Privacy policy

Who is responsible

The controller of your personal data is Adam Jurica, who runs the STYGION project from the Czech Republic. Processing follows the General Data Protection Regulation and Czech data protection law.

Address

Honkova 273, 500 02 Hradec Králové

For anything about privacy, write to support@stygion.eu.

We have not appointed a data protection officer; our processing is not of a kind that requires one.

What we collect

If you are only reading

Your browser keeps at most four cookies from us, all of them there only to run the site: your language, the look you picked (light or dark), your sign-in, and where to come back to after signing in. The cookies page lists them. The server keeps an ordinary access log: the time, the address requested, the browser, and the IP address it came from.

Visits

We count visits and what people do on the site with our own copy of Umami at stats.stygion.eu, on our own machine. It uses no cookies and no browser storage and does not keep your IP address: from it and the browser type it only works out an anonymous fingerprint that changes every day, so it cannot recognise you tomorrow or on another site. It records the page (without the part after the question mark, except the campaign tags utm_… if the link carries them), where you came from, the kind of device, browser, system, language and country. On top of that we count a few events, only what kind they are: pressing Play, starting a payment (which rank), downloading the launcher (for which system), copying a Play button's code and sending feedback. They never carry a name, an e-mail, an account, a nickname or anything you type. Nobody else gets any of it. If your browser sends "Do Not Track", you are not counted at all.

If you write to us

A message sent from the feedback button carries what you typed and the details listed in the preview before you send: product, page, version, system, browser and language. An image or a capture of your screen goes only if you attach it yourself. The same goes for tickets on Discord.

If you make an account

A STYGION ID is created through somebody else: Discord, Microsoft, GitHub or Google. We take your identifier there and the name you give yourself there. We do not store the email the provider sends us; only Stripe has your email, if you pay us. We store no passwords at all, so there is nothing here to steal. For each sign-in we keep the device: what it is, when it was last seen, and whether it is still signed in. We also keep your notification settings, the language of your account, and the notifications we sent you, including which ones you have read.

If you buy something

For VIP on STYGION MC and the STYGION Panel licence we keep your customer number at Stripe, the subscription (what, for how long, its state and until when) and the invoices. We never see your card number; it stays with Stripe. The rules of buying are in the terms of sale.

If you play on STYGION MC

Your Minecraft name and UUID, the link to Discord and to your STYGION ID. Your rank (which, from when, until when, bought or gifted), time played and the season's counters, quest progress, team, crate keys and what came out of crates, punishments and their reasons. The server knows your IP address only while you are connected; what it stores is a keyed fingerprint that cannot be turned back into the address, so it can tell you are connecting from where you did last time, and attempts to join under your name. A server password, if you set one, is kept only as a hash. Game chat is relayed to a channel on our Discord. Publicly (site, map, Discord) people can see your name, skin, time played, quest progress, team and what you built; write to us to hide your profile.

Badges

Badges are counted from what we already know about you: game statistics from STYGION MC (the numbers on Minecraft's Statistics screen, such as diamonds mined or distance travelled), time on our servers, friends, tickets and votes. We store which badge you earned and when, and what you chose in the badge settings. The public leaderboard (on stygion.eu/badges, in the launcher and on a player's STYGION MC page) by default shows everybody with at least one badge and a public collection: your STYGION ID name, your Minecraft name and the badges you earned, with dates, points and rank. The numbers behind them are seen by nobody but you. Rare badges we give by hand carry a piece number ("#1 of 3"); the reason is seen only by you and our team. We announce a grant on Discord only when you are on the public leaderboard. How to hide: on the site under Your account → Badges (untick "Show me on the public board"), or in STYGION Launcher (Settings → Badges), where you can also show your collection to friends only or to nobody, hide single badges, or switch counting off altogether. You are off the board within seconds. Doing so is also your objection to the publication; you can write to support@stygion.eu as well.

Friends and chat

Who your friends are, friend requests, what you are playing right now (only your friends see it), and the messages you and your friends send each other.

STYGION Panel

The state of your licence and the panels linked to your account: each panel's name, its address, its version and when it last checked in with us.

Play links

The Play buttons you make for your website (server, pack and label) and how many times each one was opened. Only the number is counted, not who opened it.

Apps and performance runs

STYGION Launcher and Keystone send us a short note about themselves: which app, its version, its channel, the system, and a random installation number. No account and nothing else. The load tests you send us carry the set of mods, the game version and a description of the machine (processor, memory), but no account and no address.

Error reports from the launcher (from version 0.9.1) are sent only if you turn them on in the launcher; they are off by default. A report carries the error, the place in the code, the version and the system, with no name, accounts, file paths or IP address. Our GlitchTip stores the sender's address with its last number cut off and deletes the report after 60 days.

This site reports errors in two ways. Errors of our own server (a page that could not be built) we send to GlitchTip ourselves. Errors in your browser are sent only when they come from our own code, and not from machines that send Do Not Track or Global Privacy Control; we do not report browser extensions, robots or other people's scripts. A report carries the error, the place in the code, the version of the site and the pattern of the page (say /worlds/mc), with no address that has a query, no cookies, no account and no IP address beyond the shortened one described above. Nothing is stored in your browser.

Benchmark in the launcher

"Measure on my PC" measures frames per second and loading on your computer and shows the result straight away, with no network. It is sent only with your consent, which you give for a particular result. What we send: the pack and its version, the game and loader version, the processor and graphics card model, the driver version, memory, the system, the window resolution, the graphics and Java settings, and the measured values (frames, memory, loading times). We do not send your name, IP address, serial numbers or anything from your worlds. You can send it under your STYGION ID or anonymously; with an account the run is tied to the account because of the limits, and it is never shown publicly whose it is. You can take back the runs you sent and unlink them from your account at any time (then they are not counted or shown anywhere), and withdraw consent, in the launcher under Settings → Benchmark; processing before that is not affected. Measuring that would run by itself during ordinary play would need a separate consent, and without it nothing runs.

Why we are allowed to

• Performing a contract: the account and signing in, devices, purchases and delivering them (the rank on the server, the Panel licence), the link to Minecraft, friends and chat, notifications, Play links, and answering what you asked us.
• A legal obligation: invoices and payment records, which accounting and tax law require us to keep.
• Legitimate interest: server logs (security, tracing an outage or an attack), the apps' version notes (so we know which versions still need support), the season counters on the server, and anonymous performance runs.
• Legitimate interest also covers: counting visits with Umami (no cookies, no personal data, so we know which pages people read), the public player profile and leaderboard on STYGION MC (so players can see who they play with; you can object and we hide your profile), the public badge leaderboard (you take yourself off it in your account on the site or in the launcher, see Badges above) and protecting your name on the server (a keyed fingerprint of where you connect from, sign-in attempts).
• Consent (Art. 6(1)(a) GDPR): sending a benchmark result from the launcher and any passive performance measuring. You give it yourself and can withdraw it as easily as you gave it.

Apart from the benchmark, none of it rests on consent, because none of it is tracking across sites or advertising. Turn on Do Not Track in your browser and we do not count you.

How long we keep it

Cookies

Language a year, sign-in 90 days, the return address 10 minutes.

Server logs

Thirty days at most, then deleted.

The apps' version notes

Ninety days, then deleted.

Chat with friends

The last 50 messages of each conversation; older ones delete themselves.

Tickets and feedback

While the thing is open and while we need them, two years at most; we are adding deletion.

Invoices and payment records

As long as accounting and tax law requires, also after the account is deleted.

The account and everything else

As long as you have the account. Deleting it removes what belongs to it, with two exceptions: what you wrote to us (tickets and feedback) stays and stops carrying your name, and invoices are kept as the line above says.

Who else sees it

We do not sell personal data and we do not hand it to anybody for marketing. Besides the people on the team who need it for the work, it is seen by:

• Stripe (Ireland, parent in the US): payments, subscriptions, invoices.
• Cloudflare (US): stands in front of the site and receives email sent to @stygion.eu addresses.
• Google (US): the mailbox Cloudflare delivers our email to; signing in with Google.
• Discord (US): signing in, tickets, our bot's messages, linking a player to Discord, and the game chat the server relays to a channel on our Discord.
• Microsoft and Mojang (US, Sweden): signing in with Microsoft; the launcher signs you into the game with that account; the server asks Mojang about names and skins.
• GitHub (US): signing in with GitHub, downloading updates.
• MineSkin: signs a skin you set in game from your own picture.
• CurseForge (Overwolf) and Modrinth: the launcher downloads mods and packs from them, so they see your IP address.

The site, the database, the visit counter, error reports (GlitchTip) and the game servers run on a machine we operate ourselves. Where a recipient is outside the European Economic Area, the transfer relies on the European Commission's adequacy decision (EU–US Data Privacy Framework) for companies certified under it, and otherwise on standard contractual clauses.

What you can ask for

You can find out what we hold, get a readable copy of it, have it corrected, restricted or deleted, and object to anything we do on legitimate interest. Most of that you can do yourself in your account without writing to anyone: under Your data you can download everything and delete the account.

If something looks wrong, tell us first; we will fix it faster than anybody else can. You can also complain to the supervisory authority, which is the Czech Office for Personal Data Protection.

Children

Anyone allowed to have a Discord account can use STYGION ID and play on STYGION MC. We process children's data for the same reasons and to the same extent as adults' (contract, legitimate interest); none of it rests on consent, so the age of 15 for a child's own consent (Art. 8 GDPR, Czech Act No. 110/2019) does not come into it. We send children nothing for marketing and do not profile them. Anyone under 18 needs a legal guardian's consent to pay; a guardian can write to us at any time and we will sort it out, including a refund for a purchase that did not suit the child's age.

Changes

When the processing changes, this text changes with it and the date at the top moves. We announce anything substantial before it takes effect, here and on Discord.

The rules for using the services are in the terms of use.