Hosted trust
Privacy
Effective date: May 18, 2026
Ellende.app stores the organizer, attendee, event, billing-support, and operational data needed to run the hosted service for LAN party schedules and support customer organizations. Hosted runtime uses database-backed tenant storage when configured; JSON remains the local development fallback plus import, export, and restore validation format.
Who Controls Event Data
Each organizer is responsible for the event content and attendee data they collect for their LAN event. Ellende.app acts as the hosted service operator for authentication, scheduling, support, billing, security, and reliability.
Data We Collect
- Organizer account details such as name, email, authentication state, organization, and billing support metadata.
- Attendee profile details such as event nickname, email, Steam identifiers when linked, avatar URL, attendance, session signups, and event preferences.
- Event content such as schedules, sessions, comments, custom pages, map layouts, payment records, and organizer setup.
- Security and support records such as login throttling, account recovery, service-email delivery state, activation events, support actions, and restore-drill evidence.
How We Use Data
Data is used to authenticate users, display schedules, enforce player caps, operate hosted plans, prevent abuse, support account recovery, diagnose hosted incidents, and help organizers understand whether their event is ready to share.
Service Providers
Hosted operation may use infrastructure, payment, email, monitoring, and support providers. Those providers are used only to operate the service, process organizer billing, deliver service email, detect abuse, or diagnose incidents.
Retention And Deletion
Organization owners can download a tenant JSON export from
/organizer/export. Staff, finance managers, and support/admin
helpers cannot use that self-service export route. Export help,
deactivation, and deletion-review requests should be emailed to
support@krosoft.nl
from the organizer account email and include the organization name, reason,
requested action, and whether an export has already been downloaded.
Deactivation is support-led: support disables the organization to suspend access while preserving evidence for review. Final deletion is not self-service. It requires support runbook handling after export, billing, security, abuse, recovery, and support-action checks are complete.
Security and operational records may be retained outside the event export when needed to protect the service, respond to disputes, or prove support actions. Current database-backed hosted defaults retain rate-limit evidence for 7 days, email delivery and account recovery diagnostics for 30 days, and provider bounce/complaint feedback for 30 days.
Support Access
Support superadmins may inspect tenant activity, email diagnostics, recovery state, billing state, and restore-drill evidence when helping an organizer or investigating a hosted incident. Tenant-changing support actions require a reason and are recorded in the support action log.
Contact
Organizers should email support@krosoft.nl from their account email to request data export help, deactivation, or deletion review.