Privacy Policy - Everdawn

1. The short version

We only collect what we need to run a safe, fair Minecraft server: your Minecraft name and UUID, what you do and say in game, and some connection data to stop cheaters, alts and ban evasion.
Chat and private messages are logged and can be read by staff - many of our players are children, and this is how we keep them safe. Chat logs are deleted after 14 days.
We never ask for your real name, age, address, photos or phone number - and our rules forbid sharing them.
No ads, no selling of data, no tracking. This website sets no cookies and has no analytics. PayPal's checkout (with its own cookies) only loads when you choose to pay.
If you buy the Supporter rank, PayPal handles the payment. We never see your card or bank details - we keep only what we need for the order and for tax law.
Sensitive files are encrypted on the server, backups are encrypted and deleted after 14 days, and the server can only be reached by key-based logins behind a firewall.
You can ask to see, correct or delete your data at any time: email maximbozek1@gmail.com. Parents can do this for their children.

2. Who is responsible

Everdawn is a free, fan-run Minecraft server. The person responsible for your data (the "controller" under the EU General Data Protection Regulation, GDPR) is:

Controller: Maxim Bozek
Email: maximbozek1@gmail.com
Postal address: Available on request - just email us
Discord: discord.gg/UTgcg9mBFk (open a ticket)

"We", "us" and "our" in this policy mean Maxim Bozek as the operator of Everdawn. Everdawn is too small to be required to appoint a Data Protection Officer; privacy questions go straight to the owner at the email above.

Everdawn is not an official Minecraft product and is not approved by or associated with Mojang or Microsoft. Mojang and Microsoft are not responsible for how Everdawn handles your data.

3. What this policy covers

This policy applies to:

The Minecraft server network at play.everdawnmc.net: a proxy that you connect to, the main game server, and a small waiting server that holds you during restarts.
Our Discord server and the Everdawn Discord bot.
This website, everdawnmc.net, including the Supporter store.

It does not cover other companies' services that you use alongside ours - Minecraft itself (Mojang/Microsoft), Discord, PayPal or the server-list websites you vote on. They have their own privacy policies, linked in section 7.

4. What data we process and why

Below is every kind of personal data our systems handle, what it's for, the legal basis (explained in section 5) and how long we keep it. "Staff" means our volunteer helpers, moderators, admins and the owner.

4a. Minecraft account and player record

What: Your Minecraft username and UUID (the permanent id of your Minecraft account), usernames we've seen you use before, when you first joined, when you were last online and your total playtime. Your skin is loaded by each player's game from Mojang - we don't store it.
Why: To give you an account on the server, keep your progress, let other players find you (for example for /msg or /pay) and let staff help you and enforce the rules - even when you're offline.
Legal basis: Providing the service you asked to use (Art. 6(1)(b) GDPR) and our legitimate interest in running the server safely (Art. 6(1)(f)).
Kept for: As long as your player record exists - that is, until you ask us to delete it or Everdawn closes. If you ask for deletion while you have an active ban, we keep your UUID, names and the ban record until the ban ends.
Who sees it: Your name is public in game, on leaderboards and in chat. Join dates and playtime are visible to staff (and some stats to other players, for example on leaderboards).

4b. IP addresses and connections

Your IP address is needed for your game to talk to our server at all. On top of that, we keep a few carefully limited records to stop alts, ban evasion and account theft:

What

Alt limiter (proxy): the address you join from (for IPv6, only the first half - the /64 network) together with the accounts that joined from it and when. It limits how many different accounts can join from one connection (currently 4 within 30 days) and warns staff when someone joins from an address a banned account used.
Player record: the last IP address you joined from, so admins can check suspected ban evasion. It is overwritten at every login. The EssentialsX plugin also keeps your last address in its user file.
IP bans: if an admin bans an address, it stays on the ban list until the ban is lifted.
Invites (/invite): never the address itself - only a salted, one-way hash (SHA-256) of the network part (IPv4 /24 or IPv6 /64), so a player can't invite their own alt accounts for rewards. At most 12 per account, each for 30 days.
Login protection (only if you linked Discord): a keyed one-way hash (HMAC-SHA256) of the network part of the places you normally play from - up to 20, the least recently used is dropped first. A login from a new place is held until you confirm it in a Discord DM, which shows you a masked address such as 203.0.113.x. If you answer "Not me" or staff approve a location for you, our security log records only the masked address and a keyed hash of it (so entries about the same place can be matched) - never the full address.
Store rate limits: the website store counts requests per address in memory for a few minutes to stop abuse. It is never written to disk.

Why

Security and fairness: stopping ban evasion, alt-account abuse, reward farming, account theft and attacks on the store.

Legal basis

Legitimate interests in protecting the server, its players and the store from abuse (Art. 6(1)(f)).

Kept for

Alt limiter: 90 days after the last login from that address. Last IP in the player record: until your next login replaces it, or until your record is deleted. Invite hashes: 30 days. Login protection hashes: while your Discord link exists. Masked address kept by the Discord bot: 15 minutes (the DM itself stays in your DMs). Security log: 90 days. IP addresses are not written to our normal server logs.

Who sees it

Full IP addresses: admins and the owner only. Other staff see masked addresses at most. Never shown to other players.

4c. Chat and private messages

What: Everything you type in public chat, team chat and private messages (/msg, /r), and the commands you use. Messages blocked by the chat filter are logged with the reason, and players get "strikes" for repeated filter hits. If an adult turns on unfiltered swearing in /settings (after confirming they are 18 or older), that confirmation is logged.
Why: To enforce the rules and protect players - especially children - from bullying, grooming, scams, hate speech and people asking for personal information. Private messages are not secret from staff: staff can read them in the chat logs, and moderators can also watch them live. Please don't send anything in a private message that you wouldn't want a moderator to read.
Legal basis: Legitimate interests in keeping the community safe and enforcing the rules (Art. 6(1)(f)); protecting children is a weighty interest here.
Kept for: Chat and private message logs: 14 days (the last 2 hours are also kept in memory for staff's /chatlog). Chat and command history inside CoreProtect: 90 days (see 4e). Chat filter log: 14 days. Filter strike counts: while your player record exists.
Who sees it: Public chat: everyone online. Chat logs, including private messages: staff (helpers and above). Moderators and above can also watch private messages live.

4d. Moderation records and reports

What: Warnings (with id, reason, staff member and date - removed warnings stay on record, marked as removed), mutes, kicks, temporary and permanent bans (with a ban id for appeals), reports you send with /report and reports others send about you, and a moderation log of every staff action.
Why: To enforce the rules consistently, escalate repeated rule breaking, handle appeals and check that staff act fairly.
Legal basis: Legitimate interests (Art. 6(1)(f)).
Kept for: Punishment records stay with your account while you play here, because repeat offences are judged on history; an active ban is kept for as long as it lasts. The moderation and report logs are kept for 90 days.
Who sees it: Staff. You can see your own warnings with /warnings. The name of whoever reported you is never shown to you.

4e. Block and activity history (CoreProtect)

What: Blocks you place and break, items you put into or take out of containers, sign text, kills, chat, commands, and when and where you log in and out - each with your name and a time stamp.
Why: To investigate griefing, theft and reports, and to roll back damage.
Legal basis: Legitimate interests (Art. 6(1)(f)).
Kept for: 90 days, then purged automatically.
Who sees it: Staff with lookup rights.

4f. Game progress, items and settings

What: Your coins and bank balance, inventory, ender chest, vaults and stashes, statistics (for example blocks mined, kills, deaths, playtime), quests, journal, tags, perks, trails, homes (saved locations), plot and the players you trust on it, team, trades and coin payments, crate keys and relics, rewards you claimed, your /settings choices, which version of the rules you accepted and when, your nickname, your list of blocked players, your invite code, your Wilds start spot and - for Supporters - your own join message and chosen name colour.
Why: This is the game itself: without it, your progress wouldn't be saved.
Legal basis: Providing the service (Art. 6(1)(b)); for the rules acceptance and the trade and payment logs also legitimate interests in preventing scams and duping (Art. 6(1)(f)).
Kept for: As long as your player record exists. Trade, coin-payment and similar audit logs: 90 days.
Who sees it: You; staff; other players where the game shows it (leaderboards, your tags and name colour in chat, plots, teams, join messages).

4g. Anti-cheat and item protection

What: Automatic checks look at how you move, click and farm (to catch macros and autoclickers) and at the items you hold (to catch illegal, forged or duplicated items). Results are logged with your name and, for items, where they were seen. Removed items are stored so staff can give them back if a check was wrong.
Why: Fair play and a healthy economy.
Legal basis: Legitimate interests (Art. 6(1)(f)).
Kept for: Macro check log: 14 days. Item protection log: 90 days. Where a unique item was last seen: a limited number of hours. Removed items: until they are restored or reviewed.
Who sees it: Staff. See also section 11.

4h. Feedback, bug reports and surveys

What: What you send with /feedback, /suggest, /bug and /review (up to 200 characters each, filtered), your name, for bug reports your location in the game, staff replies, and your answers to the optional monthly one-question survey. Suggestions and bug reports are also posted by our bot in Discord channels.
Why: To improve Everdawn and answer you.
Legal basis: Legitimate interests (Art. 6(1)(f)). Sending feedback is always optional.
Kept for: Open entries until they are handled; finished entries are deleted automatically after 180 days. Discord posts: see 4j.
Who sees it: Staff; suggestions and bug reports posted on Discord are visible to members of those channels. If a suggestion gets built, it may be announced - you can stay anonymous.

4i. Voting

What: When you vote on a server-list website, that site sends us your Minecraft name, the site's name and the time (the Votifier protocol can also include the IP address the site saw - we don't store or use it). We keep rewards waiting until you're online and a log of votes.
Why: To give you your vote rewards and stop reward abuse.
Legal basis: Providing the service (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
Kept for: Pending rewards until you collect them; vote log 14 days.
Who sees it: Staff; players with vote alerts on see "Name voted" in chat. The voting websites are independent - their own privacy policies apply to what you do there.

4j. Discord server and bot

What

Everything on Discord is processed by Discord under its own privacy policy. Like any server's staff, we can see what you post in our server, your username, avatar, roles and join date.
Auto-moderation: the bot checks messages for spam, bad links and filtered words, and uses your account's age during raids.
Activity points for /claim: your Discord id, a points count, the time of your last point and last claim, and your last counted message (lower case, up to 200 characters, only so repeated messages don't count twice).
Discord warnings: reason, staff member and date.
Support tickets: when a ticket is closed, its messages are saved as a transcript in a staff-only channel.
Staff applications: your answers are posted in a staff-only channel; the bot remembers whether an application is pending or was declined, so you can't re-apply the same day.
Account link (/link + /discord link): your Discord id with your Minecraft UUID and name, so roles, rewards and login protection work.
Bot audit log: admin actions taken through the bot.

Why

To run and protect our Discord community, provide support and connect your Discord and Minecraft accounts when you ask us to.

Legal basis

Legitimate interests (Art. 6(1)(f)); the account link is a feature you choose to use (Art. 6(1)(b)).

Kept for

Account link: until you unlink (/discord unlink) or ask us to delete it. Activity points: while you're a member. Discord warnings, ticket transcripts and application records: 12 months, then deleted automatically. Bot audit log: 90 days. Bot logs (the server's system journal): 30 days.

Who sees it

Staff (tickets, applications, warnings); Discord itself.

4k. Supporter rank purchases

What

Before you pay: the Minecraft name you type is sent from our server to Mojang's public API to find the account (UUID and skin). Your browser loads the skin through our server, so it doesn't contact Mojang.
Order: PayPal order id, Minecraft name and UUID, whether you chose to show your name publicly, and the three confirmations you ticked at checkout (terms, immediate delivery and withdrawal waiver, age or parental permission) with the time and the version of the terms.
Purchase: PayPal capture (transaction) id, the order data above, amount, currency, date and status (for example active, refunded or reversed) and when the rank was delivered. The game server keeps your UUID, name, Supporter-since date, the transaction id(s), whether you chose to show your name and whether you've been thanked, plus a log of grants and refunds.
Supporter perks: the perks you set up (your name colour, kill effect, join firework and your own join message) are stored with your other settings. When the server is full and you use priority join, the time is logged (kept 90 days). To make priority join work, the game server shares the list of Supporter accounts (UUIDs only) with our own proxy.
What PayPal shows us: like for any PayPal payment, our PayPal account shows the payer's name, PayPal email address and the transaction details PayPal gives sellers. We don't copy these into our own systems.
What we never get: your card number, bank details or PayPal password.

Why

To deliver the rank to the right account, handle refunds, chargebacks and support, prove what you agreed to at checkout, and keep the records tax and accounting law requires.

Legal basis

Performing the contract (Art. 6(1)(b)); legal obligations such as tax and accounting record-keeping (Art. 6(1)(c)); legitimate interests in preventing payment fraud (Art. 6(1)(f)); showing your name publicly only because you chose it (Art. 6(1)(a) - you can withdraw that choice any time).

Kept for

Unpaid orders: 7 days. Purchase records: while the rank is active and for as long as tax and accounting law requires (up to 10 years, depending on the country). Payment status is re-checked with PayPal for about 200 days to catch refunds and chargebacks. PayPal notification ids: 30 days.

Who sees it

The owner (payment records). Everyone sees the Supporter badge - that's the product. Your name appears on the Supporter Wall at spawn, the thank-you list on this website and in a thank-you chat message only if you ticked "show my name".

4l. This website

What: Our web server is set up without access logs: we don't record which pages you visit or your IP address. There are no cookies, no analytics, no tracking pixels, no embedded videos and no external fonts. The store's own requests are counted per address in memory only (see 4b).
Why: To show you the site and run the store.
Legal basis: Legitimate interests (Art. 6(1)(f)).
Third parties: PayPal's checkout script loads from paypal.com only after you've entered a name, confirmed it's you and ticked the three checkout boxes. From then on, PayPal processes data about your browser and device (including cookies) under its own privacy policy, for example to prevent fraud. Links to Discord and voting websites take you to those sites, which have their own policies.

4m. Server logs and backups

What: The Minecraft proxy and game servers, the Discord bot and the server's operating system keep technical logs: joins and leaves, commands, chat, errors and security events (the operating system also records connection attempts to its own services, for example failed logins, with the address they came from). IP logging in the Minecraft server logs is turned off. Backups contain the game, plugin and Discord bot data described above (including the plugin's own logs and chat logs), but not the server console logs.
Why: To keep the servers running, fix bugs, defend against attacks and recover from failures.
Legal basis: Legitimate interests (Art. 6(1)(f)).
Kept for: Minecraft proxy and game server logs: 14 days. The system journal (Discord bot and operating system): 30 days. Backups: made every 2 hours; the 12 newest plus one per day for 14 days are kept, so anything deleted is gone from all backups after at most 14 days.
Who sees it: The owner and admins with server access.

5. Legal bases

Under Article 6 of the GDPR, we may only use personal data when there is a legal basis. We rely on these:

Legal basis	What it covers at Everdawn
Contract / service you asked for Art. 6(1)(b)	Your account, progress and items, Discord account linking, vote rewards and the Supporter rank you buy.
Legitimate interests Art. 6(1)(f)	Moderation, chat logs, anti-cheat, alt and ban-evasion checks, security logs, backups and fraud prevention. Our interest is a safe, fair and working server - especially for the children who play here. We keep these records short-lived and minimal, and you can object (see section 13).
Legal obligation Art. 6(1)(c)	Keeping payment records for tax and accounting law; answering lawful requests from authorities.
Consent Art. 6(1)(a)	Showing your name on the Supporter Wall, the website thank-you list and in the thank-you message. You can withdraw it at any time; this doesn't affect what happened before.

We don't use your data for advertising, don't sell it, and don't build marketing profiles.

6. Who can see your data

Other players see what any Minecraft server shows: your name, skin, chat messages, tags, name colour, builds, plots, teams, and stats on leaderboards and in some menus.
Staff only get the access their rank needs: helpers can read chat logs (including private messages) and give warnings; moderators can also watch private messages live and mute; admins can also see IP addresses, ban and use the data tools; the owner has full access to the servers. Staff are volunteers and must keep what they see confidential.
Discord members see what you post in our Discord channels.

7. Service providers and other recipients

We don't sell or rent personal data. These companies receive data because they provide part of the service:

Recipient	Role	What they get
OVH SAS (OVHcloud), France	Hosting - processor acting on our instructions, bound by OVHcloud's data processing agreement (Art. 28 GDPR)	Everything stored on our server, which runs in OVHcloud's London, United Kingdom data centre. OVH doesn't use it for its own purposes.
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg	Payment provider - independent controller (PayPal privacy)	The order (item, price, Minecraft name and UUID) and whatever you give PayPal when paying.
Discord Inc., USA	Chat platform - independent controller (Discord privacy)	Everything you do on Discord; the messages our bot posts (for example suggestions and ticket transcripts).
Mojang AB / Microsoft	Minecraft account authentication - independent controller (Microsoft privacy)	When you join, our proxy asks Mojang's session service whether your account is genuine (your username and a session code, as on every online-mode server). The store also looks up names on Mojang's public API.
Server-list websites	Independent controllers	What you enter when you vote there. They send us your Minecraft name (see 4i).
Authorities	Only where the law requires it	The specific data a lawful request covers - or where needed to protect someone's life or safety, for example to report child abuse.

8. Transfers outside the EU/EEA

Our server is in the United Kingdom. The European Commission has decided that the UK protects personal data adequately (an "adequacy decision" under Art. 45 GDPR), so no extra safeguards are needed.
Discord, Microsoft and PayPal may process data in the USA and other countries. They rely on the EU-US Data Privacy Framework, standard contractual clauses approved by the European Commission and/or binding corporate rules, as described in their own privacy policies.

9. How long we keep data

We delete data as soon as we no longer need it. In one place:

Data	Kept for
Server logs (Minecraft proxy and game servers)	14 days
System journal (Discord bot, operating system)	30 days
Chat and private message logs	14 days (last 2 hours also in memory)
CoreProtect block, container, chat and command history	90 days
Backups	At most 14 days
Alt limiter IP records (proxy)	90 days after the last login from that address
Invite network hashes	30 days
Login protection network hashes	While your Discord link exists (max. 20 places)
Masked IP in login-protection requests (bot)	15 minutes
Store rate-limit counters	Minutes, in memory only
Short logs (chat filter, macro check, votes, feedback, join messages)	14 days
Audit logs (moderation, reports, security, trades, coin payments, item protection, staff actions, priority joins, Discord bot audit log)	90 days
Record that a data request was carried out	Kept (proof that we did what you asked - only your name, UUID and what was done)
Safety copy of a profile made by a staff reset or deletion	14 days
Finished feedback, suggestions and bug reports	180 days
Discord warnings, ticket transcripts, staff application records	12 months
Discord - Minecraft account link	Until you unlink
Unpaid store orders	7 days
Purchase records	While the rank is active, and as long as tax law requires (up to 10 years)
Player record, progress, items, settings, punishment records	Until you ask for deletion or Everdawn closes (an active ban is kept until it ends)

If Everdawn closes for good, we delete the player data within 3 months, except payment records that tax law requires us to keep.

10. Children and parents

Everdawn is open to players of all ages, and many of our players are under 18. That's why:

We collect as little as possible. We never ask for a real name, age, birthday, school, address, phone number or photos. Sharing personal information - your own or anyone else's - is against our rules.
We watch chat to protect children. Chat is filtered, and staff can read public chat and private messages so they can step in against bullying, grooming, scams and adults asking children for personal details (see 4c).
No ads, no profiling, no marketing - for anyone.
Consent-based options need a parent below the digital consent age. Under Article 8 GDPR, a child below the age set by their country (between 13 and 16 in the EU) can't consent to online services alone. The only thing we base on consent is showing a Supporter's name publicly - for younger children, a parent or guardian has to agree to that.
Buying the Supporter rank needs you to be 18 or older, or have a parent's or guardian's permission; PayPal accounts are for adults. See the Terms of Sale.
Adults-only options, such as turning off the swear filter, require confirming you are 18 or older.
Discord requires users to be at least 13 (or older where local law says so).

Parents and guardians can ask us what data we hold about their child, ask us to correct or delete it, or ask for a purchase made without permission to be looked at. Email maximbozek1@gmail.com with your child's Minecraft name. We'll take reasonable steps to check that you are the parent or guardian before we share or delete anything.

If you're worried about a child's safety on Everdawn, contact us straight away - and in an emergency, contact your local police.

11. Automated decisions

Some protections run automatically, without a person deciding each case:

the chat filter blocks messages and gives strikes; a set number of active warnings within a few days leads to a short automatic mute;
the macro check pauses farming rewards (it never bans, kicks or takes anything) until you click "I'm here";
item protection removes illegal or duplicated items (kept so they can be given back);
the alt limiter refuses a login when too many accounts use one connection, and login protection holds logins from a new place until you confirm them;
on Discord, auto-moderation removes spam and bad links and may time a member out.

None of these has legal effects on you, and none of them bans anyone on its own - bans are always decided by a person. You can always ask a staff member to look at an automatic action again: open a ticket on Discord or email us.

12. How we protect your data

Being rolled out in the week of 30 September 2026: encryption at rest, encrypted backups and keeping IP addresses out of the normal server logs. This note is removed once they are all active.

Encryption at rest: the files with the most sensitive personal data are stored encrypted (AES-256) on the server: player records with IP addresses, Discord account links, login-protection and vote records, Supporter payment records, the security, chat filter and chat logs, and all of the Discord bot's data. The keys are kept separately and are readable only by the services that need them. Two IP records are protected by file permissions only, not encrypted: the proxy's alt-limiter list (90 days) and the EssentialsX plugin's user files (your last address).
Encrypted backups: backups are encrypted, readable only by the server's administrator account and deleted after at most 14 days.
Locked-down server access: logging in to the server needs a cryptographic key - passwords and direct administrator ("root") logins are switched off. Repeated failed attempts are blocked automatically.
Firewall: only the ports the game, the website and vote notifications need are open. Everything else is closed.
Separation: the Discord bot runs as its own low-privilege user with a private data folder; passwords and API keys live in files only the system can read and never appear in logs. The store's programming interface only listens inside the server, behind the web server.
Less data in the first place: network ids are stored as salted or keyed hashes, logs show masked addresses (like 81.22.x.x), and IP addresses are kept out of the normal server logs.
HTTPS everywhere on this website, with strict transport security.
Least privilege for staff: each staff rank only sees what it needs (see section 6).
Payments: handled entirely by PayPal - card and bank details never touch our server.

No system is perfectly secure. If a data breach is likely to put your rights at risk, we will report it to the competent supervisory authority within 72 hours and tell affected people where the law requires it (Art. 33 and 34 GDPR).

13. Your rights

Under the GDPR (and the UK GDPR) you have the right to:

Access - get a copy of the personal data we hold about you (Art. 15).
Rectification - have wrong data corrected (Art. 16).
Erasure - have your data deleted, unless we have to or may keep it for a good reason, such as tax law or an active ban (Art. 17).
Restriction - have us pause using your data while a question is sorted out (Art. 18).
Data portability - get the data you gave us in a common machine-readable format (Art. 20).
Object - object to processing based on legitimate interests. We'll stop unless we have compelling reasons - for example, we can't stop logging chat for one player while they keep playing, because that would defeat the safety purpose (Art. 21).
Withdraw consent - for example, stop showing your name as a Supporter, at any time (Art. 7(3)).
Human review of automated actions (see section 11).
Complain to a supervisory authority (see section 15).

14. How to use your rights and delete your data

Contact us by email at maximbozek1@gmail.com or open a ticket on our Discord. Tell us your Minecraft name and what you'd like.
We check it's really you - usually by asking you to type a short code in game from that account, or through your linked Discord account. For a child's data we check that you're the parent or guardian. We only use this information for the check.
We answer within one month. For complicated requests we can extend this by two more months, and we'll tell you why. It's free, unless a request is clearly unfounded or excessive.

What happens when you ask us to delete your data

Staff use our deletion tool (/userdata delete), which wipes your progress, coins, inventory and ender chest, homes, nickname, trails, kits, Wilds spots, permissions and ranks, and your EssentialsX data. If you're online, you are disconnected first.
The same tool also deletes your join and leave messages, including a Supporter's own join message.
We then remove the rest by hand where there's no reason to keep it: settings, quests, rules acceptance, plot and team membership, vault and stash contents, IP records, your Discord link, feedback, and your name on the Supporter Wall and thank-you list.
What we keep, and why: records needed to enforce an active ban or mute (until it ends); payment records that tax law requires; a short record that we carried out your request; and entries in logs and backups until they expire on their normal schedule (14 days for server logs, chat logs, backups and the tool's safety copy of your profile, 30 days for the system journal, 90 days for CoreProtect and audit logs, 12 months for Discord warnings and tickets).
Deleting is permanent - once the safety copy and the backups have expired (after 14 days at most), your progress can't be restored. If you are a Supporter, tell us whether you'd like to keep the rank: we can keep just the minimal record needed for it (your UUID and the payment record) so it stays on your account.

You can also do some things yourself: unlink Discord with /discord unlink, change what you see and share in /settings, and simply stop playing - but stopping doesn't delete your data, so email us if you want it gone.

15. Complaints

If you think we've handled your data wrongly, please tell us first - we'd like the chance to fix it. You also have the right to complain to a data protection supervisory authority, in particular in the EU/EEA country where you live, work or where the problem happened (Art. 77 GDPR). You'll find every EU/EEA authority on the European Data Protection Board's website. In the UK, the authority is the Information Commissioner's Office (ICO).

16. Cookies and similar technologies

This website doesn't set cookies, doesn't use local storage for tracking and has no analytics or advertising scripts, so there is no cookie banner. The only exception is PayPal: when you reach the payment step and have ticked the checkout boxes, PayPal's checkout loads from paypal.com and may set its own cookies and collect device information (for example for fraud prevention and to keep you logged in to PayPal). That is governed by PayPal's cookie and privacy statements.

17. Changes to this policy

When our systems change, this policy changes too. The date at the top shows the latest version. We'll announce important changes on our Discord and on this website before they take effect where we can.

18. Contact

Questions about privacy, or want to use your rights? Email maximbozek1@gmail.com (Maxim Bozek). A postal address is available on request. See also our Terms of Service & Sale and Refund & Withdrawal Policy.