Privacy policy
In short: this website uses no tracking, no adverts and no analytics tools. Your browser doesn't load anything from third-party servers. Data is only processed as far as it's needed to run the site and the contact form.
Draft: The details in [square brackets] still need filling in. This text describes the site as it's deployed (own server on Fly.io, contact form to Discord). If you add other data sources or services in js/main.js, you'll need to update this text. This isn't legal advice: if in doubt, have it checked.
Controller
[First and last name]
[Street and house number]
[Postcode and town]
Email: [email address]
Hosting and server
The website is hosted by Fly.io, Inc. (USA) on a server in Frankfurt am Main. Whenever you open a page, some data is inevitably processed for technical reasons: your IP address, the date and time, the address requested and details about your browser and device. This is needed to deliver the site and protect it from abuse (Art. 6(1)(f) GDPR).
The website itself doesn't keep access logs. Fly.io may process technical logs to operate and secure its infrastructure. Find out more: Fly.io privacy policy.
Domain and DNS
The domain mxmc.win is registered with Cloudflare, Inc. (USA). Cloudflare also answers the DNS queries. The connection between your browser and the website doesn't go through Cloudflare. Find out more: Cloudflare privacy policy.
Live status, skins and Discord counter
For the server status, the Minecraft heads and the Discord counter, our own server queries the services mcsrvstat.us, mc-heads.net and Discord and caches the responses briefly (status and Discord for about a minute, heads and skins for a few hours). Your browser only ever talks to mxmc.win. Your IP address isn't passed on to these services.
Only information that the Minecraft server and the Discord server make public anyway is shown: player names, online status, player counts, visible voice channels and whether someone is playing Minecraft.
Contact form
When you use the contact form, we process your name, your email address, the subject, the language of the page and your message in order to answer your enquiry (Art. 6(1)(b) GDPR, otherwise (f)).
Your message is sent via a webhook to a private channel on our Discord server (Discord Inc., USA) and kept there until your enquiry has been dealt with. The website itself doesn't store it. Find out more: Discord privacy policy.
To protect against abuse, your IP address is counted in memory for at most one hour so that nobody can send more than five messages per hour. It isn't stored permanently. A field invisible to humans keeps automated spam bots out.
Transfers to the USA
Fly.io, Cloudflare and Discord are based in the USA. [Please check on dataprivacyframework.gov whether all three take part in the EU-U.S. Data Privacy Framework.] For certified companies, an adequacy decision by the European Commission applies (Art. 45 GDPR).
Cookies and browser storage
There's no cookie banner because this website only stores what you set yourself. That's allowed without consent because it's strictly necessary for the feature you've asked for (Section 25(2) no. 2 of the German TDDDG). There are no tracking or advertising cookies.
mxmc_langRemembers the language you picked in the language menu so the homepage opens in that language next time. Only set once you choose a language.
mxmc-designLight or dark, once you switch the theme.
mxmc-fortschritteWhich advancements (little achievements like “Copied the server IP”) you've already earned on this site. Just for fun, only in your browser.
mxmc-spielerYour Minecraft name and up to 20 friends, if you enter them on the homepage – so the player list can highlight you and your friends. Never sent to the server.
mxmc-zuletzt-onlineWhen your browser last saw the server online, so the page can tell you how long ago that was when it's “Offline”.
mxmc-sprachhinweisRemembers that you've dismissed the notice about another language.
mxmc-kuerzelWhether you turned on the letter shortcuts (C, D, T) in the “Keyboard shortcuts” dialog.
Entries in local storage stay in your browser and are never sent to the server. You can delete them in your browser settings; advancements and the saved name can also be cleared right on the homepage.
Links to other platforms
The site links to Discord, Twitch, TikTok, Instagram and YouTube. No content from these services is embedded. Their terms only apply once you click a link.
When you join the Minecraft server, its host processes technical data such as your IP address and your player name. That isn't part of this website. [Optional: name the Minecraft server's host.]
Retention period
Data is deleted as soon as it's no longer needed for its purpose and no statutory retention obligations stand in the way.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to [email address].
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: [name of the authority, e.g. Bavarian State Office for Data Protection Supervision, www.lda.bayern.de].
No automated decision-making
There's no automated decision-making and no profiling.