Altered:Privacy policy

Controller

Xenorio Industries
Sudermannstraße 9
38226 Salzgitter
Germany
Represented by: Marcus Huber
Privacy contact: privacy@altered.wiki

Principles

We collect the minimum data necessary to operate the wiki. We do not run analytics, do not use advertising, do not embed third-party trackers, and do not log network traffic. The Altcha proof-of-work CAPTCHA used on this site is fully self-hosted and stateless. No data leaves our server during the CAPTCHA process.

Data we collect and why

Account data

When you create an account you provide a username, email address, and password. The password is stored as a salted hash and is never readable by us. The email address is used solely for account functions (email confirmation, password reset, optional notifications you explicitly enable). It is not shared with third parties.

Legal basis: contract (Art. 6(1)(b) GDPR). Account data is necessary to provide the service you signed up for.

Edit history

All edits made while logged in are permanently recorded in the wiki database and attributed to your username. Edit history is public. This is a core property of a wiki and cannot be removed without deleting the relevant revisions, which we will only do in exceptional circumstances (see Your rights below).

Legal basis: legitimate interest (Art. 6(1)(f) GDPR). A verifiable public edit history is essential to the integrity of a collaborative encyclopedia.

Session data

A session cookie is set when you log in. Session data (including your login state) is stored server-side in Redis and expires when you log out or the session times out. No persistent tracking cookies are used.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Session management is necessary to keep you logged in.

MediaWiki internal logs

MediaWiki records certain administrative events in its database: account creation, login attempts (transiently, for rate-limiting), page deletions, user blocks, and similar actions. These logs are retained as long as operationally necessary.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Operational logs are necessary to detect abuse and maintain wiki integrity.

Network traffic

Our web server (Caddy) is intentionally configured without access logging. No IP addresses, request paths, or timestamps are written to disk by our infrastructure.

Third-party data contacts

OpenStreetMap

Pages that include a map widget load map tiles directly from OpenStreetMap servers. When this happens your browser sends a request to OpenStreetMap's infrastructure, which may process your IP address. This is governed by the OpenStreetMap Foundation Privacy Policy. We have no control over and receive no data from this interaction.

Your rights

Under the GDPR you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data where no overriding legitimate interest applies. Note that contributions to the wiki are part of the public record; username attribution in edit history can be removed (revision deletion) on a case-by-case basis at our discretion.
• Restriction: request that we restrict processing of your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest

To exercise any of these rights, contact privacy@altered.wiki. We will respond within 30 days.

You also have the right to lodge a complaint with the supervisory authority responsible for us:

Die Landesbeauftragte für den Datenschutz Niedersachsen
www.lfd.niedersachsen.de

Changes to this policy

Material changes to this policy will be announced on the wiki. The revision history of this page serves as a public changelog.