Privacy Policy

This privacy policy explains which personal data HauntedMC processes when you use our website, Minecraft server, community, support channels and related services.

We have written this policy as clearly as possible. Do you have questions about privacy or your data? Contact us through the official HauntedMC support page.

Key points

1. HauntedMC processes data needed to keep the website, Minecraft server, accounts, gameplay features, support, purchases, security and moderation working properly.
2. We never store passwords as readable text. If HauntedMC processes passwords, they are technically secured as hashes.
3. We do not process more data than reasonably necessary for the purposes in this policy.
4. External services, such as Tebex, Discord, Mojang, Microsoft and payment providers, may have their own terms and privacy notices.
5. You can submit privacy requests through support with the subject “Privacy”.
6. For cookies and browser storage, please also see our Cookie Policy.

1. Who are we?

HauntedMC is a Dutch Minecraft community and Minecraft server.

In this privacy policy, “HauntedMC”, “we”, “us” or “our” means the HauntedMC administrators responsible for the website, server, community systems, moderation and support.

Website: hauntedmc.nl Support: hauntedmc.nl/support Privacy requests: through the support page, with the subject “Privacy”

2. Who does this privacy policy apply to?

This privacy policy applies to the use of:

1. hauntedmc.nl and subdomains.
2. The HauntedMC Minecraft server or servers.
3. Accounts, profiles and community features.
4. Support tickets, forms and contact with staff.
5. Moderation, security and management systems.
6. Official HauntedMC channels where we process data ourselves.

External services, such as Tebex, Discord, Mojang, Microsoft, payment providers or other third parties, have their own privacy notices and terms. We are not responsible for how external parties outside our own systems handle data.

3. Which data do we process?

Which data we process depends on how you use HauntedMC.

3.1 Account and profile data

We may process the following data:

1. Minecraft username.
2. Minecraft UUID.
3. Website or community username.
4. Email address, if you create an account or request support.
5. Password hash, if HauntedMC offers account login itself.
6. Language, theme and preference settings.
7. Roles, rights, ranks and account status.
8. Linked accounts, such as Minecraft account, website account or Discord account, if that linking is used.

We never store passwords as readable text. If we process passwords, they are technically secured as hashes.

3.2 Server and gameplay data

While playing on HauntedMC, we may process, among other things:

1. IP address.
2. Minecraft UUID.
3. Join and leave times.
4. Chat messages.
5. Commands used.
6. Gameplay data, such as homes, claims, plots, ranks, permissions, rewards, votes, kits, cosmetics, tokens, keys, statistics and progress.
7. Warnings, mutes, bans, kicks and other moderation data.
8. Technical server logs, error messages and security logs.

This data is needed to keep the server working properly, support players, enforce rules, prevent abuse and keep the community safe.

3.3 Support and communication data

If you contact us, we may process:

1. Your name or username.
2. Your email address, if you use it.
3. Your Minecraft username or UUID.
4. The content of your message or support ticket.
5. Screenshots, files or evidence that you send yourself.
6. Information needed to handle your question, report, complaint, purchase issue, unban request or other request.

Only share information in support that is necessary for your question or report.

3.4 Website and technical data

When using our website, we may process:

1. IP address.
2. Browser and device information.
3. Pages visited.
4. Date and time of visit.
5. Error messages.
6. Security logs.
7. Cookies and similar browser storage, such as localStorage or sessionStorage, if used.

3.5 Store and purchase data

Purchases through the HauntedMC Store are processed through Tebex. Tebex processes data for checkout, payment, fraud prevention, invoicing, delivery and support.

HauntedMC may receive or process data needed to deliver digital benefits on the server or provide purchase related support, such as:

1. Minecraft username.
2. Minecraft UUID.
3. Purchased product.
4. Order number or transaction reference.
5. Payment status.
6. Delivery status.
7. Information about chargebacks, fraud or payment issues, if relevant.

Full payment details, such as card numbers or bank details, are not processed by HauntedMC itself.

More information about purchases is available in our Store Terms.

4. Why do we process data?

We process personal data for the following purposes:

1. Making the website and Minecraft server available and functional.
2. Managing accounts, profiles, ranks, rights and gameplay features.
3. Delivering digital benefits, such as ranks, cosmetics, claim blocks, keys or other server benefits.
4. Handling support questions, complaints, reports and appeals.
5. Enforcing server rules and community guidelines.
6. Preventing and investigating cheating, griefing, spam, fraud, hacks, DDoS attacks, abuse and other violations.
7. Securing our systems and players.
8. Solving technical problems.
9. Improving stability, performance and user experience.
10. Keeping necessary administration.
11. Complying with legal obligations.

5. On what legal bases do we process data?

We only process personal data when there is a valid legal basis.

5.1 Performance of the service

Much of the data is needed to provide HauntedMC. Without certain data, you may not be able to join, use an account, receive a rank or get support.

Examples:

1. Minecraft UUID for server access and ranks.
2. Gameplay data for server features.
3. Support data to handle your question.
4. Purchase data to deliver digital benefits.

5.2 Legitimate interest

We have a legitimate interest in keeping HauntedMC safe, fair and stable.

Examples:

1. Logs for security and troubleshooting.
2. Moderation data for bans, mutes and warnings.
3. Anticheat, antispam and anti abuse.
4. Fraud prevention.
5. Protection of players, staff and systems.

For this processing, we balance our interest against the privacy of players. We try not to process more data than necessary.

5.3 Legal obligation

Sometimes we must store or share data because the law requires it, for example for administration, tax, legal requests or disputes.

5.4 Consent

For certain optional processing, we ask for consent, for example for non necessary analytics, marketing cookies or tracking. You can withdraw consent later.

6. Cookies and similar storage

HauntedMC may use cookies and similar browser storage, such as localStorage or sessionStorage.

6.1 Necessary cookies and storage

These are needed to keep the website safe and functional.

Examples include:

1. Session cookies.
2. Security cookies.
3. CSRF protection.
4. Storage of cookie preferences.
5. Technical storage needed for login, forms, security or basic functionality.

These cookies and storage are necessary and cannot be disabled through our cookie preferences.

6.2 Functional storage

Functional storage may be used to remember preferences, such as:

1. Chosen language.
2. Theme or display preference.
3. Closed notices.
4. Other simple website preferences.

This storage is not used for tracking or marketing.

6.3 Analytics and marketing

HauntedMC only uses analytics or marketing cookies if they are actually enabled and if consent has been requested where required.

Without consent, we do not load optional analytics or marketing scripts that require consent.

6.4 Current cookie overview

The current cookie and storage overview is available in our Cookie Policy. There we explain per item which storage is used, what it is used for, how long it is kept and whether consent is required.

7. Who do we share data with?

We only share personal data when necessary for HauntedMC, support, security, legal obligations or with your consent.

We may share data with or have it processed by:

1. Hosting and infrastructure providers.
2. Tebex, for store, checkout, delivery, billing support, refunds and fraud prevention.
3. Payment providers through Tebex.
4. Discord, if you contact us through Discord or participate in our Discord community.
5. Email or support providers.
6. Security, anti abuse or fraud prevention systems.
7. Technical service providers that help with management, logging, monitoring or backups.
8. Competent authorities when we are legally required to do so.

Where needed, we make agreements with parties that process personal data on our behalf about security and processing.

8. International processing

Some external services may process data outside the European Economic Area.

If that happens, we take appropriate safeguards where possible, such as contractual agreements, standard clauses or other valid mechanisms.

9. How long do we keep data?

We do not keep personal data longer than necessary for the purpose for which it was collected, unless a longer retention period is needed or required.

Guidelines:

1. Technical website and server logs are usually kept for a maximum of 90 days, unless longer storage is needed for security incidents, abuse or investigations.
2. Support tickets are usually kept for a maximum of 24 months after completion, unless longer storage is needed for evidence, complaints or disputes.
3. Account data is kept as long as your account exists and afterwards as long as reasonably necessary for security, recovery, disputes or legal obligations.
4. Gameplay data is kept as long as needed for server features, game progress, community management and technical continuity.
5. Moderation data, such as bans, mutes and warnings, is kept as long as needed for safety, enforcement, appeal procedures and protection against repeated abuse.
6. Purchase and delivery data is kept as long as needed for delivery, support, administration, fraud prevention, chargebacks and legal retention obligations.
7. Cookie preferences are kept for a maximum of 12 months, unless you change or delete your preference earlier.

In cases of serious violations, fraud, security incidents or legal disputes, data may be kept longer where necessary.

10. Minors

HauntedMC is a Minecraft community and may be used by minors.

We ask players not to share unnecessary personal data in chat, messages, builds, signs, support tickets or other public or semi public places.

Are you under 16? Ask a parent or guardian for help or permission before sharing personal data, creating an account, contacting support or making a purchase.

Parents or guardians may contact us through our support page if they have questions about data of a minor player.

11. Security

We take appropriate technical and organizational measures to protect personal data.

Examples include:

1. Limited access to management systems.
2. Rights and roles for staff.
3. Security of accounts and systems.
4. Logging and monitoring.
5. Secure connections where possible.
6. Password hashing if we process passwords.
7. Restricted access to support and moderation data.
8. Backups and technical measures against data loss.

No system is completely secure. If you think you have found a security issue, please report it through our support page.

12. Your privacy rights

Under the GDPR, you have several rights. Depending on the situation, you can ask us for:

1. Access to your personal data.
2. Correction of incorrect data.
3. Deletion of data.
4. Restriction of processing.
5. Transfer of data.
6. Objection to certain processing.
7. Withdrawal of consent, if processing is based on consent.

You can submit a request through our support page with the subject “Privacy”.

We may ask for information to verify that the request really comes from you. This helps prevent data from being given to the wrong person.

Sometimes we cannot delete data immediately, for example if we still need it for security, moderation, fraud prevention, administration, legal obligations or disputes.

13. Complaints

If you believe we are not handling your personal data properly, please contact us first through the support page. We will try to resolve the issue together.

You also have the right to file a complaint with the Dutch Data Protection Authority.

14. Changes to this privacy policy

We may update this privacy policy when HauntedMC, our systems or the law changes.

The latest version is always available on our website.

For important changes, we will inform users in an appropriate way, for example through the website, Discord or another official announcement.

15. Questions

Do you have questions about this privacy policy or your data? Contact support.

Support: hauntedmc.nl/support