Dockside

Join Discord

Privacy Policy

Last updated: 11 October 2026

Dockside is a private, non-commercial fan site for an Old School RuneScape clan. This policy explains which personal data is processed when you visit this website, and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Controller

Tobias Hiltner
Friesenstraße 66
90441 Nürnberg
Germany
Email: hiltner.tobias@pm.me

2. The short version

  • This site uses no advertising, no analytics and no tracking.
  • Visitors do not get any cookies from this site. Only your privacy choice is saved in your browser.
  • Fonts, scripts and images are served from our own web space.
  • Content from Discord is only loaded after you agree. The Twitch player is only loaded after you click it.
  • Clan data from Wise Old Man and RuneProfile is fetched by our server, not by your browser.

3. Hosting and server logs

This website is hosted in Germany by Uberspace (Jonas Pasche, Kaiserstr. 15, 55116 Mainz, Germany). To deliver the pages, the web server has to process your IP address, the date and time of the request, the requested address, and possibly the referring page and the browser you use. According to Uberspace, IP addresses are masked in its web server logs, so the logs cannot be traced back to you.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. More information: Uberspace privacy policy.

Storage period: we do not keep any log files of our own. Uberspace does not state a fixed retention period for its web server logs; according to its privacy policy, the logs contain only masked IP addresses, and data is deleted as soon as the purpose of the processing has been achieved.

4. Cookies and local storage

This website does not set cookies for visitors, and it does not use cookies or similar techniques for statistics, advertising or profiling.

  • Your privacy choice (dockside_consent). When you accept or reject external content in the cookie notice, your choice and its date are saved in the local storage of your browser. This entry stays on your device and is not sent to us. It is kept until you change your choice or clear your browser data. It is strictly necessary to remember your decision (Section 25(2) no. 2 TDDDG; Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).
  • Staff login. Clan staff who log in to the administration area get the standard WordPress session cookies. These are strictly necessary for the login and are not set for normal visitors.
  • Third parties. Discord and Twitch may set their own cookies or use similar techniques, but only after you have agreed (Discord) or clicked the player (Twitch). See sections 6 and 9.

5. Cookie notice and your consent

On your first visit a notice asks whether external content may be loaded. You can accept or reject; both choices are equally easy and nothing is pre-selected. Until you accept, no external content is loaded. You can change or withdraw your choice at any time with effect for the future via Cookie settings, which is also linked at the bottom of every page. Rejecting has no disadvantage other than that the Discord list is not shown.

6. Discord widget (“Online in the Hideout”)

The front page can show who is currently online on our Discord server. If you agree, your browser loads this list directly from the servers of Discord. In doing so, Discord receives your IP address and technical details of your browser. We send the request without cookies, login data or the address of the referring page, and we do not embed any scripts from Discord.

Provider: Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands; parent company: Discord Inc., 444 De Haro Street #200, San Francisco, CA 94107, USA. Discord processes data in the USA. According to its privacy policy, Discord participates in the EU-U.S. Data Privacy Framework and uses standard contractual clauses. More information: Discord privacy policy.

Legal basis: your consent, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via Cookie settings.

If you are a member of our Discord server: the list shows the display name, online status and current game of members who are online, as provided by Discord’s public server widget. Legal basis: Art. 6(1)(f) GDPR (presenting the community). If you do not want to appear, set your Discord status to invisible or contact us.

7. Wise Old Man (clan and player statistics)

Leaderboards, hiscores, achievements, competitions, the clan log, ranks and the member list are based on data from Wise Old Man, an independent progress tracker for Old School RuneScape. Our server requests this data and stores it temporarily. Your browser does not connect to Wise Old Man when you view our pages, so no data about you as a visitor is passed on. Only when you click a link to Wise Old Man do you leave our site, and its own privacy rules apply.

If you are a clan member: we display your RuneScape character name together with game statistics such as levels, experience, boss kill counts, achievements, clan rank, name changes and competition results. This is in-game data that is publicly available through the official hiscores and Wise Old Man. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is presenting the clan and running its events. You can object at any time, see section 13.

Rank check: if you enter a character name in the rank check, the name is sent to our server and looked up at Wise Old Man in order to show the matching rank. The name is not combined with other data about you (Art. 6(1)(f) GDPR).

8. RuneProfile

For members who use the RuneProfile plugin in RuneLite, the member list shows a link to their public profile on RuneProfile and, when a row is opened, their in-game progress from there. This data is also requested by our server; your browser does not connect to RuneProfile unless you click a profile link. A RuneProfile only exists if the player has installed the plugin and published the profile themselves. Legal basis: Art. 6(1)(f) GDPR.

9. Twitch player

Where the stream is shown, you first see only a placeholder that is served from our own web space. Nothing is requested from Twitch until you click the placeholder. When you click it, the Twitch player is loaded in a frame directly from Twitch. From then on Twitch receives your IP address, details of your browser and device and the address of this website, and it may set cookies and use similar techniques, for example for playback, statistics and advertising. If you are logged in to Twitch, the visit can be linked to your account. We have no influence on this processing.

Provider: Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA (a subsidiary of Amazon.com, Inc.). Data may be processed in the USA. More information, including how Twitch safeguards international transfers: Twitch privacy notice.

Legal basis: your consent, which you give by clicking the player, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The player is not loaded again on the next page view unless you click it again. To remove cookies that Twitch has already set, delete them in your browser.

10. Links to other websites

We link to other services, for example Discord, Twitch, YouTube, TikTok, Wise Old Man, RuneProfile and RuneLite. These are plain links. Data is only transferred to those providers when you click a link; from then on the provider is responsible.

11. Calendar subscription

If you subscribe to our event calendar, your calendar app regularly fetches the calendar file from our server. This is handled like any other page request (section 3). No account is needed and we do not know who has subscribed.

12. Contact form and email

If you write to us through the contact form or by email, we process the details you give us (name, email address and the content of your message) in order to answer you. Messages from the contact form are sent to us by email and are not stored in the database of this website. Our mailbox is provided by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland; the European Commission has recognised Switzerland as providing an adequate level of data protection.

To keep spam out, the form uses a hidden field, a time check and a limit on the number of messages. For this limit a scrambled value (hash) derived from your IP address is kept for up to one hour and then deleted. No external captcha service is used and no cookie is set.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is answering enquiries and protecting the form against abuse. We delete your message once your request has been dealt with, unless we are legally required to keep it.

13. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw a consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interests, you can object at any time. If you are a current or former clan member and do not want your character name or statistics shown on this website, an email to hiltner.tobias@pm.me or a message to the clan staff on Discord is enough.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

You are not obliged to provide any personal data to use this website; without an email address, however, we cannot reply to a contact request. We do not use automated decision-making or profiling (Art. 22 GDPR).

14. Changes to this policy

We update this policy when the website or the legal situation changes. The current version is always available on this page.