Privacy Policy

Last updated: October 2026

This policy explains what data Takaro collects, why, and how it is handled. We keep it straightforward.

Who we are

Takaro is a product built and operated by Catalysm BV, a private limited company (besloten vennootschap) registered in Belgium. Whenever this policy says "we" or "us," it refers to Catalysm BV, the data controller responsible for your personal data.

  • Company: Catalysm BV
  • Enterprise number: 1002.766.204
  • VAT number: BE 1002.766.204
  • Registered office: Oostende, Belgium
  • Contact: privacy at takaro.io

What we collect

Account data

When you create an account, we store your email address and display name. If you sign in through Discord, we receive your Discord user ID, username, and avatar from Discord's OAuth flow.

Game server data

When you connect game servers, Takaro processes server connection details (IP, RCON credentials), player data (in-game names, Steam IDs, activity logs), and game events (joins, kills, chat messages). This data is needed to provide the management features you use.

Product analytics

The Takaro website and the dashboard use PostHog (PostHog Inc., EU Cloud, with data hosted in the EU) to measure page views, feature usage, performance and errors. This helps us identify bugs and improve the product. How PostHog stores data on your device depends on your choice, as described under Analytics and cookies.

Requests to PostHog go through our own domain (/relay on takaro.io and the dashboard). We pass your IP address on to PostHog, which uses it to derive an approximate location and, without consent, as one input to the cookieless hash described below.

Our backend also sends a limited set of business events about your Domain to PostHog (for example "game server created" or "module installed") and a daily summary of Domain usage counts. These events carry no email address or other personal properties.

Feedback

Feedback you send from the dashboard is stored in PostHog. If you tick "contact me", your email address is attached to it.

Payment data

Payments are processed by Stripe. We do not store your credit card number. Stripe handles payment processing and PCI compliance. We receive your subscription status and billing history from Stripe.

How we use your data

  • To provide the game server management features you signed up for
  • To process payments and manage your subscription
  • To send important account notifications (billing, security, service changes)
  • To identify and fix bugs
  • To improve the product based on usage patterns

We do not sell your data. We do not use it for advertising.

Our legal basis for processing

If you are in the EU, UK, or EEA, data protection laws require us to state our legal reasons for using your data. We process your information based on:

  • Contract: To provide the dashboard, connect your game servers, and process your payments.
  • Consent: For browser analytics that identify you, link your website visit to your dashboard use, or record sessions (session replay), and for sending newsletter emails. You can withdraw consent at any time.
  • Legitimate Interest: For cookieless browser measurement, the backend product events and Domain usage summaries (to improve Takaro and understand how people get started), fixing bugs, and keeping our systems secure. You can object to processing based on legitimate interest by contacting us.

Third-party services

Takaro uses the following third-party services that may process your data:

  • PostHog (EU Cloud) for product analytics, session replay, error tracking and feedback
  • Plausible Analytics (EU) for cookieless website statistics
  • Stripe for payment processing
  • Discord for OAuth login and Discord integration features
  • Encharge for newsletter emails (only if you subscribe)

Analytics and cookies

We use essential cookies to keep you logged in and remember your session. We do not use third-party advertising cookies.

  • Without consent (the default, and after you choose Reject): PostHog runs cookieless. Before you choose, PostHog stores nothing on your device. If you choose Reject, PostHog keeps one entry in your browser's local storage, __ph_opt_in_out_<project key>. It records the refusal and contains no identifier. Visits are counted with a privacy-preserving hash that PostHog computes on its servers and that does not let us recognise you across days.
  • With consent ("Analytics & product improvement"): PostHog sets the cookie ph_<project key>_posthog and a companion cookie with the same prefix on takaro.io and its subdomains for 1 year. It also keeps matching entries in local storage and session storage (names starting with ph_ or __ph_), which hold the same pseudonymous identifier and the current session. The project key is phc_o2UIUo74OFNwMHi5FXLey8jQed5pHsMj0Vwf8ThvuPq. Your visit to the website and your use of the dashboard are linked. In the dashboard we associate your account and email address with that profile. Session replay may be recorded. On the website, replays mask everything you type into form fields. In the dashboard, replays mask all text and inputs by default; only Takaro's own interface labels are shown.
  • Your choice is stored in the takaro_consent cookie for 180 days, on takaro.io and its subdomains. It is strictly necessary to remember your choice, so it does not need consent.
  • Plausible Analytics (EU, cookieless, no personal data) counts page views on the website.

Changing your choice

Use "Cookie settings" in the website footer, or the privacy settings in the dashboard. Withdrawing consent stops session replay and removes PostHog's cookies and stored identifiers. Only the refusal entry described above remains, plus two session-storage entries (ph_<project key>_window_id and ph_<project key>_primary_window_exists) that PostHog uses to tell browser tabs apart. They are not linked to you and disappear when you close the tab.

Data retention

Account data is kept while your account is active. If you delete your account, your data is removed within 30 days. Game server data (player logs, events) is retained according to your plan's data retention limits.

Your rights

You can:

  • Access your data through the dashboard or by contacting us
  • Export your data via the API
  • Delete your account and associated data
  • Correct inaccurate information in your profile

If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to object to processing.

Age requirements

Takaro is not intended for children. You must be at least 13 years old (or 16 if you are in the EU/EEA) to use our service. We do not knowingly collect data from children under these ages. If we learn that we have collected such data, we will delete it immediately.

International data transfers

Catalysm BV operates globally. This means your data may be stored or processed in countries outside the European Economic Area (EEA), such as the United States. PostHog and Plausible store their data in the EU. For our other processors, when we transfer your data internationally, we ensure it remains protected by using legally approved safeguards, such as Standard Contractual Clauses.

California residents

If you live in California, you have specific rights under the CCPA. You have the right to request access to the data we have collected about you, ask us to delete it, and opt out of its sale. Because we do not sell your data, there is no need to opt out. To exercise any of your other rights, simply reach out to us using the contact information below.

Security

Data is encrypted in transit (TLS) and at rest. Server credentials (RCON passwords) are stored encrypted. Access to production systems is restricted and logged.

Changes

We may update this policy. Significant changes will be communicated through the dashboard or email. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy? Reach out on Discord or email privacy at takaro.io.

See also: Terms of Service