Privacy Policy

Welcome to VexSMP. We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.

This policy applies to the VexSMP website located at vexsmp.space (the "Website"), the VexSMP Minecraft game server (the "Server"), and any services or features offered through either (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services immediately.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this document. For significant changes, we will make a visible announcement in our Discord server. Your continued use of the Services after any changes constitutes your acceptance of the revised policy.

VexSMP is a community-operated Minecraft survival multiplayer server. For the purposes of this Privacy Policy, "VexSMP", "we", "us", and "our" refer to the operators and administrators of the VexSMP server and website.

If you have questions about how we handle your data, you can reach us by opening a support ticket in our Discord server at discord.gg/TX2DmtENgy. We aim to respond to all privacy-related enquiries within 14 business days.

We collect information in two ways: information you provide directly to us, and information collected automatically when you use our Services.

Information you provide directly: When you use the Store on our Website, you may voluntarily submit your Minecraft username (Java Edition username) so that we can link a Ko-fi payment to your in-game account and deliver the purchased perk. We do not ask for, and you should not provide, your Minecraft account password, email address, or any payment information directly to us — payments are handled entirely by Ko-fi.

When you join our Discord server, your Discord username, user ID, and any messages you post in our channels are accessible to our moderation team. We use this information solely for community moderation and support purposes.

Information collected automatically: Our web server logs may capture your IP address, the date and time of your request, the URL you visited, the HTTP status code returned, the referring URL, and your browser's user-agent string. These logs are used exclusively for diagnosing technical issues, detecting abuse, and maintaining the security of the Website.

When you connect to the Minecraft server, our game server software records your Minecraft username, UUID (a unique identifier tied to your Mojang/Microsoft account), IP address, connection timestamps, and in-game activity such as chat messages and commands. This data is stored in our server databases and used for gameplay management, moderation, and debugging.

We do not use third-party analytics tools (such as Google Analytics) on our Website. We do not place advertising cookies or cross-site tracking identifiers on your device.

We use the information we collect only for the purposes described in this policy. Specifically:

Minecraft usernames submitted on the Store page are used to match incoming Ko-fi payment notifications to the correct player account and to instruct our in-game plugin to grant the appropriate perk. Once delivery is confirmed, submitted usernames are no longer actively used, though they may be retained in our database for the period described in the Data Retention section below.

Server logs (IP addresses, connection records, chat logs) are used to enforce our server rules, investigate reports of rule-breaking, ban players who violate our rules, and maintain the integrity of the game environment. Chat logs and command logs may be reviewed by staff during a moderation investigation.

Web server access logs are used to identify and block malicious traffic, diagnose errors, and ensure the Website remains accessible and secure.

Discord messages and activity are used by our moderation team to enforce our community rules, handle support requests, and communicate with the community.

We do not use your personal data for marketing or promotional communications unless you have explicitly opted in to such communications. We will never sell, rent, or trade your personal data to any third party for commercial purposes.

Where applicable under data protection law (including the UK GDPR and EU GDPR), we rely on the following legal bases to process your personal data:

Contractual necessity: Processing your Minecraft username to fulfil your Store purchase is necessary to perform the agreement between you and VexSMP.

Legitimate interests: We process server logs, IP addresses, and in-game activity data on the basis of our legitimate interests in securing our Services, preventing abuse and cheating, enforcing our community rules, and resolving disputes. We have balanced these interests against your privacy rights and concluded that this processing is proportionate and necessary.

Consent: Where we ask for your consent before processing your data in a specific way, you may withdraw that consent at any time by contacting us.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you may have additional rights as described below.

We use strictly necessary cookies and browser local storage only. These are small pieces of data stored on your device that are essential for the Website to function correctly.

Store session: When you link your Minecraft username on the Store page, we store that username in your browser's local storage so it persists across page reloads and browser sessions on the same device. This data is stored locally on your device only and is not transmitted to our servers except when you initiate a purchase.

We do not use analytics cookies, advertising cookies, or any form of cross-site tracking. We do not integrate Facebook Pixel, Google Analytics, or any similar third-party tracking service.

You can clear all cookies and local storage at any time through your browser settings. Doing so will remove any stored Minecraft username from the Store page.

We use a small number of third-party services to operate the VexSMP Services. Each operates under its own privacy policy, which we encourage you to review.

Ko-fi (ko-fi.com): Ko-fi is our payment processor and storefront. When you click a purchase button on our Store page, you are directed to Ko-fi's platform. Ko-fi processes your payment and notifies us via a secure webhook when a successful payment is made. We receive from Ko-fi only: your Ko-fi email address (used to match the payment to a pending username), the payment amount, and the product identifier. We do not receive your card number, billing address, or any other payment details. Ko-fi's Privacy Policy is available at ko-fi.com/privacy.

Discord (discord.com): Our community server is hosted on Discord's platform. Joining our Discord is entirely optional and not required to play on VexSMP. Discord's Privacy Policy is available at discord.com/privacy.

Hosting provider: Our web server and Minecraft server are hosted on a virtual private server. Our hosting provider may process connection metadata (IP addresses, bandwidth usage) as part of providing infrastructure services. They are bound by contractual obligations not to use this data for any other purpose.

We do not share your personal data with any other third parties except as required by law or as described in this policy.

We do not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial or marketing purposes under any circumstances.

We may disclose your information in the following limited circumstances:

Legal requirements: We may disclose your data if required to do so by law, court order, or in response to a valid request by a government authority. We will endeavour to notify you before disclosing your data unless we are legally prohibited from doing so.

Protection of rights: We may disclose information where we reasonably believe disclosure is necessary to protect the rights, property, or safety of VexSMP, our players, or the public — for example, to report a credible threat to an appropriate authority.

Moderation enforcement: Minecraft UUIDs and usernames of banned players may be shared with operators of other community servers in the context of cross-server ban lists or anti-cheat networks, solely for the purpose of community safety.

Staff: Our volunteer staff team (moderators and administrators) have access to player data as needed to perform their moderation duties. Staff are required to treat all player data confidentially and are prohibited from sharing it outside the team.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Pending purchase records (Minecraft username + Ko-fi email pairs): Retained for up to 30 days after submission. If a matching payment is not received within 30 days, the record is automatically deleted.

In-game player data (UUID, username, connection history, ban records): Retained indefinitely for the purpose of maintaining game integrity, ban enforcement, and historical records of moderation actions. Players who are permanently banned will have their ban record retained to prevent circumvention.

In-game chat and command logs: Retained for a rolling period of 90 days. After 90 days, logs are automatically purged except where they have been flagged as part of an open moderation investigation, in which case they are retained until the investigation is closed.

Web server access logs: Retained for a rolling period of 90 days.

Discord messages: Discord retains message data according to their own policies. Our staff may retain copies of messages (for example, in a moderation log channel) for as long as necessary to manage ongoing matters.

If you request deletion of your data, we will fulfil the request within 30 days except where we are required to retain the data by law or legitimate moderation interests (for example, ban records).

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

Our servers are protected by firewall rules that restrict access to authorised personnel and services only. Database credentials and API keys are stored as environment variables and are not committed to public source code repositories.

Access to player data is restricted to staff members who need it to perform their duties. Staff accounts with administrative access are protected by strong passwords.

Our website and store use HTTPS (TLS encryption) for all connections, so data transmitted between your browser and our server is encrypted in transit.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use a unique, strong password for your Minecraft account and to enable multi-factor authentication on your Microsoft account.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users as soon as reasonably practicable.

Depending on your jurisdiction, you may have the following rights in relation to your personal data. To exercise any of these rights, please open a ticket in our Discord server.

Right to access: You may request a copy of the personal data we hold about you.

Right to rectification: If any data we hold about you is inaccurate or incomplete, you may ask us to correct it.

Right to erasure ('right to be forgotten'): You may ask us to delete your personal data. We will fulfil such requests except where we have a legitimate legal or moderation basis to retain the data (for example, ban records).

Right to restriction: You may ask us to restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is resolved.

Right to data portability: You may request a copy of data you provided to us in a structured, machine-readable format.

Right to object: You may object to processing based on our legitimate interests. We will stop processing unless we have compelling legitimate grounds that override your interests.

Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to lodge a complaint: If you are in the EEA or UK and believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority (for example, the ICO in the UK).

We will respond to all valid requests within 30 days. We may need to verify your identity before processing a request.

Our Services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you are under 13, please do not submit any personal information to us.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately via Discord and we will take steps to delete that information.

Players aged 13 to 17 should have a parent or guardian review this Privacy Policy.

VexSMP's server infrastructure is located in the European Union. If you are accessing our Services from outside the EU, your data may be transferred to and processed in the EU.

Where we transfer data to third-party services located outside the EU or UK (for example, Discord, which operates servers worldwide), we rely on appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please open a support ticket in our Discord server (discord.gg/TX2DmtENgy). We will do our best to address your enquiry promptly.

This Privacy Policy was last updated on 27 July 2026.