Privacy Policy
Last updated: March 9, 2026
This Privacy Policy describes how Crowditory LTD ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the PaperChunk platform and website at paperchunk.com (the "Service"). We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
Crowditory LTD
Email: contact@paperchunk.com
2. What Data We Collect
We collect and process the following categories of personal data:
2.1 Account Data
- Name — provided during registration.
- Email address — used for authentication, verification, and communication.
- Account role — whether you are a regular user or administrator.
- Registration date — timestamp of when your account was created.
2.2 Minecraft Profile Data
- Minecraft username — linked to your account for server functionality.
- Minecraft UUID — unique identifier assigned by Mojang to your Minecraft account.
2.3 Payment Data
- Stripe Customer ID — identifier linking your account to Stripe for payment processing.
- Subscription status — active, cancelled, or past due.
- Billing history — dates and amounts of payments made.
We do not store your credit card numbers, bank account details, or other sensitive payment information. All payment processing is handled exclusively by Stripe, which has its own privacy policy.
2.4 Server Data
- Server name and configuration — settings you choose for your Minecraft server.
- Server IP address — assigned to your provisioned virtual server.
- Plugin list — plugins installed on your server.
- Server activity data — player counts, online status, recorded at regular intervals.
2.5 Technical Data
- IP address — collected automatically when you access the Service.
- Browser type and version — for compatibility and security purposes.
- Device information — operating system, screen resolution.
- Session data — authentication tokens stored in cookies.
2.6 Communication Data
- Email correspondence — if you contact us at contact@paperchunk.com, we retain your messages for support purposes.
3. How We Use Your Data
We process your personal data for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and managing your Account and Servers | Performance of contract (Art. 6(1)(b)) |
| Processing payments and subscriptions | Performance of contract (Art. 6(1)(b)) |
| Sending transactional emails (verification, billing, server status) | Performance of contract (Art. 6(1)(b)) |
| Maintaining security and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
| Responding to support requests | Legitimate interest (Art. 6(1)(f)) |
| Improving the Service based on usage patterns | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Data Sharing and Third Parties
We share your personal data with the following categories of third parties, only as necessary to provide the Service:
4.1 Infrastructure Providers
- Hetzner Cloud — hosts the virtual servers for your Minecraft server. Your server IP address and server configuration are processed by Hetzner. See Hetzner's Privacy Policy.
- Cloudflare — provides DNS services for server subdomains. See Cloudflare's Privacy Policy.
4.2 Payment Processor
- Stripe — processes all payments. Your email and payment details are shared with Stripe to facilitate subscription billing. See Stripe's Privacy Policy.
4.3 Email Service
- Resend — sends transactional emails (verification codes, billing notifications). Your email address is shared with Resend for email delivery. See Resend's Privacy Policy.
4.4 Storage
- Hetzner Object Storage — stores uploaded images (server icons, covers). These files may contain metadata from the original images, though we strip EXIF data during processing.
We do not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers or marketing companies.
5. International Data Transfers
Your data is primarily processed and stored within the European Economic Area (EEA) on servers located in Germany (Hetzner Cloud, Falkenstein/Nuremberg/Helsinki datacenters). Some of our third-party service providers (Stripe, Resend) may process data outside the EEA. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Retention
We retain your personal data for the following periods:
- Account data — retained for as long as your account is active. After account deletion, data is removed within 30 days.
- Server data — retained for as long as your subscription is active. After cancellation, server data is retained for up to 14 days before permanent deletion.
- Payment records — retained for up to 7 years to comply with tax and accounting obligations.
- Server activity logs — player count data is retained for 8 days for analytics purposes.
- Support correspondence — retained for up to 2 years after the last interaction.
7. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15) — You can request a copy of all personal data we hold about you.
- Right to Rectification (Art. 16) — You can request correction of inaccurate or incomplete data. You can also update your name and email through the Profile page.
- Right to Erasure (Art. 17) — You can request deletion of your personal data, subject to legal retention obligations.
- Right to Restriction (Art. 18) — You can request that we restrict processing of your data in certain circumstances.
- Right to Data Portability (Art. 20) — You can request your data in a structured, machine-readable format.
- Right to Object (Art. 21) — You can object to processing based on legitimate interest.
- Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at contact@paperchunk.com. We will respond to your request within 30 days.
You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the UK, this is the Information Commissioner's Office (ICO).
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit using TLS/SSL (HTTPS).
- Encryption of sensitive settings (API keys, tokens) at rest in the database.
- Secure password hashing using industry-standard algorithms.
- Access controls and role-based permissions.
- Firewall protection on all provisioned servers (UFW).
- Regular security updates and patching.
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that data promptly. If you believe a child under 16 has provided us with personal data, please contact us at contact@paperchunk.com.
10. Cookies
We use cookies and similar technologies to operate the Service. For detailed information about what cookies we use and how you can manage them, please see our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
12. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Crowditory LTD
Email: contact@paperchunk.com