Privacy Policy: Stronghold MC
Last updated: 18/10/2026
This policy explains what personal data we collect when you play on the Stronghold MC Minecraft server (join.stronghold-mc.com, the "Server"), use our Discord, or buy from our store (store.stronghold-mc.com, the "Store"), why we collect it, and your rights.
1. Who we are
The data controller is Stronghold-MC, contact business.stronghold-mc.com ("we", "us"). See the Legal Notice. We are a small community server, not a company with a data protection officer: write to the email above with any privacy question.
2. What we collect, and why
When you play
| Data | Why | Legal basis (UK GDPR / EU GDPR) |
|---|---|---|
| Minecraft username and UUID | Your account on the Server: progress, ranks, claims, homes, inventories | Contract (running the game you joined) |
| IP address | Security: stopping attacks, enforcing bans, limiting alternate accounts | Legitimate interests (keeping the Server safe and fair) |
| Chat messages and commands you use | Moderation and investigating reports | Legitimate interests |
| Gameplay logs: blocks placed and broken, containers opened, deaths, kills | Investigating griefing and theft, restoring damage | Legitimate interests |
| Anti-cheat data: movement and combat checks | Detecting cheating | Legitimate interests |
| Playtime, votes, statistics, battle pass progress, purchases made in game | Rewards, milestones, leaderboards | Contract |
| Moderation history: warnings, mutes, bans, with reasons | Enforcing the rules, appeals | Legitimate interests |
When you link Discord
If you use /link, we store your Discord user ID alongside your Minecraft UUID, so your Discord roles match your ranks. Basis: your consent; you can unlink at any time.
When you buy from the Store
The Store is run by CraftingStore, and payments are processed by its payment providers (such as PayPal). They collect your payment details, name, email and billing address under their own privacy policies; we never see your card or bank details. We receive the Minecraft username you entered, the package, the price, the date and a transaction ID, and we keep these to deliver purchases, handle refunds and chargebacks, and keep accounting records. Basis: contract, and legal obligation (tax and accounting).
Purchase announcements: when someone buys a supporter rank, their Minecraft username and the rank are posted in our public Discord store channel. If you'd rather not be announced, tell us before you buy.
3. Who we share it with
We don't sell personal data. We share it only with:
- Our hosting provider ([HOSTING PROVIDER]), which runs the servers and stores the data in Helsinki, Finland (EU).
- CraftingStore and its payment providers, for purchases (see above).
- Discord, for account linking and our Discord announcements (Discord's own privacy policy applies).
- Mojang/Microsoft, which authenticates your account when you join (their policy applies).
- Vote sites: when you vote, the site you vote on sends us your username; their own policies apply.
- Authorities, where the law requires it.
Some plugins send anonymous usage statistics about the Server software (for example bStats); these contain no player data.
4. International transfers
We are based in England and the Server's data is stored in Finland, in the EU; the UK recognises the EU as giving adequate protection, so no extra safeguards are needed for that. Some providers (such as Discord, PayPal and Mojang/Microsoft) also process data elsewhere, including the US, under the safeguards the law requires (adequacy decisions such as the UK-US data bridge, or standard contractual clauses).
5. How long we keep it
| Data | Kept for |
|---|---|
| Account and gameplay data | While you play, and up to [24 months] after your last login, then deleted or anonymised |
| IP addresses and connection logs | [12 months] |
| Chat, command and block logs | [12 months] |
| Ban records for serious or permanent bans | As long as the ban stands, to enforce it |
| Purchase records | [6 years], for tax and accounting |
| Discord link | Until you unlink, or your account is deleted |
6. Your rights
Under UK and EU data protection law you can ask us to:
- access the personal data we hold about you,
- correct it if it is wrong,
- delete it, where we no longer need it (we may keep what we must for bans, fraud prevention or accounting),
- restrict or object to how we use it (including where we rely on legitimate interests),
- move it to another service (data portability),
- withdraw consent where we rely on it (for example, unlink Discord).
Email business.stronghold-mc.com from an address we can link to you, or message staff on Discord, and tell us your Minecraft username. We will reply within one month. We may ask you to prove the account is yours.
If you're unhappy with how we handled your data, you can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or your local data protection authority in the EU. We would appreciate the chance to sort it out with you first.
7. Children
Many of our players are young. You can play without giving us anything more than Minecraft and your connection already provide. If you are under 13 (or the age of digital consent where you live), please ask a parent or guardian before linking Discord or buying anything; parents can contact us at business.stronghold-mc.com about their child's data.
8. Security
Our servers sit behind a firewall, administrative access is limited to a small number of staff with individual accounts, and databases are not reachable from the internet. No system is perfectly secure; if a breach affects your data, we will tell you and the regulator where the law requires.
9. Cookies
The Server and Discord set no cookies of ours. The Store website, run by CraftingStore, uses cookies to run the basket and checkout; see CraftingStore's cookie notice on the Store.
10. Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced on Discord.