Privacy Policy

01 Introduction

Xapros SMP is a non-commercial, community-run Minecraft server operated from Germany. This policy explains how personal data is handled when you visit our website, apply to join, play on our server, contact us, or support us through Ko-fi.

The Xapros SMP operator is responsible for the community data and donation information we process. You can contact the operator at duzzl.lp@gmail.com. Our website is hosted on Cloudflare Pages; our Minecraft server is hosted in the United States by Folium Hosting.

02 Community & Server Data

• Applications & Community Participation
  Applications are handled through our Discord community. We process your Minecraft in-game name, age, country, Discord account information and any additional information you submit to review applications, manage the whitelist and communicate with you. Please avoid including information that is not needed for your application.
• Minecraft Server & Hosting
  When you connect, the server processes your Minecraft username, UUID, IP address, connection records and gameplay data needed to operate the world and your player account. Folium Hosting provides the server infrastructure in the USA and may access hosted data where necessary to provide hosting, support and security. See Folium Hosting's Privacy Policy.
• In-Game Chat & Discord (Dmcc Integration)
  We use Dmcc to connect in-game chat with our Discord server. In-game chat messages and the associated player name are transmitted to Discord and are visible to members who can access the relevant channel. Discord processes this information under its own Privacy Policy. Please do not post information in chat that you want to keep private.
• Public Player Information
  Our statistics page displays player names, playtime and advancement counts. Our Shop District lists the player information submitted for shop listings. These pages are publicly accessible, so the information can be viewed by people outside our Minecraft and Discord community.
• Contact Requests
  If you contact us by email or Discord, we process your contact details, message and any information you provide to respond to your request. Email and Discord providers also process the communication through their respective services.

03 Website Hosting & Browser Data

• Cloudflare Pages
  Cloudflare hosts and delivers our website through Cloudflare Pages. When you access it, Cloudflare processes technical request data, including your IP address, requested URL, request time, browser information and security-related information, to deliver the site, maintain availability and protect against abuse. Its global network may process data outside the EU. See Cloudflare's Privacy Policy.
• Theme Preference & Security Cookies
  When you change the light/dark theme, the website stores your choice under xapro-theme in local storage and a cookie. The code sets a cookie lifetime of up to ten years; your browser may impose a shorter limit. Local storage has no automatic expiry in our code. You can remove both through your browser settings. Depending on the security features used, Cloudflare may also set cookies for protection against automated abuse; see its cookie information.
• Google Fonts
  The website loads fonts from Google's servers. This creates a connection to Google and transmits your IP address and technical request information when the font resources are requested. See Google's Privacy Policy.
• Server Status, Statistics & Player Avatars
  The homepage requests server status from mcstatus.io. The statistics page requests data from our statistics API and loads player avatars from MCHeads. These requests disclose your IP address and technical request information to the respective service. Avatar requests also contain the displayed player's Minecraft name.
• External Links
  Links to Discord, voting sites and other external services open the respective service when selected. Their privacy notices apply to their own processing. Our embedded Ko-fi form is different: it connects to Ko-fi when the form loads, as explained below.

04 Donations via Ko-fi, Stripe & PayPal

Donations are voluntary and are made through our Ko-fi page. Payments go directly to the operator's connected Stripe or PayPal account, depending on the payment method you select.

• Embedded Donation Form
  Our Donate page embeds a Ko-fi form. When your browser loads that form, it connects to Ko-fi even if you do not complete a donation. Ko-fi receives technical information such as your IP address and browser information and may use cookies or load services needed for its form and checkout. Ko-fi's own cookie choices and privacy information apply within its service.
• Information Available to the Operator
  Ko-fi shares your display name, email address and any message you include. We can also view donation records such as the amount, currency, date, transaction reference, payment status and recurring-payment information where applicable. Stripe or PayPal may additionally make your legal name, billing or address information and limited payment-method details available to us. We use this information to administer your support, answer payment questions and handle refunds or disputes.
• Payment Details & Public Visibility
  Sensitive payment credentials are entered into the payment provider's checkout; our website does not collect or store full card numbers, card security codes or payment-account passwords. On Ko-fi, your display name and message may be publicly visible depending on your choices and Ko-fi's display settings. A private message is shared with the creator, and does not make the payment anonymous to the operator or payment provider.
• Providers' Privacy Information
  Ko-fi is operated by Ko-Fi Labs Limited in the United Kingdom. Ko-fi and the payment providers process data for their own platform, payment, fraud-prevention and legal-compliance purposes. Their own processing is explained in the Ko-fi Privacy Policy, Stripe Privacy Policy and PayPal Privacy Statement. We remain responsible for how we use the supporter information made available to us.

05 Purposes & Legal Bases

• Community operation and security: We process application, server, communication and technical data to administer the community, provide its features, enforce rules and prevent abuse on the basis of our legitimate interests under Article 6(1)(f) GDPR, subject to your rights and interests.
• Donations: Processing necessary to carry out your requested donation, including recurring support and related payment enquiries, is based on Article 6(1)(b) GDPR. Fraud prevention and dispute handling may be based on Article 6(1)(f) GDPR.
• Legal obligations: Where accounting, tax or other legal obligations apply, the necessary processing is based on Article 6(1)(c) GDPR.
• Consent: Where processing requires consent, Article 6(1)(a) GDPR applies only if valid consent has been obtained. Reading this policy or merely visiting the website does not constitute consent.

06 Recipients & International Transfers

We do not sell or rent your personal data. Relevant information is accessible to the operator and community moderators where needed for their tasks, the hosting and other providers described above, and the audiences identified for public pages and chat. Information may also be disclosed where legally required or necessary to handle legal claims.

Minecraft server data is hosted in the USA by Folium Hosting. Cloudflare, Ko-fi, Stripe, PayPal, Discord and other external services may also process data outside the European Economic Area, including in the USA and the United Kingdom.

International transfers require a valid GDPR transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. Using our server does not itself provide consent to an international transfer. The providers' linked privacy notices describe their declared transfer practices.

• Cloudflare publishes its transfer safeguards in its Data Processing Addendum; Stripe publishes its Data Processing Agreement. For information about the specific safeguards applicable to data processed on our behalf, or to request a copy where available, contact the operator.

07 Data Retention

We retain personal data for the relevant purpose and any applicable legal retention requirement. The criteria depend on the type of information:

• Applications and player records: For application review and ongoing whitelist or player administration; unnecessary information should be removed when these purposes end.
• Logs, moderation and ban records: For troubleshooting, investigating incidents and enforcing necessary restrictions. A continuing security need may justify retaining relevant records beyond active participation.
• Donation and contact records: For administering payments or recurring support, resolving enquiries and disputes, and meeting any applicable accounting or legal requirements.
• Provider records and browser storage: Providers' independent retention practices are described in their privacy notices. The theme preference's storage duration is explained in section 03.

08 Your Rights (GDPR)

Subject to the applicable legal conditions, you may:

• Request access to your personal data and correction of inaccurate information.
• Request deletion or restriction of processing, and data portability where applicable.
• Object to processing based on legitimate interests for reasons relating to your particular situation.
• Withdraw consent at any time where processing relies on it, without affecting the lawfulness of earlier processing.
• Lodge a complaint with a data protection supervisory authority, especially in the EU country of your residence, workplace or the alleged infringement.

Contact us using the email below to exercise your rights regarding our processing. For processing controlled independently by Ko-fi, Stripe, PayPal, Discord or another provider, you can also contact that provider through its privacy notice.

09 Contact

For privacy questions or requests concerning Xapros SMP, contact the server operator:

• Email
  duzzl.lp@gmail.com
• Operator location
  Germany (EU)
• Website hosting
  Cloudflare Pages
• Minecraft hosting
  Folium Hosting · USA