This policy explains how Penwick (https://penwick.ink) and the phpBB software use and protect the information collected while you use the site. Penwick is a volunteer-run, non-commercial community hosted in Germany and subject to applicable German and European Union data protection law, including the General Data Protection Regulation.

Penwick does not sell, share, or exploit user data. We collect only what is strictly required for the operation and security of the forum.


1. What Data We Collect
Technical Data

phpBB automatically stores:

• A user identifier cookie (user-id)
• A session identifier cookie (session-id)
• A read-tracking cookie that remembers which topics you have viewed

The server also logs IP addresses and related technical information when you browse, register, log in, post, or otherwise use the site. We use this data for security, spam prevention, abuse prevention, moderation, and basic site administration.

Penwick does not use advertising cookies or third-party tracking cookies. Technical and authentication cookies may be used where necessary for the site to function.

Account Data

To create an account, you must provide:

• Your username (a fictional character name)
• Your email address
• Your password
• Any posts and messages you make

Anything else you add (posts, messages, profile fields) is voluntary.
Your password is stored as a one-way hash and cannot be read by administrators. The “Forgot Password” tool allows resets.

2. How We Use Your Data
Your data is used only to:

• Operate and secure the forum
• Maintain your account
• Provide essential notifications
• Enforce moderation and prevent abuse
• Comply with applicable legal obligations
  Your email and IP address are visible only to administrators.
  We do not share your data with phpBB Limited or any external entity.

3. Data Security
We use HTTPS, keep server software updated, and apply standard security practices.
No system is perfectly secure, but we minimize data collection to reduce risk.

4. Your GDPR Rights
You may request:

• Access to your data
• Correction or deletion
• A data export
• Limitation or objection to processing

To do so, contact a site administrator.
Account deletion removes your account data, but your posts may remain to preserve roleplay threads.