Between SpawnBoost (company registration in progress) ("SpawnBoost") and the server owner/operator accepting this agreement ("Owner").
1. Scope
1.1 This agreement covers personal data of players on the Owner's game server(s) that the SpawnBoost mod ("Mod") collects and transmits to SpawnBoost ("Server Data"): the categories listed in the Game Annex for that game (e.g. SteamID, session times, activity flags and game events, server-side IP address). 1.2 Joint control covers the collection on the Owner's server and transmission to SpawnBoost. After receipt, SpawnBoost is sole controller of Server Data on its platform (verification, fraud prevention, Reward ledger, aggregated reporting). 1.3 Data the Owner collects through its own tools (its own plugins, logs, Discord, stores) is not covered; the Owner is sole controller of that data.
2. Purposes
Server Data may be collected only to (a) verify Goal completion for SpawnBoost Campaigns, (b) detect and prevent fraud (alts, bots, AFK tools, owner–player collusion), and (c) produce aggregated Campaign reports. Not for advertising profiling, sale, or any other purpose.
3. Responsibilities
| Duty | SpawnBoost | Owner |
|---|---|---|
| Privacy notice (Art. 13/14) | Publishes the notice at spawnboost.com/privacy, incl. this arrangement's essence | Shows the join message and server-description line from the Game Annex, linking the notice; does not remove them |
| Legal basis / legitimate-interest assessment | Prepares and keeps it | Cooperates |
| Data minimisation in the Mod | Designs the Mod to collect only Annex data; filters non-users at the earliest point | Does not modify the Mod or add extra collection to it |
| Security of the server and its logs | — | Keeps server OS, game, admin access and RCON secured; does not expose Mod keys |
| Security in transit and on SpawnBoost systems | Signed, encrypted reports; access controls; EU hosting | — |
| Data-subject requests | Single contact point: [email protected]; handles requests | Forwards any request received to SpawnBoost within 5 working days |
| Breaches | Notifies NAIH and data subjects for breaches on its side; informs Owner if their server data is involved | Notifies SpawnBoost within 48 hours of any breach on the server affecting the Mod or Server Data |
| DPIA | Carries out and maintains | Provides information about the server on request |
| Records (Art. 30) | Keeps | Keeps its own if required |
| Processors | Uses only processors listed in the privacy policy, under Art. 28 contracts | — |
| Transfers outside EEA | Only with Chapter V safeguards | Server location disclosed to SpawnBoost; if the server is outside the EEA, the Owner confirms it may lawfully host EU players' data there |
4. What the Owner gets
The Owner receives Campaign progress per participating Player (SteamID, display name, Goal status) and aggregated statistics. The Owner does not receive IP addresses, fraud signals, payout data, identity documents, or data about players who are not in its Campaigns. The Owner must not combine Campaign data with other data to profile players, and must delete per-Player Campaign data 90 days after the Campaign ends unless it needs it for its own lawful purpose for which it is sole controller.
5. Owner warranties
The Owner (a) owns or is authorised to operate the server; (b) will run the unmodified Mod; (c) will not use the Mod or Campaign data to target minors; (d) complies with the publisher's server rules; (e) is located in any country not subject to EU comprehensive sanctions; (f) if outside the EU, accepts that SpawnBoost is the EU-established party responsible for the notice and rights handling.
6. Liability
Each party is liable for damage caused by its own breach of this agreement or the GDPR; as joint controllers both are liable to data subjects under Art. 82(4), with internal recourse according to fault (Art. 82(5)). The Owner indemnifies SpawnBoost for fines or claims caused by the Owner's modification of the Mod, extra collection, or failure to show the notice.
7. Term
Applies while the Mod is installed or any Campaign runs, and until Server Data received is deleted under SpawnBoost's retention policy. On termination the Owner uninstalls the Mod. Governing law: Hungary; venue as in the Terms of Service.
8. Essence to publish (Art. 26(2))
"When you play on a server running SpawnBoost, the server owner and SpawnBoost are joint controllers for collecting your gameplay data on that server. SpawnBoost is your contact point for all privacy requests and is responsible for this notice and for what happens to the data on SpawnBoost. The server owner is responsible for informing you on the server and for keeping the server secure."