice in your browser, and an account of your own means logging in via Discord. Both are described separately below. I still need no consent banner: what I store is technically necessary for the function you are using.
Controller
Mathias Will
Europaring 90
53757 Sankt Augustin, Deutschland
Email: info@ragnadex.com
What happens when you visit
As with any website request, your browser transmits technical information to the server delivering this site — including your IP address. For this site, however, logging at the hosting provider is switched off: no access logs are created, and I therefore cannot evaluate any. This does not affect what the provider processes for the technical operation and security of its own systems; I have neither influence over nor access to that.
Access counting
I count how often each page is requested. For this I run Matomo on the same server that delivers this site (https://ragnadex.com/matomo/). It is my own installation: the numbers never leave this server, and no other company is involved.
The counting works without JavaScript. At the end of every page there is a one-by-one pixel image whose address names the page you just opened. When your browser fetches that image, the request is counted. Nothing else happens.
Which determines what I cannot do: without JavaScript no cookie is set and nothing is stored in your browser. I do not see how long you stay on a page, where you click, or how large your screen is. Several requests in quick succession are grouped into one visit; for this Matomo forms a checksum from your truncated IP address and your browser identifier. That checksum changes daily — on another day, or on a later visit, you are not recognised as the same person. No consent is needed for this: nothing is stored on your device and nothing is read from it.
Your IP address is truncated by two blocks before Matomo does anything with it at all — 11.22.33.44 becomes 11.22.0.0. Even the rough estimate of which country a request comes from now uses only that truncated address; the full one is neither stored nor processed. The evaluation is not publicly accessible. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in recognising which content is needed and which is not.
Object to counting
You may object to being counted at any time (Art. 21 GDPR). Use the checkbox below — it stores a marker in your browser that I honour on every request. That marker is the only thing I store for this, and it contains nothing about you.
Equally effective if you would rather store nothing: any ad or script blocker, or the “Do Not Track” setting in your browser — Matomo honours it. The site works exactly the same in every case.
When you report something
The “Report an error” link at the bottom of every page lets you send me a wrong value, a fault or a wish. You need no account and no login for that.
I store only what you enter yourself:
- the kind of report (error, wish, feedback)
- your text
- the page you reported from
- your contact details — only if you provide any
Your IP address is not stored. So that a form without a login does not get buried by machines, I instead store a checksum of your IP address and a key that changes daily. It cannot be turned back into the IP address and serves only to detect whether an unusual number of reports arrive from the same place within an hour. The next day the same IP address yields a different checksum.
The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in finding errors in the data and improving the site. Reports are deleted once they have been dealt with and nobody needs to come back to them — after twelve months at the latest. If you provided contact details and want them removed, a message to the address above is enough.
What this site does not do
Measured against the delivered build, not merely asserted:
- no cookies and no browser storage on the reference pages — exceptions below
- no third-party analytics — counting happens on my own server, see above
- no embedded advertising, no ad scripts, no cross-site tracking — the single advertising link sits on the support page and does nothing until you click it
- no fonts, maps or videos from third-party servers
- no login required to use the database — it is fully accessible without an account
Remembering your view
On the listing pages you can switch between list and tiles. I store that choice in your browser under the name “ansicht” (localStorage) — a single word, either “liste” or “kachel”. It never leaves your device, I never see it, and it says nothing about you. You can delete it at any time via your browser’s site data; the page then behaves as on a first visit.
Amazon affiliate links
The support page carries a link to Amazon. It is marked as advertising: if you buy at Amazon through it, I receive a commission without the price changing for you. As long as you do not click it, nothing happens — it is an ordinary link, not an embedded script and not a tracking pixel.
If you do click it, it first passes through a page of mine (/markt/amazon.php). That page only decides which Amazon marketplace suits you, and to do so it looks at your browser’s language setting and the language of the page you came from. Both are evaluated and immediately discarded. I store none of it and keep no log of it.
After that you are at Amazon, and Amazon’s privacy policy applies from there. Amazon sets an identifier by which a later purchase is attributed to me. I never learn who you are or what you bought. All that reaches me is a statement with quantities and amounts. The legal basis for the link is Art. 6(1)(f) GDPR, my legitimate interest in funding this site; for everything that happens at Amazon afterwards, Amazon is the controller.
Payment via Stripe
A payment is only triggered if you buy something. I use Stripe for this (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). When you click “Checkout” you leave my site; everything after that — card details, billing address, payment — happens at Stripe.
I pass on only your Discord ID, so Stripe can tell me whose account to unlock. In return I receive a receipt number and the notice that payment was made. I never see your payment details. The legal basis is Art. 6(1)(b) GDPR — performance of the contract you enter into with me. Stripe’s own privacy notice: stripe.com/privacy.
Account and Discord login
The marketplace has been out of service since 8 September 2026 — no new listings can be posted. Listings posted before then are still held by me and disappear as soon as the corresponding account is deleted. Today you only need an account for dark mode; logging in is via Discord.
From Discord I request the “identify” scope only. That gives me — and I store — three items:
- your Discord ID (a number), to recognise you and let you delete your own listings
- your Discord display name, because it is shown above your listing — otherwise nobody could contact you
- the file name of your Discord avatar (not the image itself)
I deliberately do not request your email address, nor your server or friend lists. The legal basis is Art. 6(1)(b) GDPR: without these details a listing can neither be attributed nor answered.
What becomes public with a listing
When posting a listing you choose the name under which you want to be reachable: your Discord name, your in-game name, or both. Only the chosen name appears with your listing; if you choose “in-game only”, your Discord name never leaves my server.
Your listing also shows how long ago you were last on this site — as a coarse band (“here now”, “here today”, “this week”, “not for a while”), never as a time of day. That lets an interested party see whether it is worth writing to you now. The exact timestamp stays on my server and is updated at most every 15 minutes.
The “show as online” switch is gone now that the marketplace is out of service. Its last value is still on your account and is shown nowhere.
I do not query your Discord online status. That would be technically possible, but it would expose your presence outside this site — a deliberate decision against it on 1 September 2026. What you reveal about yourself here, you reveal yourself.
If you choose your Discord name, it is linked to your Discord profile with your listing — anyone interested reaches it in one click and can approach you. For this your Discord ID is delivered to visitors of this site. Whether you receive messages from strangers there is decided solely by your settings at Discord.
If you choose your in-game name, none of that happens: your Discord name and Discord ID stay on my server, and only the in-game name appears with your listing. You are then reachable in the game.
For the login I set a cookie named “ragnadex_markt” lasting 30 days. It contains your account number with me and a checksum, nothing else — no name, no tracking, no sharing. It is technically required for the login (§ 25(2)(2) TDDDG) and therefore needs no consent. Logging out deletes it immediately.
You can have your account deleted at any time — write to the address above; deleting the account also removes any listings you posted before 8 September 2026. If you never log in, no account is created and nothing about you is stored.
When logging in you are redirected to Discord. Discord Inc.’s privacy policy applies there; I have no influence over their processing.
Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Please contact the address above. You may also lodge a complaint with a data protection supervisory authority.
If this changes
As soon as a payment function, advertising or analytics is added, this site will process more than it does today. This policy will be extended beforehand — not afterwards. That is how I handled the marketplace.