pz.slapstick.be:~$ Log hochladen

Privacy Policy

Last updated: 28 September 2026

This is a hobby site for a private Project Zomboid server. It was built to need as little data as possible, and this page describes what that means in practice. Every claim below was checked against the source code of the site, not assumed.

1. Who is responsible

The controller within the meaning of Article 4(7) GDPR is:

Joshi Kaboom
Berlin, Germany
A KaboomNet project

Contact: kaboom.joshi [at] gmail [dot] com

Still to be filled in: Street, house number and postal code, and — if “Joshi Kaboom” is a pen name — the operator’s legal name.
§ 18 MStV requires an address that legal documents can be served to. A city on its own is not one: it has to be an address a letter reaches. A pen name does not satisfy the requirement either, however long it has been in use — the legal name has to appear, and may stand alongside the pen name.

2. What this site does not do

The short version: it does not watch you. In detail, and each point verifiable in the page source:

  • No cookies. The site sets none, and none are needed to use it. You will not find a cookie banner here, because there is nothing to consent to.
  • No analytics, no tracking, no advertising. There is no Google Analytics, no Matomo, no Plausible, no Facebook Pixel and no comparable service anywhere in the code.
  • No external requests while the page loads. Fonts, stylesheets, scripts and images are all served from this domain. Notably, the two web fonts are self-hosted rather than loaded from Google Fonts — a font delivered by a third party would transmit your IP address to that third party on every visit.
  • No embedded content from other sites. The mod preview images on the Mods-DB page are embedded directly in the page rather than fetched from Steam, so visiting that page does not tell Valve anything about you.
  • No accounts, no registration, no newsletter.
  • No contact form. The only form on this site is described in section 4 and never sends anything anywhere.

3. Server log files

Like practically every web server, the server delivering this site records technical data about each request. This typically includes the requesting IP address, the time of the request, the page requested, the referring page and the browser identification.

This processing is based on Article 6(1)(f) GDPR. The legitimate interest is operating the site securely and diagnosing faults.

This site is hosted by ALL-INKL.COM (Neue Medien Münnich), on servers located in Germany. The data therefore stays within the EU; no transfer to a third country takes place for the website.

Still to be filled in: How long log files are kept, and whether a data processing agreement under Article 28 GDPR has been concluded with the hosting provider.
Retention is set by the hosting contract and cannot be read from the site itself. ALL-INKL.COM offers a processing agreement through its customer area; whether one has been signed is deliberately not claimed here until confirmed.

4. Local storage on your device

The server page carries a small beta survey where you can tick which features matter to you. Your ticks are stored in your browser's local storage so the page can show them again when you return.

They are not sent anywhere. The form deliberately cancels its own submission; the data stays in your browser and is readable only by this site. If you want to pass your answers on, there is a button that copies them to your clipboard so you can send them yourself — deliberately, so that nothing leaves your device without you doing it.

You can delete this entry at any time: the survey has a reset button, and clearing your browser's site data removes it as well. No consent under § 25 TTDSG is required for storage that is strictly necessary to provide a function you explicitly requested; if you disagree, do not use the survey, and nothing will be stored.

5. Links to other sites

This site links to Steam Workshop pages for the mods it lists, and in the footer to our Ko-fi page. The Ko-fi link is a plain link, not an embedded widget: nothing is loaded from Ko-fi until you click it. Once you follow such a link, the privacy policy of that site applies, not this one. We have no influence on what Valve or any other operator does with your data, and we receive nothing back.

6. The game server is a different matter

This section is not about the website. It is here because the site invites people to play, and it would be misleading to describe the web server as data-frugal without mentioning what happens if you actually join.

A Project Zomboid dedicated server necessarily processes data about the people connected to it. On this server that includes your Steam account identifier, the character name you choose, your IP address in connection logs, and gameplay state that installed mods record — for instance in-game currency, playtime and journal entries.

This data lives on the game server, is used to run the game, and is not passed on. Part of it, the data about your character, can be shown on the live status page described in section 7. Your Steam identity and your IP address never appear there. The data is deleted when the world is reset or the server is shut down.

The game server is rented from Indifferent Broccoli and runs on a machine inside the EU. No transfer to a third country takes place for the game server.

Still to be filled in: Whether a data processing agreement under Article 28 GDPR is in place with the game server host, and how long server logs and world saves are kept.
The hosting company processes player data on the operator's behalf, which normally requires such an agreement. Whether one was concluded is not visible from here and is deliberately not claimed. Retention periods depend on how the operator handles backups.

7. The live status page: live.slapstick.be

live.slapstick.be shows what is happening on the game server, to anyone who opens it. Unlike this site, it publishes data about the characters people play, which is why it has its own section.

What it can show publicly. The operator decides what is shown for each type of data. The page can show the state of the game world (in-game day, time and weather) and the rules of the server. For each character it can show the character name, a small pixel portrait generated from the character's appearance, occupation, traits, days survived, zombies killed by that character, the highest skills, whether the character is online, and the day it was last seen. Dead characters appear in a memorial list with the in-game day of death, and named dogs with their name. A leaderboard may add kill and death counts per character.

What it never shows publicly. Steam names or IDs, login names, IP addresses, positions on the map, and the health of a character.

How it works. The game server writes a file with this data. Every two minutes, a machine run by the operator copies it to the web host of this site (ALL-INKL.COM, Germany), and the page loads it in your browser. Each file replaces the previous one; no history is kept on the web host. The page sets no cookies and stores nothing on your device, not even in local storage. It asks search engines not to list it (noindex). Visits are logged by the web server as described in section 3.

The crew area. A password-protected part of live.slapstick.be is intended for the server's own players and may show more detail, including login names and positions. It is not public; access is given by the operator.

Still to be filled in: The legal basis for publishing character data.
The operator's current assessment is a legitimate interest under Article 6(1)(f) GDPR in presenting the community of a small hobby server, weighed against the players' interests. This has not been confirmed and is deliberately not claimed as settled.

If you do not want your character shown, write to the address in section 1. Your character will be taken off the public page. Until the page can hide single characters, this can mean that the survivor list is switched off for everyone. The operator can also take the whole page offline at any time.

8. Your rights

Under the GDPR you have the right to obtain confirmation as to whether data concerning you is being processed and to access it (Article 15), to have inaccurate data corrected (Article 16), to have data erased (Article 17), to restrict processing (Article 18), to receive your data in a portable format (Article 20), and to object to processing based on legitimate interests (Article 21).

To exercise any of these, write to the address in section 1. You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR.

9. Changes to this policy

If the site changes in a way that affects data processing, this page changes with it. The date at the top says when it was last revised.