Privacy Policy

Last updated: March 2026

This policy explains what data Takaro collects, why, and how it is handled. We keep it straightforward.

Who we are

Takaro is a product built and operated by Catalysm. Whenever this policy says "we" or "us," it refers to Catalysm, the legal entity responsible for managing your data.

What we collect

Account data

When you create an account, we store your email address and display name. If you sign in through Discord, we receive your Discord user ID, username, and avatar from Discord's OAuth flow.

Game server data

When you connect game servers, Takaro processes server connection details (IP, RCON credentials), player data (in-game names, Steam IDs, activity logs), and game events (joins, kills, chat messages). This data is needed to provide the management features you use.

Usage data

We collect basic analytics about how you use the dashboard: pages visited, features used, and error logs. This helps us identify bugs and improve the product.

Payment data

Payments are processed by Stripe. We do not store your credit card number. Stripe handles payment processing and PCI compliance. We receive your subscription status and billing history from Stripe.

How we use your data

  • To provide the game server management features you signed up for
  • To process payments and manage your subscription
  • To send important account notifications (billing, security, service changes)
  • To identify and fix bugs
  • To improve the product based on usage patterns

We do not sell your data. We do not use it for advertising.

Our legal basis for processing

If you are in the EU, UK, or EEA, data protection laws require us to state our legal reasons for using your data. We process your information based on:

  • Contract: To provide the dashboard, connect your game servers, and process your payments.
  • Legitimate Interest: To monitor usage, fix bugs, keep our systems secure, and improve Takaro.
  • Consent: For sending newsletter emails (which you can easily opt out of at any time).

Third-party services

Takaro uses the following third-party services that may process your data:

  • Stripe for payment processing
  • Discord for OAuth login and Discord integration features
  • Encharge for newsletter emails (only if you subscribe)

Cookies

We use essential cookies to keep you logged in and remember your session. We do not use tracking cookies or third-party advertising cookies.

Data retention

Account data is kept while your account is active. If you delete your account, your data is removed within 30 days. Game server data (player logs, events) is retained according to your plan's data retention limits.

Your rights

You can:

  • Access your data through the dashboard or by contacting us
  • Export your data via the API
  • Delete your account and associated data
  • Correct inaccurate information in your profile

If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to object to processing.

Age requirements

Takaro is not intended for children. You must be at least 13 years old (or 16 if you are in the EU/EEA) to use our service. We do not knowingly collect data from children under these ages. If we learn that we have collected such data, we will delete it immediately.

International data transfers

Catalysm operates globally. This means your data may be stored or processed in countries outside the European Economic Area (EEA), such as the United States. When we transfer your data internationally, we ensure it remains protected by using legally approved safeguards, such as Standard Contractual Clauses.

California residents

If you live in California, you have specific rights under the CCPA. You have the right to request access to the data we have collected about you, ask us to delete it, and opt out of its sale. Because we do not sell your data, there is no need to opt out. To exercise any of your other rights, simply reach out to us using the contact information below.

Security

Data is encrypted in transit (TLS) and at rest. Server credentials (RCON passwords) are stored encrypted. Access to production systems is restricted and logged.

Changes

We may update this policy. Significant changes will be communicated through the dashboard or email. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy? Reach out on Discord or email privacy at takaro.io.

See also: Terms of Service