Privacy Policy
Translation for convenience; the German version (Datenschutzerklärung) is legally binding.
Last updated: [DD.MM.YYYY]
1. Controller
[First name Last name], Frogtions, [Street No.], [Postcode City], Germany Email: [kontakt@frogtions.net] · Discord: discord.gg/gbmZA8wF8Z
We are not required to appoint a data protection officer. For any privacy question and to use your rights (section 10), write to the email above.
2. Overview
We run the Minecraft network "Frogtions" (a proxy, a lobby, several kingdoms), the website frogtions.net, a Discord server and a store on Tebex. We only process the data needed to run the game, keep it safe and fair, and deliver purchases. We don't sell data and don't use advertising trackers.
3. Data in the game
3.1 Connection and login
- What: player name, Minecraft UUID, IP address, client version, time of login and logout; for players without a Minecraft account (offline mode) also a password, stored as a secure hash (nLogin).
- Why: connecting, logging in, protection against attacks and bots, enforcing bans.
- Legal basis: Art. 6(1)(b) GDPR (providing the game), Art. 6(1)(f) GDPR (legitimate interest in safe operation).
3.2 Country and region
- What: When you log in we derive your country (two-letter code) and region (continent) from your IP address, using a database stored locally on our server (DB-IP Lite); your IP is not sent to anyone for this. Only the country code is stored, together with your kingdom slot.
- Why: to assign you to a fitting kingdom, to show in the menu where most players of a kingdom come from (only as a share, once several players are known).
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a sensible distribution of players).
3.3 Kingdom slot and protection against alt accounts
- What: your kingdom, the time of your first login and your last activity in the network, a shortened hash of your IP address (pseudonymised; the IP itself is not stored here).
- Why: managing kingdom slots, limiting the number of slots per connection (protection against alt accounts).
- Retention: the slot is freed and deleted when you haven't been in the network for 40 days.
- Legal basis: Art. 6(1)(b) and (f) GDPR.
3.4 Game progress
- What: inventory, equipment, ender chest, experience, position, statistics, in-game currency balances, ranks and permissions, land claims (Lands), quests, event points and prizes, forged gear, auctions and shop listings, cosmetics, titles and actions in the kingdom system (King, bank, donations, rebellion, moves), settings (e.g. stream mode).
- Why: the game itself; your progress follows you across servers.
- Retention: as long as your account exists in the network, or until you ask for deletion.
- Legal basis: Art. 6(1)(b) GDPR.
3.5 Chat, commands and moderation
- What: chat messages, commands you enter, reports (
/report), appeals (/appeal), warnings, mutes and bans with reason and time, actions of the team (audit log). - Why: moderation, enforcing the rules, traceable team decisions.
- Retention: server logs [30] days; warnings 12 months; bans until they expire and then [12] months.
- Legal basis: Art. 6(1)(f) GDPR (protecting the players and the game).
3.6 Anti-cheat and anti-bot
- What: movement, combat and connection data while playing; checking the IP address against public lists of known proxies and VPNs.
- Why: detecting cheats and bot attacks. Detections can lead to an automatic kick; bans are reviewed by the team, and you can appeal with
/appeal. - Legal basis: Art. 6(1)(f) GDPR (fair and safe play).
3.7 Rules and consent
- What: the version of the rules and terms you accepted, and when.
- Why: proof of acceptance; we ask again when a new version comes out.
- Legal basis: Art. 6(1)(b) and (f) GDPR.
3.8 Skins
For skins we query Mojang's skin services (for /skin with a link possibly also MineSkin). The player name or skin link is transmitted. Legal basis: Art. 6(1)(b) GDPR.
3.9 Live notice for content creators
Players with the content rank who use /live <link> publish the link to their stream across the network and show "LIVE" in the tab list. This only happens at their own request and ends with /live off or after 12 hours. Legal basis: Art. 6(1)(a) and (b) GDPR.
4. Purchases in the store (Tebex)
The store is run by Tebex Limited (company no. 08129184, London, United Kingdom; [address from checkout.tebex.io/impressum]). Tebex is the seller and is itself responsible for payment processing and the data you enter there (name, email, payment details, billing address). Tebex's privacy policy applies: checkout.tebex.io/privacy.
For delivery we receive from Tebex: player name, package bought, transaction ID, time, and for questions and support the email address and purchase data you entered, in Tebex's management area. We use them only for delivery, support and handling refunds and chargebacks. Legal basis: Art. 6(1)(b) GDPR; retention as required by tax law (Art. 6(1)(c) GDPR).
5. Discord
On our Discord server, Discord Inc.'s terms and privacy policy also apply (discord.com/privacy). There we see what you post publicly, your user name and your roles. We process this for moderation and communication (Art. 6(1)(f) GDPR).
6. Website frogtions.net
Our website frogtions.net is a simple information site without accounts, contact form, tracking or ads. We don't set any cookies ourselves and don't load content from third parties (not even fonts).
- Hosting: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When you open the site, Cloudflare processes the technically necessary data: IP address, time, page requested, browser and operating system, referrer. This serves to deliver the site and to fend off attacks. To fend off attacks, Cloudflare may set strictly necessary cookies.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a safe, fast website).
- Processing on our behalf and third country: Cloudflare processes the data on our behalf (Cloudflare's Data Processing Addendum, Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). More: cloudflare.com/privacypolicy
- Retention: we don't store access data ourselves. Cloudflare deletes logs according to its own periods.
7. Hosting and recipients
- Server hosting: folium.host, [company and address from the contract]. The game servers are in the United Kingdom (covered by an EU adequacy decision, Art. 45 GDPR), the database is in Germany (data centre Falkenstein). A data processing agreement with the host is in place (Art. 28 GDPR).
- Tebex Limited (section 4), Discord Inc. (section 5), Mojang/Microsoft (skins, checking premium accounts at login).
- Team members (moderators) see the data needed for moderation.
- Authorities only if we are legally required.
8. Retention in general
We delete data as soon as it's no longer needed for its purpose. Specific periods are in the sections above. Data we must keep for tax reasons is blocked until the legal period ends and then deleted.
9. Minimum age
The network is meant for players aged [13] and over. Purchases are only possible from 16 under Tebex's terms.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time for the future.
Write to us at [kontakt@frogtions.net] and give your player name. To make sure it's your account, we may ask you to enter a code in game.
You can complain to a data protection supervisory authority, for example the one responsible for us: [State Commissioner for Data Protection, federal state].
11. Changes
We update this privacy policy when the network or the law changes. The version published here applies.