Privacy Policy

Last updated: September 24, 2026

1. Who we are

SroForge (sroforge.com) is a toplist of Silkroad Online private servers. The site is operated by Adrian Petresc, Romania, who is the data controller for the personal data described in this policy. Contact: contact@sroforge.com.

2. What data we collect

• All visitors. Like most websites, our web server keeps technical logs of each request: IP address, date and time, requested page, browser user agent and referring page. We use these logs only for security, troubleshooting and abuse prevention.
• Voters. When you vote, we store the server you voted for, the date and time of the vote, the in-game username you entered (optional) and a one-way keyed hash of your IP address. Your IP address itself is not stored with the vote. The hash lets us enforce the limit of one vote per server every 12 hours and detect vote abuse.
• Account holders (server owners). Your name, email address and password (stored only as a secure one-way hash), the details you enter for your server listings, including banner images, and your vote reward (callback) settings.
• People who contact us. Your email address and the content of your message.

3. Why we use your data and on what legal basis

• To provide your account and your server listings: performance of a contract (Art. 6(1)(b) GDPR).
• To count votes fairly, enforce vote limits, prevent fraud and keep the site secure: our legitimate interest in running a fair and safe toplist (Art. 6(1)(f) GDPR).
• To reply to your messages: our legitimate interest in answering you (Art. 6(1)(f) GDPR).

We do not sell your data, we do not build advertising profiles and we do not use analytics or tracking tools.

4. Who receives your data

• Server owners (vote rewards). If the server you vote for has vote rewards enabled, we send its owner a notification with the server identifier, a vote ID, the date and time of the vote and the in-game username you entered. We never send your IP address or its hash. The owner is responsible for how they use this information, usually to give you an in-game reward. If you do not want your username shared, leave that field empty.
• Cloudflare Turnstile. The anti-bot check on our vote, login and registration forms is provided by Cloudflare, Inc. Cloudflare processes technical data such as your IP address and browser characteristics to tell humans from bots, and may process it outside the European Union under the safeguards described in Cloudflare's Privacy Policy.
• Hosting. The site and its database run on a server rented from Contabo GmbH, in a data center in the European Union.
• Email. Messages sent to our @sroforge.com addresses are forwarded by our domain registrar, Namecheap, to the operator's personal mailbox.
• Authorities, only when we are required to by law.

5. How long we keep your data

• Web server logs: 14 days, then deleted automatically.
• Votes, including the IP hash and username: kept as long as the vote record exists, because votes make up the public monthly ranking history.
• Account and listing data: until your account is deleted. To delete your account, email us.
• Database backups: up to 30 days, then deleted automatically.
• Emails you send us: as long as needed to handle your request.

6. Cookies

We only use cookies that are strictly necessary for the site to work: a session cookie that expires after 2 hours of inactivity, a security token that protects our forms, and, only if you choose "Remember me" when logging in, a cookie that keeps you logged in until you log out. We do not use advertising or analytics cookies.

7. Your rights

Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing and to receive it in a portable format. To use any of these rights, email contact@sroforge.com. We answer within one month. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro) or with the authority in your own EU country.

8. Age

Accounts are intended for users aged 16 or older. Voting does not require an account.

9. Security

The site is served only over HTTPS, passwords are stored as secure hashes, and access to the database and administration panel is restricted to the operator.

10. Changes to this policy

We may update this policy when the site changes. The date at the top shows the latest version.