The controller of your data is Nexite, a vennootschap onder firma registered in the Netherlands. Our registration and VAT details are on our Terms of Service page. You can reach us at [email protected] for anything in this policy.
| Data | Why We Need It | How Long |
|---|---|---|
| Minecraft UUID and username | Identifying your account and saving your progress, statistics and purchases. | For as long as your account exists, or until you ask us to delete it. |
| IP address | Recorded when you connect. Used to enforce bans and to stop a banned player returning on a new account. | Deleted automatically after 90 days. |
| Login and logout times | Playtime statistics, and identifying accounts belonging to the same person. | Deleted automatically after 90 days. |
| Gameplay data | Your inventory, items, currency, quests, plots, levels and leaderboard scores. | For as long as your account exists, or until you ask us to delete it. |
| Chat messages | Moderation and investigating player reports. | Deleted automatically after 12 months. |
| Anti-cheat flags and movement recordings | Detecting cheating while you are playing. Includes short recordings of your in-game movement around a suspicious moment. | Deleted automatically after 7 days. |
| Anti-cheat violation history | Telling a genuine cheater apart from lag or a false positive across sessions. | Deleted automatically after 90 days. Where a ban was issued, the evidence behind it is kept for six months so the ban can be appealed and reviewed. |
| Punishment records | Enforcing bans and mutes, and applying the escalation ladder set out in our rules. | Kept while the punishment is in force, and afterwards as part of your offence history, which determines the next step on the ladder. A permanent ban is kept for as long as the ban stands. |
| Discord ID | Only if you choose to link your Discord account. Used for your link reward, and to check you are linked before you can apply through our Discord forms. | Until you unlink it. |
| Discord application forms | Applications you submit through our Discord bot, such as whitelist, beta and game mode signups, together with our answer to them. | For as long as your account exists, or until you ask us to delete it. |
| Purchase records | Delivering what you bought into your account, proving you own it, and making sure we never deliver it twice. We receive a transaction reference and the items purchased, nothing else. | For as long as your account exists, or until you ask us to delete it. The record of the sale itself belongs to Tebex, not us. |
We do not record voice chat. Voice is passed straight between players and is never written to disk. Some servers record voice for moderation. We do not.
We do not use tracking cookies, advertising or analytics on this website. The only thing we keep in your browser is your shopping basket and the username you are buying for, which the store needs to work at all.
We never receive your card details. Those stay with Tebex and their payment processors, and we could not see them if we wanted to. Tebex's payment notification to us does contain your name, email address, country and postal code, but we strip those out the moment it arrives: they are never stored and never used. We do not sell your data to anyone, ever.
We record the address you connect from and use it for one thing: enforcing bans. If an account is banned, we check whether someone joining shares an address with it, so a ban cannot simply be dodged by making a new account.
These records are deleted automatically after 90 days. We do not use them to track your location, and we never share them with advertisers or analytics providers.
Different data rests on a different legal basis under the GDPR.
Legitimate interest (Article 6(1)(f)) covers your account, gameplay data, chat moderation, anti-cheat and punishment records. Our interest is running a game server, keeping it fair, and stopping banned players returning on a new account.
Performance of a contract (Article 6(1)(b)) covers delivering what you bought. Our Terms of Service are the agreement between you and us, and putting a purchased item into your account is us keeping our side of it. We need a record of what you bought to do that and to avoid delivering it twice.
The sale itself is not ours. Tebex is the seller and merchant of record, so the invoice, the payment record and the tax obligations that go with them are theirs, held under their own privacy policy. Our own bookkeeping records what Tebex pays us, not what you bought.
Consent (Article 6(1)(a)) covers linking your Discord account. It is entirely optional, and you can withdraw it at any time by unlinking, which deletes the link.
Tebex is not working on our behalf. They are the seller and merchant of record for our store, which makes them a separate controller of your data in their own right, responsible under their own privacy policy for the payment details they collect from you. A request about your payment data has to go to them, not to us. If you link your account, we exchange your ID with Discord, who are likewise responsible for their own side of it.
Our hosting provider works for us, not alongside us. Our servers are in Germany, and we have a data processing agreement with them under Article 28 of the GDPR: they process your data only on our instructions, may not use it for anything of their own, and everything stays inside the EU.
Our DDoS protection provider keeps the server reachable when someone attacks it. Every connection to Nexite passes through them first, so they see your IP address, your username and your client version before we do. They keep their connection logs in Canada, which the European Commission recognises as giving personal data an adequate level of protection, and delete them after 30 days. They are responsible for that data under their own privacy policy rather than ours.
We do not share your data with anyone else.
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable form, object to how we use it, or withdraw any consent you have given. There is no button for this: email us or open a ticket and a member of staff will handle it. We will respond within one month.
Deleting your data means losing your progress, statistics and purchases, and cannot be undone.
Punishment records are the one exception. If we deleted those on request, a banned player could clear their own ban by sending us a deletion request and walk straight back in, so we keep them for as long as the punishment is still in force or still counts towards your escalation ladder.
We can only delete what we hold. The record of a payment sits with Tebex, so a request to erase that has to go to them.
Our anti-cheat can ban an account automatically, and punishments escalate automatically based on your offence history, so the same offence always leads to the same next step.
If an automated decision affects you, you can contest it and ask for a person to review it by appealing in our Discord server with /appeal. Every appeal is read by a human moderator, not a machine. The process is set out on our rules page.
Nexite is intended for a general audience. If you are under 16, ask a parent or guardian before playing, and you cannot buy anything from our store at all. If you are a parent or guardian and believe your child has given us personal data, contact us and we will remove it.
Anything we process on the basis of consent, which in practice means linking your Discord account, needs the permission of a parent or guardian if you are under 16.
Our servers are hosted in Germany. Traffic between them is encrypted, and access to player data is restricted to staff who need it. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.
We may update this policy as our services change. The date at the top always reflects the latest version, and significant changes will be announced in our Discord.
For anything on this page, including data requests, email [email protected] or open a ticket in our Discord server. See also our Terms of Service. If you are unhappy with our response, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.