Privacy Policy
What ZeroPvP stores about you, why it is stored, how long it is kept, and how to have it removed. Written to describe what the server actually does rather than to cover every eventuality.
1Who is responsible
ZeroPvP is run by an individual, not a company:
Mirko Goldschmidt
Langacker 16, 24988 Oeversee, Germany
mirkogoldschmidt@outlook.de
The same details are on the legal notice. Anything in this policy can be asked about at that email address, and it is the same address to use for the requests in section 8.
The game server is hosted in Frankfurt, Germany. Data stays within the EU except where a named third party below is involved.
2Playing on the server
Joining the Minecraft server stores the following against your Minecraft account.
| What | Why |
|---|---|
| Your Minecraft UUID and username | To know whose statistics are whose. The UUID is the identifier; the username is stored so leaderboards and match history can be read by a person. |
| Ranked results: rating, tier, wins, losses, streaks, placement progress, per kit | The ladder. This is the whole point of the server. |
| Match history: who played whom, on what kit, the score, when, and per match statistics such as hits landed and best combo | So results can be reviewed, shown on this website, and refunded if an opponent turns out to have been cheating. |
| Your country, as a two letter code | Shown as a flag beside your name and used for country leaderboards. See the note below on how it is worked out. |
| Settings you choose: kit layouts, cosmetics, name colour, privacy and gameplay preferences, party and friend lists | So the server remembers them between sessions. |
| When you join and leave, and the skin texture you joined with | Reported to this website for the profile page: time played, time of day, and a skin history. The skin is the public texture Mojang serves for your account, not a copy of it. |
| Coins, purchased ranks and cosmetic entitlements | To give you what you have earned or bought. |
| Moderation records: mutes, bans, reports you file or receive, and anti-cheat evidence | To keep the server playable and so that an appeal can be judged on evidence rather than memory. |
| Chat messages | Logged for moderation. Not used for anything else. |
| For bans issued by the anti-cheat or by staff: the IP address the account last connected from | To recognise a banned player coming back on another account. Checked against new logins; staff see an alert, not the address. |
Your IP address and the country flag
Your IP address is necessarily processed to connect you to the server, in the same way it is for any website or game server.
To work out the flag beside your name, your connecting IP is looked up once per session in a copy of a country database kept on the game server itself, so the address is not sent anywhere. Only the country code is kept, and only while the flag is switched on: turn it off in the settings menu in game and the lookup's result is not kept and any stored code is deleted. The IP itself is never written to the player database; the one exception is a ban, see the moderation row above. IP geolocation by DB-IP, licensed under CC BY 4.0.
Automatic anti-cheat bans
The anti-cheat can ban an account on its own when it is certain a cheat was used. Each automatic ban stores the evidence it was based on, and every ban can be appealed in a Discord ticket, where a member of staff, not the anti-cheat, judges the appeal on that evidence.
Screensharing
Staff may ask a player suspected of cheating to share their screen over a voice call. Staff look at the running programs and files the rules list. Staff are not allowed to record the session, and nothing from it is stored except the outcome in the moderation record. The legal basis is the legitimate interest in fair matches (Art. 6(1)(f) GDPR).
Voice chat
If you use the voice chat mod, your voice is relayed live to the other players in your fight. It is not recorded or stored.
The server never asks for your real name, your email address, your age or your location, and there is nowhere to enter any of them. Everything above comes from your Minecraft account or from playing.
Legal basis. Storing your results and settings is necessary to provide the service you asked for by connecting (Art. 6(1)(b) GDPR). Moderation records, chat logs and anti-cheat evidence are kept on the legitimate interest of running a server that is not ruined by cheating and abuse (Art. 6(1)(f) GDPR).
3The Discord
The Discord server is operated on Discord's platform, and Discord's own privacy policy applies to everything you do there. On top of that, the ZeroPvP bot stores:
- Your Discord user ID, and the Minecraft UUID you linked to it if you have used
/sync. - Tickets and staff applications you open, including what you write in them.
- Levelling progress, if levelling is enabled.
- Moderation actions and the logs the server is configured to keep.
Linking your accounts is entirely optional and can be undone. Nothing about the game requires it.
Legal basis. Consent for the link, which you give by running the command and can withdraw (Art. 6(1)(a) GDPR); legitimate interest for moderation and logging (Art. 6(1)(f) GDPR).
4This website
This website sets no cookies unless you sign in, contains no analytics, no advertising and no tracking pixels. Nothing here follows you anywhere.
Fonts, images and scripts are served from this domain rather than from a third party, so opening a page does not hand your IP address to anyone else. The 3D player figures are drawn in your browser by a viewer that is also served from this domain. The outbound requests a page makes are to the ZeroPvP server's own data files, to mc-heads.net for the player heads, the body pictures and the skin files the 3D figures are made from, to textures.minecraft.net (Mojang) for a player's skin and skin history on their profile once the server has recorded it, and to api.mcstatus.io to show whether the server is online and how many players are on. Those services see your IP address when your browser loads from them.
The web server keeps ordinary access logs, including IP addresses, for security and to diagnose faults. They are not linked to your Minecraft account and are not used for anything else.
Website accounts
Creating an account is optional; every page works without one. If you do, the following is stored on the web server: the username you choose, a hash of your password (the password itself is never stored), the email address if you gave one, the date the account was made, and, once you link it in game, the Minecraft account's uuid and name and the date of linking. The email is not verified and nothing is sent to it; it is held for a password reset feature that does not exist yet, and you can leave it empty.
Signing in sets one cookie, zpsess, which is what keeps you signed in. It carries a random session id and nothing else, is only sent over HTTPS, and lasts thirty days or until you sign out. Failed sign-in attempts are counted per IP address for fifteen minutes, and account creations for an hour, so that passwords cannot be guessed by machine; those counts are deleted after a day.
An account can be deleted on request at the address in section 8, and deleting it removes everything above. Unlinking the Minecraft account from the account page removes the link straight away.
5Purchases
Purchases are handled entirely by Tebex, which acts as the merchant of record. Payment details are entered on Tebex's systems and are never seen by, or passed to, ZeroPvP. What comes back to the server is the fact that a given Minecraft username bought a given package, which is what grants it.
Tebex's own privacy policy governs the payment itself, including how long they keep records for tax and accounting purposes.
6What is visible to everybody
A competitive ladder only works in public. The following is visible to anyone, on this website and in game, without an account:
- Your username, skin, tier and ZP on each ladder you are placed on.
- Your position on the leaderboards, including the country board if you have a flag.
- Ranked matches you have played: opponent, kit, score and date.
- Your wins, losses and streaks.
- When you were first and last on the server, how much time you have spent there and at what times of day, and the skins you have joined with. The profile page shows these; they are recorded from the moment the server first sees you.
- Anything you chose to put on your profile: a tagline, a favourite kit, a colour, a stance and a pinned badge.
Placement matches are the exception and are never published. Your hidden rating is never published either.
7How long it is kept
- Ranked records and match history are kept for as long as the server runs, because a ladder with a hole in it is not a ladder. A season reset clears ratings and match history for everybody at once.
- Settings, kits and cosmetics are kept until you change them or ask for your data to be deleted.
- Moderation records are kept while they are still relevant to a ban or appeal, and are reviewed when an appeal is resolved.
- Country codes are overwritten on each join and hold only the most recent value.
- Web server access logs are kept for a short period for security purposes and then rotated away.
8Your rights
Under the GDPR you may ask for a copy of what is stored about you, ask for it to be corrected, ask for it to be deleted, object to processing based on legitimate interest, and ask for it in a portable form. Email mirkogoldschmidt@outlook.de from an address you can be reached at, and say which Minecraft username the request is about.
Two honest limits on deletion:
- A match has two players in it. Deleting your side of a result would rewrite somebody else's record, so match history is anonymised rather than removed: your username is replaced and the result stands.
- A ban record can be kept after a deletion request where it is needed to keep a banned player off the server. That is the legitimate interest in section 2, and you can contest it.
If you think a request has been handled badly you can complain to a supervisory authority. For this controller that is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein.
9Changes
If this policy changes, the date at the top of the page changes with it. Changes that affect what is collected or why will be announced in the Discord rather than only being quietly published here.