Privacy

Privacy Policy

Last updated: 30 August 2026

1. Controller

The controller for personal-data processing is Dominik Hintringer, Siemensstraße 60, 4030 Linz, Austria. For privacy questions, contact us at help@klenua.com.

2. Personal data we process

When you visit the website, our hosting provider processes technically necessary server-log data, including IP address, time of access, requested page, and technical browser data, to deliver the website and defend it against attacks.

When you register, we process your username, display name, email address, and password in hashed form. We may also process optional profile information, avatar, biography, and website or GitHub link. For developer accounts, this can include support and payout contact details, submitted plugins, screenshots, and package files. Reviews, replies, and reports are associated with your account and may be publicly visible where indicated when submitted.

To manage accounts and keep the platform secure, we also process security-relevant information such as session and token data, IP address and user agent for API tokens or security-relevant actions, and audit logs of administrative actions.

3. Purposes and legal bases

• Providing and administering your account, the platform, and requested services (Art. 6(1)(b) GDPR).
• IT security, abuse and fraud prevention, and stable operation of the website (Art. 6(1)(f) GDPR).
• Compliance with applicable legal retention and disclosure obligations (Art. 6(1)(c) GDPR).
• Processing for which you give separate consent, based on that consent (Art. 6(1)(a) GDPR).

4. Recipients and processors

We use hosting, email, and, where required, payment or security service providers to operate the platform. Uploaded plugin packages may be sent to the malware-scanning provider configured for the platform. Transfers to countries outside the EEA occur only where required for the relevant service and subject to the safeguards of Art. 44 et seq. GDPR.

5. Retention periods

We retain data only for as long as necessary for the relevant purpose. Account data is generally retained until the account is deleted; statutory retention periods and data required to establish, exercise, or defend legal claims may require longer retention. Security logs and tokens are deleted or anonymised once they expire, are revoked, or are no longer needed.

6. Your rights

Subject to the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may withdraw consent at any time with future effect. You also have the right to lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

7. Automated decisions

We do not make automated decisions, including profiling, that produce legal effects concerning you or similarly significantly affect you.