autumn

Who is responsible, and how to reach us

The data controller is the PvPBay team, which runs the network and this website. For anything about your data, write to [email protected]. You do not need a Minecraft account or a website account to use that address.

You can also open a ticket on this site. We answer within one month. To make sure we only hand data to its owner, we may ask you to prove the account is yours, usually with a single-use code given to you in game.

[email protected]

What we never collect

• Nothing from your computer. We do not read your system clock, your hardware, your installed mods or any file on your machine. Every timestamp we record is taken by our own servers when your packets arrive, never by your computer.
• No real-world identity. No name, no age, no postal address, no phone number. You are a Minecraft account here and nothing else.
• No email address of yours. There is no field for one anywhere. Registration and password recovery are single-use codes handed to you in game. If you write to us by email, we use your message only to answer it.
• No payment details. Payment happens on Tebex's checkout, under Tebex's privacy policy. We never see a card.
• No trackers. No third-party scripts, no pixels, no advertising identifiers, no browser fingerprinting and nothing that recognises you from one visit to the next. The site's content security policy allows images and connections from this origin alone, so a tracker could not load here even if one were added by mistake. What the site does count is in Visit totals, below.

What the game servers record

• Your connection. Your Minecraft UUID and name, the IP address you connect from, and when you join and leave. These are written to the server log files, which are deleted after 90 days. Our monitoring separately records your name against the server you are on while you are connected, without your IP address, and keeps it 2 years.
• Your address history. Up to 40 IP addresses per account, each with when it was first and last used, how often, and the country and network provider it belongs to. It is how ban evasion and shared accounts are detected. Each address is removed 5 years after it was last used. The country and provider are removed after one year.
• VPN and bot checks. When you connect, your IP address is checked against public lists of VPN and hosting ranges and sent to proxycheck.io and ip-api.com, which say whether it is a VPN or a datacenter and which country it is in. The answer is cached for one day (seven days if flagged), and the log of checks is kept 90 days. Our anti-bot filter keeps addresses that passed its check for 5 days.
• Anti-cheat. To detect cheating, our servers analyse what your game sends while you play, such as your movements, actions and clicks and when they reach our servers, along with the client name and version your game announces. When a check is failed, its details are kept, which can include a chat message or command if that is what it examined. Play sessions are kept 2 years, failed checks and statistics up to 5 years, recordings of play 30 days, or 5 years when kept as evidence for a flag or a sanction.
• Connection quality. To diagnose lag, your ping and the quality of the network path to your connection's entry point are recorded against your name. These measurements are kept 2 years, and the daily files 30 days. They never contain your IP address.
• Chat moderation. Messages caught by the chat filter are kept with your IP address for 180 days. Reports made by or about you are kept 90 days.
• Your game record. Matches, statistics, elo, playtime, friends, ranks, cosmetics and settings. They are deleted 5 years after your last connection to the network.
• Punishments. Bans, mutes and warnings, with their reason, who issued them, and a banned address where there is one. A punishment is kept for as long as it is in force, and for 5 years after it ends.
• Your Discord link. If you link a Discord account on this site, we receive its id and username from Discord, add you to our Discord server and then revoke the access Discord gave us. The link is kept while it exists. A record of an unlink is kept for 5 years.

What this website stores

• Your website account. Your Minecraft UUID, your current name, when you first and last logged in, and a hash of your password. The password itself is never stored and cannot be recovered from the hash.
• Your sessions. One record per device you log in from: when it started, when it was last used, the IP address it came from and the browser it reported. That record is what your device list shows and what "log out everywhere" revokes.
• Your profile. What you chose to put on it: the social handles you added, whether your combat record or your country is hidden, and a per-day count of how many times it was viewed. The counts are totals and never a list of who looked. To count each visitor once per day, a short hash of the visitor's IP address and browser is held for one day.
• Your tickets. Reports, appeals, bug reports and support requests, with the messages on them.
• Resource packs you convert. The pack you upload is converted and deleted. A record of the conversion job, with no account attached, is kept 30 days.
• Staff actions. Every privileged action taken through the staff panel is written to an audit log with the address it came from. It exists to hold staff to account.
• Your country. Your profile shows the country of your connection as a flag. Only the country reaches this site: never the address, and never your provider. No flag is shown when the address was a VPN, when the country is not known, or when you hid it.
• Visit totals. Which pages are opened, which page led to which, and two kinds of click: copying the server address, and following a link to another site, counted by destination (Discord, YouTube and the like). Each only adds one to a total for that page. There is no identifier, no address and no cookie, and nothing is kept in your browser, so no total can be traced back to anybody. Cloudflare's statistics of the traffic it delivers (pages, countries, referring sites, browser and system families) are kept the same way, as totals.

Cookies and what the browser keeps

• One cookie. pvpbay_session, set when you log in and deleted when you log out. It is strictly necessary: it is the thing that says you are you, and there is no version of a logged-in site without it. We set no other cookie of any kind.
• Your theme. Light or dark is remembered in your browser's own storage. It never reaches us.
• A cache of what you have already seen. The site keeps recently loaded pages in your browser so that going back is instant. It is discarded when the site is deployed, and clearing your browser data clears it.

Why we process it

• To provide the service you asked for. Your account, your game record, matches, ranks, your website account and sessions, your tickets, your Discord link and the packs you convert. Without them there is no network to play on (GDPR article 6(1)(b), performance of a contract).
• To keep the network secure and the games fair. Connection logs, address history, VPN and bot checks, anti-cheat, chat moderation, punishments, connection quality and the staff audit log. This is our legitimate interest, and that of every other player, in a network free of cheating, bots, ban evasion and abuse (GDPR article 6(1)(f)). You can object to it, see below.

Automatic sanctions

The anti-cheat can kick or temporarily ban an account on their own when a check is failed clearly enough. Every sanction can be appealed through a ticket, and an appeal is always reviewed by a member of staff, who can lift it.

Appeal through a ticket

How long it is kept

Nothing is kept forever. The periods for game server data are listed with each item above. For this website:

• Sessions. A session lasts a year of use for a player, and seven days for anybody holding a staff permission. Logging out ends it immediately. The record of an expired or revoked session is deleted 30 days later.
• Profile view counts. The daily counts are deleted after 90 days.
• Visit totals. Kept 2 years. They contain nothing about any one visitor.
• Audit log. The address is erased after 90 days. What remains is a salted hash, which lets two entries be recognised as the same origin without the address being readable again. Entries are deleted after 5 years.
• Accounts and tickets. A website account is deleted 5 years after it was last used. A ticket is deleted 5 years after its last activity. It can outlive the account that opened it, because it is the record of a decision that may need to be re-read.
• Backups. Encrypted backups of the servers and databases are kept for up to 13 months, then deleted. Data deleted from the live system disappears from the backups as they age out.

Who else handles it

We do not sell, rent or share your data. These providers handle it only to provide their service to us:

• OVHcloud. Hosts the dedicated server that runs the game servers, the databases and this website, in Canada.
• NeoProtect. Protects the game servers against attacks. Your connection to play.pvpbay.com goes through it, so it handles your IP address.
• Cloudflare. Delivers this website and handles your IP address to do so.
• proxycheck.io and ip-api.com. Receive your IP address to tell us whether it is a VPN and which country it is in.
• Tebex. When you press Buy: the Minecraft name the purchase is for, that player's id on the network, and the IP address your request came from, which Tebex uses for sales tax and fraud checks. Tebex is the seller and acts under its own privacy policy.
• Discord. Receives what is needed to link your account and add you to our server, and the anti-cheat alerts posted in our private staff channels, which name the player and the check.
• Google Drive and Backblaze. Store our backups, encrypted on our server before they leave it. Neither can read them.
• Mojang. Your skin and cape are fetched from Mojang by name or UUID to draw your profile.

Transfers outside the European Union

Our server is in Canada, which the European Commission recognises as providing adequate protection. Some providers above, such as Cloudflare and Discord, are based in the United States. Transfers to them rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses, as those providers offer them.

Your rights

• See it, and take it with you. Ask for a copy of everything we hold about you (articles 15 and 20).
• Correct it. Ask us to fix anything that is wrong (article 16).
• Delete it. Ask us to delete your data (article 17). We delete your website account, your profile extras, your sessions and your game record. We keep, for the periods above, what we need to keep the network fair and to defend a decision: punishments that are in force, anti-cheat records, the audit log, and the address history tied to a sanction.
• Limit or object to it. Ask us to restrict processing (article 18), or object to processing based on our legitimate interest (article 21). We will stop unless the reason to continue, such as keeping a cheater off the network, outweighs yours.
• Act on your own. Hide your combat record or your country flag and remove your social links from your profile settings, and log out everywhere from your account page.
• Complain. You can complain to the data protection authority of the country where you live. In France this is the CNIL.

Complain to the CNIL

Changes, and asking

The date at the top of this page is the date of the current wording. If something here is unclear, or you think something on the network does not match what this page says, write to [email protected] or open a ticket: the second kind of message is the more valuable of the two.

Ask through a ticket