ElyMCThis page explains in plain words what data the ElyMC website collects, why we do it, and what you can ask us. We do not sell your data and we do not use advertising cookies.
Who is responsible for your data
The site and the server are run by ElyMC. There is no contact email: if you have any request about your data, open a ticket on our Discord (discord.gg/elymc) and staff will answer you there.
What data we collect
Discord login
When you log in with Discord we use the identify and guilds.join scopes. We store:
- your Discord ID;
- your username and display name;
- your avatar hash (not the image itself, only the reference to the one you have on Discord).
With the guilds.join scope the site may add you to the ElyMC Discord server. We do not read your messages, your emails or your friends list.
Staff accounts
Staff members can also log in with a login and password. The password is never stored in plain text: we only keep a hash made with scrypt.
Minecraft nickname
You can enter your Minecraft nickname if you want. We use it to link your profile to your game account and for the store.
Applications
If you apply for staff or media we store the role you chose, your answers, the status of the application, the staff decision and an internal note. You get a private Discord message with the outcome. After a rejection there is a 14 day cooldown before you can apply again. Applications are kept until staff deletes them.
Staff action log
Actions that staff take in the admin panel are logged (audit log) together with the staff account that did them. This helps us see who changed what and prevent abuse.
Cookies
We only use two cookies, and both are needed for the site to work:
elymc_session: keeps you logged in. It lasts 30 days and is httpOnly, so scripts on the page cannot read it.elymc_lang: remembers the language you picked. It lasts 1 year.
We do not use advertising cookies or third-party tracking cookies.
Visit statistics
We measure visits without cookies. For each visit we record the page path, where you came from (the referrer source), the device type and a visitor code. The code is a hash computed from a secret salt, your IP, your user agent and the day, and it changes every day. The raw IP address is not stored. That is why we cannot follow you from one day to the next.
Third-party services
The site relies on a few outside services, each with its own privacy policy:
- Discord: for login and notifications (for example the outcome of an application).
- mc-heads.net: provides player skins. The images go through our site, so your browser does not contact that service directly.
- api.mcsrvstat.us: tells us whether the server is online and how many players are on.
- Tebex or MineStore (the store provider): handles payments under its own privacy policy. The site only sends them your Minecraft username and what is in your cart. We never see or store your card details.
- Google Fonts and unpkg: your browser contacts them directly to load fonts and icons, so they can see your IP address.
Why we use your data
We use it to log you in, manage your profile, review applications, show the server status, run the store, protect the site from abuse and see which pages are useful. For login and applications the basis is the service you ask for. For statistics and security it is our legitimate interest in running the site well.
Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you (access);
- correct it (rectification);
- delete it (erasure);
- object to a certain use of your data;
- give it to you in a readable format (portability).
To use these rights, open a ticket on Discord. If you think we handled your data badly you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Minimum age
Discord requires you to be at least 13. In Italy you can give digital consent on your own from age 14: if you are under 14, you need a parent or guardian to allow us to use your data.
How long we keep data
We keep data while your profile exists or while it is needed for the reason we collected it. Applications stay until staff deletes them. If you ask for your data to be erased, staff removes it from the site, except what we must keep for security or legal reasons.
Changes to this page
We may update this policy when the site changes. The version published here is always the current one.