Privacy Policy

Name: Takaro
Author: Takaro

Last updated: March 2026

This policy explains what data Takaro collects, why, and how it is handled. We keep it straightforward.

Who we are

Takaro is a product built and operated by Catalysm BV, a private limited company (besloten vennootschap) registered in Belgium. Whenever this policy says "we" or "us," it refers to Catalysm BV.

Company: Catalysm BV
Enterprise number: 1002.766.204
VAT number: BE 1002.766.204
Registered office: Oostende, Belgium
Contact: privacy at takaro.io

What we collect

Account data

When you create an account, we store your email address and display name. If you sign in through Discord, we receive your Discord user ID, username, and avatar from Discord's OAuth flow.

Game server data

When you connect game servers, Takaro processes server connection details (IP, RCON credentials), player data (in-game names, Steam IDs, activity logs), and game events (joins, kills, chat messages). This data is needed to provide the management features you use.

Usage data

We collect basic analytics about how you use the dashboard: pages visited, features used, and error logs. This helps us identify bugs and improve the product.

Payment data

Payments are processed by Stripe. We do not store your credit card number. Stripe handles payment processing and PCI compliance. We receive your subscription status and billing history from Stripe.

How we use your data

To provide the game server management features you signed up for
To process payments and manage your subscription
To send important account notifications (billing, security, service changes)
To identify and fix bugs
To improve the product based on usage patterns

We do not sell your data. We do not use it for advertising.

Our role: controller and processor

Takaro is used by community operators who run their own game servers. Our role under the GDPR depends on which data is involved:

We act as a processor for the player data and game events belonging to a community you operate. You decide to run that community and what to collect; we process that data on your instructions in order to provide the service. If you are a business customer, this is governed by our data processing terms.
We act as a controller for your own account and billing data, for our product analytics, and for security and abuse prevention across the platform.

Where we use data across communities for our own purposes — for example aggregate platform statistics or product improvement — we act as a controller for that processing, and we describe the legal basis for it below.

Our legal basis for processing

If you are in the EU, UK, or EEA, data protection laws require us to state our legal reasons for using your data. We process your information based on:

Contract: To provide the dashboard, connect your game servers, and process your payments.
Legitimate Interest: To monitor usage, fix bugs, keep our systems secure, and improve Takaro.
Consent: For sending newsletter emails (which you can easily opt out of at any time).

Third-party services

Takaro uses the following third-party services that may process your data:

Stripe for payment processing
Discord for OAuth login and Discord integration features
Encharge for newsletter emails (only if you subscribe)

Cookies

We use essential cookies to keep you logged in and remember your session. We do not use tracking cookies or third-party advertising cookies.

Data retention

Account data is kept while your account is active. If you delete your account, your data is removed within 30 days. Game server data (player logs, events) is retained according to your plan's data retention limits.

Your rights

You can:

Access your data through the dashboard or by contacting us
Export your data via the API
Delete your account and associated data
Correct inaccurate information in your profile

If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to object to processing.

Children and young players

Takaro accounts. A Takaro account is for the person managing a game server. You must be at least 16 years old to create one, as set out in our Terms of Service.

Players in your community. Takaro also processes data about the players on the servers you manage, and some of them may be children. Where we act as a processor for that data, the community operator is responsible for the lawful basis for collecting it and for any consent required — including parental consent where the applicable national age of digital consent has not been reached. In Belgium that age is 13; it varies between 13 and 16 across the EU.

We do not knowingly collect data directly from children for our own purposes. If you believe a child's data is being processed inappropriately, contact us at privacy at takaro.io and we will act on it.

International data transfers

Takaro is operated from Belgium. Some of the third-party services listed above process data outside the European Economic Area (EEA). Where that happens, we rely on legally approved safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us which safeguard applies to a particular service by emailing privacy at takaro.io.

California residents

If you live in California, you have specific rights under the CCPA. You have the right to request access to the data we have collected about you, ask us to delete it, and opt out of its sale. Because we do not sell your data, there is no need to opt out. To exercise any of your other rights, simply reach out to us using the contact information below.

Security

Data is encrypted in transit (TLS) and at rest. Server credentials (RCON passwords) are stored encrypted. Access to production systems is restricted and logged.

Changes

We may update this policy. Significant changes will be communicated through the dashboard or email. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy? Reach out on Discord or email privacy at takaro.io.