Privacy policy
This is a translation for convenience; the German version is the binding one.
1. Controller
Kevin Bollinger
Margarethenstraße 43
50181 Bedburg
Germany
E-mail: kontakt@kebo-mods.de
Data protection requests: datenschutz@kebo-mods.de
No data protection officer is appointed or required (private person, hobby project without employees).
2. In short
No ads, no tracking, no analytics, no embedded content from other providers. An account is optional; wishes and bug reports work without one. Fonts and images are hosted on this server. What you send through the forms stays here and is never sold or passed on.
3. Hosting and server logs
The site is hosted by 1blu GmbH, Riedemannweg 60, 13627 Berlin in data centres in Germany, under a data processing agreement (Art. 28 GDPR). The connection is encrypted with SSL/TLS ("https://"). When you open a page, the server processes data your browser sends automatically: IP address, date and time, requested address, amount of data, status code, browser and operating system, and the previous page. This is needed to deliver the site and run the server securely (Art. 6 (1) f GDPR). The host rotates the log files automatically and deletes them once they are no longer needed for running the server securely.
4. Cookies
Only two technically necessary cookies: a session cookie (remembers e.g. your language and form input after an error) and a protection cookie against forged form submissions (XSRF-TOKEN). Neither contains information about you or is used for ads or statistics; both expire after at most 2 hours without activity. If you sign in with "Keep me signed in", a third cookie recognises you (at most 400 days, deleted when you sign out).
4a. Account
An account stores your name, e-mail address, password (only as a one-way hash), language, whether you want mail notifications, when you confirmed the address and last signed in, plus the wishes, votes and bug reports you send while signed in and notifications when I answer or something changes. Mails (confirmation, forgot password, notifications) are sent by my hosting company's mail server. Purpose: showing you your reports and wishes in one place and telling you about news (Art. 6 (1) b GDPR). You can delete your account yourself under "My Kebo › Profile"; your wishes and reports then stay without name and e-mail. Testers who link their tester access see their test reports there (see section 9).
Sign in with Steam: this takes you to Steam (Valve Corporation, USA); you sign in there and Steam only confirms your public Steam ID to me. I load your public profile name and picture once from your public Steam profile. Valve's privacy policy applies to signing in at Steam; data may be transferred to the USA. This only happens if you choose this sign-in yourself (Art. 6 (1) b GDPR).
Sign in with Discord / link Discord: this takes you to Discord (Discord Inc., USA). Discord sends me your Discord ID, user name, avatar and – if confirmed – your e-mail address. When you link Discord from "My Kebo", the bot also adds you to the Kebo Discord if you are not a member yet and gives you roles that match your account (e.g. "✔ kebo-mods.de", Tester). You can unlink Discord in your profile at any time. Legal basis: Art. 6 (1) b GDPR; data may be transferred to the USA.
5. Wishes
The wishes area (viewing, voting, sending) is only for signed-in users (section 4a). A wish stores its title, your description, the mod you chose, your language, the time, the link to your account and your display name. Wishes become public after I have read them, together with the display name. Purpose: developing the mods as players wish (Art. 6 (1) f GDPR). On request I delete your wish or your name.
Voting: every account has one vote per wish; the vote is stored with your account and deleted with it. Keyed hashes of anonymous votes from before accounts were required may still exist; they cannot be turned back into an IP address and are deleted after 12 months.
6. Bug reports
A bug report stores your description, the mod and versions, the files you upload (logs and screenshots), the time and – only if you enter them – name and e-mail address. Your Windows user name is removed from file paths in log files before saving. Please don't upload screenshots with private information. The e-mail address is only used for questions about your report and never shown.
Your report is not public: only whoever has the secret link you get after sending can read and answer it – and me in the admin area. Purpose: finding and fixing the bug (Art. 6 (1) f GDPR). Closed reports and their files are deleted 12 months after closing, earlier on request.
7. Protection against abuse
To protect the forms from spam, requests per IP address are counted in the server's cache for at most 10 minutes and then discarded. A hidden form field detects bots; no data goes to third parties.
7a. Takedown template
On the page "Takedown template" you can create a notice as PDF. What you enter (name, user name, e-mail address, details about the mod and the copy) is only processed to create the PDF at that moment and then discarded. It is not stored, not logged and not shared; only you get the PDF. The limit from section 7 protects the page against abuse (Art. 6 (1) b and f GDPR).
7b. Kebo Guard (guard.kebo-mods.de)
Kebo Guard is a program for mod authors that finds unauthorised copies of their own mods. Users log in with their Nexus Mods account. Nexus only confirms your member ID and Nexus name to me; I never see or store your Nexus password or key. Stored are: member ID, Nexus name, login times, an access token per installation (only as a checksum) the mods you have watched with your search words, your accounts on other sites (if you add them), the findings with your decision and, for every notice created through the service, the reference, the title of the mod, the site and the addresses of the copies. This is needed to run the service and to be able to trace abuse (notices in someone else's name) (Art. 6 (1) b and f GDPR). To search, the service reads public file pages of mirror sites and stores their address, title, author and uploader names, date, file name and size; this serves enforcing the authors' copyright (Art. 6 (1) f GDPR). guard.kebo-mods.de itself sets no cookies; only page views per day, page, language and referring site are counted (no IP address, no identifier). The name and e-mail address in the notice are only processed to create the PDF and are not stored. You send the notices yourself; I send nothing in your name. You can ask for your Guard data to be deleted at any time.
8. Numbers from Nexus Mods
Versions, download numbers and change lists are loaded from the Nexus Mods API onto this server and shown here. None of your data is sent to Nexus Mods. Only when you click a link to Nexus Mods or Discord you leave this site; their privacy policies apply from then on.
9. The mods and the test program
The Kebo mods on Nexus Mods don't connect to the internet and send no data. The exception is the "Kebo Tester" app, only for invited testers (not on Nexus Mods): it downloads test versions from this server and – only when the tester presses "Send" – sends test results and bug reports with logs, installed Kebo versions, game and system details (operating system, graphics card, screen resolution, amount of RAM and video memory, language), screenshots, video clips and, if chosen, a save game. Other testers only see title and status of open bugs under an alias ("Tester-03"), never the name. Legal basis: taking part in the test program (Art. 6 (1) b GDPR). The data is deleted after the test phase or on request; the app's "Transparency" page shows exactly what is sent.
9a. Kebo Discord and bot
My bot "KeBo-Mods" runs on the Discord server "Kebo Mods". About members it stores on this server: Discord ID, user and display name, join date, chosen language, when you first and last wrote and how many messages (never the content), whether a welcome message could be delivered and whether a one-time reminder was sent. This serves running the community (welcome, language areas, roles) and my legitimate interest in seeing whether new members find their way (Art. 6 (1) f GDPR). The event list is deleted after 60 days. Discord itself is covered by the privacy policy of Discord Inc.
10. Sharing
No data is passed on, except to the hosting company that runs the server on my behalf (Art. 28 GDPR). No transfer to countries outside the EU, unless you choose "Sign in with Steam" or "Sign in with Discord" yourself (section 4a); Discord roles and bot messages go through Discord (section 9a).
11. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Write to datenschutz@kebo-mods.de; for a bug report the number (e.g. #1042) helps. You can delete your account yourself any time under "My Kebo › Profile". You can also complain to a data protection authority (Art. 77 GDPR), e.g. the one responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: 13. Oktober 2026