Legal

Privacy Policy

Last updated: 14/10/2026

1. Who is responsible for your data

This website is run by Luca Pompa, Città, Italia, the data controller under the GDPR. Contact: [email protected]

2. Which data we process

• Discord account: when you sign in we receive your Discord user ID, display name and avatar. We do not ask Discord for your e-mail address and we never see your Discord password.
• Licenses: the keys linked to your account, their plan, status and expiry, and the Minecraft servers that use them (server ID, plugin version, last check-in).
• Payments: when you pay with PayPal we receive the PayPal order or subscription ID, the amount, the status and the dates. Your card or bank details are handled only by PayPal and never reach us.
• Technical data: your IP address and browser details are processed by our server and by Cloudflare to deliver the site and protect it from attacks.
• Administrators only: two-factor authentication data (an encrypted secret and hashed recovery codes) and a log of failed login attempts.

3. Why we process it

• To create your account and manage your licenses: necessary to provide the service you asked for (art. 6(1)(b) GDPR).
• To keep the website, the accounts and the license system secure and to prevent abuse: our legitimate interest (art. 6(1)(f) GDPR).

We do not sell your data, we do not use it for advertising and we do not build profiles.

4. Who receives it

• Discord: sign-in and avatar images.
• Cloudflare: network delivery and protection against attacks.
• PayPal (Europe) S.à r.l. et Cie, S.C.A.: payments, as an independent controller under its own privacy statement.
• The provider that hosts our server.

Discord and Cloudflare may process data outside the EU. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

5. How long we keep it

• Account data: until you ask us to delete your account.
• License data: as long as the license exists, and longer only where the law requires it (for example, invoices).
• Payment records: 10 years, as required by Italian tax law.
• Server logs: up to 30 days.

6. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. To do so, contact us using the details above.

You can also lodge a complaint with your data protection authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Cookies

We only use essential cookies. Cookie Policy