Privacy Policy

We collect only the data necessary for the operation of Top Unturned Servers. We never sell your personal information to third parties.

This policy explains what we collect, why we are allowed to collect it, who else sees it, how long we keep it, and what you can require us to do about it. It is written to meet the EU General Data Protection Regulation (GDPR), which applies to everyone using this service regardless of where they live.

Last revised: 15 August 2026

The controller of the personal data described in this policy — the person who decides why and how it is processed, and who you can hold to account for it — is:

• topunturned.com, trading as Top Unturned Servers
• Greece
• Email: infotopunturned@gmail.com
• Contact form: https://topunturned.com/contact

We are not required to appoint a Data Protection Officer and have not appointed one. Use the addresses above for any privacy question or request — they reach the people who can act on it.

Server owners are separate controllers. Where an Unturned server owner obtains player data through our plugins or Discord bot, they decide what to do with it and are the controller for that. We are not responsible for their handling of it. See Access to Player Information below.

The GDPR requires a lawful basis for every use of personal data. Ours are:

• To perform our contract with you (Art. 6(1)(b)) — running your account, publishing the server you listed, recording votes, delivering Premium features you paid for, and processing your payment. Without this data we cannot provide the service, so providing it is a requirement of using it.
• Our legitimate interests (Art. 6(1)(f)) — keeping the service secure and available, detecting and preventing vote manipulation, fake player counts, multi-accounting, payment fraud and abuse, and defending legal claims. This is why we log IP addresses, use VPN/proxy detection, and retain records of abuse. We have weighed these uses against your interests: the data involved is limited to technical identifiers, it is not used to profile you commercially, and the service could not operate fairly without it. You can object to any of it — see Your Rights below.
• Compliance with a legal obligation (Art. 6(1)(c)) — keeping invoices, payment records and tax documentation for as long as tax and accounting law requires, and responding to lawful requests from authorities.
• Your consent (Art. 6(1)(a)) — optional cookies and any marketing messages. You can withdraw consent at any time, and doing so is as easy as giving it. Withdrawing does not affect anything done before you withdrew.

We do not deliberately collect special categories of data (health, beliefs, and so on), and we ask you not to put such data into server descriptions, nicknames or support messages.

Automated decisions. Some protections run automatically — a vote may be rejected by our VPN/proxy and duplicate detection, and a payment may be refused by our fraud checks. These do not produce legal effects concerning you within the meaning of Art. 22, and you can always ask a human to review the outcome by contacting us.

We do not sell personal data and we do not share it for anyone else's advertising. We disclose it only to:

• PayPal — to take payment and to confirm it. PayPal is an independent controller for what it does with your payment details; we never receive your full card number.
• Discord — where you link a Discord account or use the bot, so we can identify you and deliver messages.
• Steam (Valve) — for Steam sign-in and to read the public profile fields listed above.
• IPHub — IP addresses only, for VPN and proxy detection on votes.
• Cloudflare — security filtering and content delivery for the website.
• Google (reCAPTCHA, YouTube) — bot detection and embedded video.
• Our hosting and database providers — who store the data on our instructions and may not use it for their own purposes.
• Owners of servers you play on — as described under Access to Player Information.
• Authorities, and our legal and accounting advisers — where we are legally required to disclose, or where it is necessary to establish, exercise or defend a legal claim, including reporting suspected fraud.

If the service is ever sold or transferred, data may pass to the buyer, who would be bound by a policy no less protective than this one. We would tell you before that happened.

Several of the providers above (PayPal, Discord, Cloudflare, Google, Valve) are established in or process data in the United States or other countries outside the European Economic Area.

Where data leaves the EEA, it is protected by one of the safeguards the GDPR requires (Chapter V): an adequacy decision of the European Commission — including the EU–US Data Privacy Framework where the recipient is certified under it — or the Commission's Standard Contractual Clauses together with any additional measures needed in the circumstances.

You may ask us for a copy of the safeguard relied on for a particular transfer using the contact details above.

Certain information collected through Top Unturned Servers plugins, including IP addresses and Hardware Identifiers (HWIDs), may be made available to the owners or administrators of participating Unturned servers where such functionality is enabled.

Server owners are independent parties and are solely responsible for their collection, storage, use, disclosure, and protection of any player information they obtain through our plugins or services.

Top Unturned Servers does not control how individual server owners use this information and accepts no responsibility or liability for any misuse, disclosure, unauthorized access, or processing performed by server owners, their administrators, moderators, staff members, or any third party to whom they choose to provide access.

The same applies where such information is made available through Discord bots, Discord servers, web dashboards, or other integrations operated by or on behalf of a server owner.

Players should review the privacy practices of the individual server they choose to join.

Top Unturned Servers may offer features that allow server owners to hide their identity and/or the IP address and port of their server.

By using these features, you acknowledge and agree that:

• Top Unturned Servers cannot guarantee that hidden information will remain private at all times.
• Technical failures, server errors, software bugs, or other unforeseen issues may result in the exposure of hidden server owner information or IP/port data.
• Top Unturned Servers shall not be liable for any loss, damage, or consequences arising from the accidental disclosure of hidden server information.
• It is the responsibility of the server owner to take additional precautions if complete privacy is required.

Under the GDPR you can require us to do the following, free of charge. These are your rights whether or not you have an account with us.

• Access (Art. 15) — be told whether we hold data about you and get a copy of it.
• Rectification (Art. 16) — have inaccurate data corrected or incomplete data completed.
• Erasure ("right to be forgotten") (Art. 17) — have data deleted where we no longer need it. This does not extend to records we are legally required to keep, such as invoices, or to what is needed to defend a legal claim.
• Restriction (Art. 18) — have us pause processing while a dispute about accuracy or legitimate interests is resolved.
• Portability (Art. 20) — receive the data you gave us in a machine-readable format, or have it sent to another provider.
• Objection (Art. 21) — object to processing based on our legitimate interests. We must then stop unless we can show compelling grounds that override yours, such as preventing fraud.
• Withdraw consent (Art. 7(3)) — at any time, for anything we asked your consent for.

Write to infotopunturned@gmail.com and we will answer within one month. If a request is unusually complex we may extend that by two further months and will tell you why. We may ask you to prove who you are first — otherwise someone else could use these rights to obtain your data.

Complaining to a regulator. If you think we have handled your data wrongly, please tell us first so we can put it right. You do not have to. You have the right to lodge a complaint with a data protection supervisory authority — in the EU or EEA that can be the authority in the country where you live, where you work, or where you believe the problem happened. Each member state publishes its authority's contact details, and you may use any of the three. You also have the right to an effective judicial remedy against us or against a supervisory authority.

The service is not directed at children under 15, and you must be at least 15 to create an account. Where a service is offered to a child below the age set by national law (13 to 16 depending on the country, 15 in Greece), consent must come from a person holding parental responsibility.

We do not knowingly collect data from children below that age. If you believe a child has given us personal data, contact us and we will delete it.

We take appropriate technical and organisational measures to protect personal data (Art. 32), including encrypted connections, access limited to those who need it, and separation of the payment process so that card details never reach our systems.

No online service can promise perfect security. If a breach occurs that is likely to result in a risk to your rights, we will notify the supervisory authority within 72 hours and tell you directly where the law requires it.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. Users should review the privacy policies of those destinations.

We may update this Privacy Policy as the service changes. The date at the top always shows when it was last revised.

If a change materially affects how we use your personal data, we will tell you before it takes effect — by email or a notice on the site — so that you have a real opportunity to object, withdraw consent, or close your account. We will not apply a material change retroactively to data already collected under an earlier version.

Related: our Terms of Service govern your use of the service, including purchases.