Privacy policy

Who is responsible

DuelSMP is run by BR4M from the Netherlands, who is the data controller for the data described here. You can reach us on Discord for any privacy question or request.

What we collect and why

When you buy from the store

• Your Minecraft name and UUID, so the item reaches the right account. When you enter a Java name we check it with Mojang's public profile service.
• Your IP address, which we pass to Tebex when your basket is created so it can calculate tax and prevent fraud.
• Payment details. Tebex Limited handles the checkout and collects your email, billing details and payment method. We never see your card or bank details. From Tebex we receive your Minecraft name, email address, country, what you bought and what you paid.

Legal basis: performing the purchase contract, and our legal duty to keep financial records. Order records are kept for seven years, as Dutch tax law requires.

When you play on the server

• Your Minecraft name, UUID, IP address, chat messages, and in-game actions such as block changes, kills and claims. We need these to run the game and to moderate it, for example to investigate griefing, cheating or harassment.

Legal basis: our legitimate interest in running a fair and safe server. Logs are kept for up to 12 months.

When you visit this website

• Our hosting keeps short technical logs (IP address, browser and page requested) to keep the site secure and working. These are deleted within 30 days.
• A few strictly necessary cookies remember your basket and player name. See the cookie policy.
• Player faces on the site are loaded from mc-heads.net and minotar.net, which receive your IP address when your browser fetches the image.

The Hall of Fame

If you buy something, your Minecraft name, skin face, highest rank and the month you first backed the server appear on the public Hall of Fame. We never show amounts. Legal basis: our legitimate interest in thanking backers. If you would rather not be listed, ask us on Discord and we will remove you.

Who we share data with

• Tebex Limited (United Kingdom), our payment and store provider. See the Tebex privacy policy.
• Mojang / Microsoft, when we look up a Java name to confirm it exists.
• Our hosting provider, which runs the website and server in the EU.
• Discord, if you join our community there. Discord has its own privacy policy.
• Authorities, only when the law requires it.

The United Kingdom has an EU adequacy decision. Where data goes to the United States, it is covered by the EU-US Data Privacy Framework or standard contractual clauses.

Children

Many of our players are young. In the Netherlands you need permission from a parent or guardian to agree to data processing under 16, and our store requires buyers to be 18 or to have a parent's permission. Parents can contact us at any time to ask what we hold about their child or to have it removed.

Your rights

Under the GDPR you can ask us to:

• show you the personal data we hold about you
• correct data that is wrong
• delete your data, unless we must keep it, such as order records for tax
• limit or object to how we use it, including the Hall of Fame
• give you your data in a portable format

Send your request on Discord with your Minecraft name. We reply within one month. You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

If we change how we handle data, we update this page and the date at the top.