Name	Category	Origin	Purpose	Storage Duration
user-is-logged-in	Required	hellscontractor.com	Saves that the user is/was logged in.	31536000 seconds
QSWXZ	Required	hellscontractor.com	Unique ID that identifies the user's session.	0 seconds
mtm_consent	Statistics	hellscontractor.com	Used to remember that consent was given by the user.	Unlimited
_pk_cvar.*	Statistics	hellscontractor.com	Used to temporarily store data for the visit.	30 minutes
_pk_hsr.*	Statistics	hellscontractor.com	Used to temporarily store data for the visit.	30 minutes
_pk_id.*	Statistics	hellscontractor.com	Used to store details about the user (e.g. a unique visitor ID)	13 months
matomo_ignore	Statistics	stats.pcsg-server.de	Flags the user as ignored from tracking.	Unlimited
_pk_ref.*	Statistics	hellscontractor.com	Used to store the attribution information (e.g. the referrer initially used to visit the website).	6 months
_pk_ses.*	Statistics	hellscontractor.com	Used to temporarily store data for the visit.	30 minutes
MATOMO_SESSID	Statistics	hellscontractor.com	Created when opt-out feature is used. Helps prevent CSRF security issues.	Temporary
_pk_testcookie.*	Statistics	hellscontractor.com	Used to check whether the visitor’s browser supports cookies.	1 second
	Marketing	hellscontractor.com	Used to collect consent for tracking the user ID in Matomo. No cookie is set.
	Marketing	hellscontractor.com	Used to collect consent for tracking the user email in Matomo. No cookie is set.

Privacy Policy

1. Controller

The controller responsible for processing personal data on hellscontractor.com is:

ToadTec UG (haftungsbeschränkt)
Pfaffenberger Weg 142
42659 Solingen
Germany

2. Access data and server logs

Whenever this website is accessed, technically required access data is processed. This may include the IP address, date and time, requested URL, referrer, browser, operating system, transferred data volume, and server status.

This processing is carried out to provide the website, ensure system security, analyze errors, and detect misuse. The legal basis is Article 6(1)(f) GDPR.

3. Website, game, and customer services

When you use the website, browser game, customer area, or downloads, we process the information required to provide the selected function, secure access, and fulfil a contract. The legal basis is Article 6(1)(b) GDPR and, for security and reliable operation, Article 6(1)(f) GDPR.

4. Local game data

Hell's Contractor stores cities and game settings locally in your browser or application. These local saves remain on your device unless you actively export, transmit, or upload them. The game does not automatically transmit city saves or gameplay telemetry to ToadTec.

Account records, purchase entitlements, website access data, and download records are separate from local game saves.

5. User accounts

For registration and use of a customer account, we process the information provided during registration, ordering, and account management. This may include name, company, address, email address, billing data, order data, product entitlements, and technical login and security data.

6. Orders and payments

For paid products, we process the data required for ordering, contract performance, billing, product access, downloads, and statutory retention obligations. The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.

If you choose an external payment method, the selected payment provider receives the information required to process the payment and applies its own privacy information.

7. Cookies, local storage, and Matomo

This website uses technically necessary session and status storage so that basic functions such as consent choices, login, customer accounts, cart, ordering, and security work. Optional storage is used only in accordance with your selection in the cookie-consent dialog.

We use Matomo through stats.pcsg-server.de to understand website use and improve content and technical performance. Without consent to the Statistics category, Matomo is configured without analytics cookies. If you consent to Statistics, Matomo may store analytics identifiers and recognize visits over time. Consent-based processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG.

The cookie-consent dialog lists the current cookies, providers, purposes, and storage periods. You may change or withdraw your selection at any time with effect for the future using the cookie settings on this page.

8. Contact and support

If you contact us, we process your details and message to handle the request. The legal basis is Article 6(1)(b) GDPR if the request relates to a contract and otherwise Article 6(1)(f) GDPR.

9. Retention period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. After that, the data is deleted or restricted unless it is still required for security or the establishment, exercise, or defence of legal claims.

10. Recipients and service providers

Personal data is transferred only where necessary to provide services, perform contracts, process payments and billing, comply with legal obligations, or protect legitimate interests. External service providers are used under appropriate contracts and data-protection requirements.

If a provider processes data outside the European Economic Area, an applicable legal transfer mechanism and any required supplementary safeguards are used.

11. Your rights

Subject to the applicable legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to certain processing activities. You may withdraw consent at any time with effect for the future.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority if you believe that processing of your personal data violates data-protection law. The supervisory authority responsible for our establishment is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

13. Changes to this Privacy Policy

We may update this Privacy Policy when technical, legal, or organizational changes make this necessary. The current version is published on this page.