Privacy policy

This page describes what data the PVPFACTION website processes, why, for how long, and how you can access or erase it.

Controller

The controller is the sole proprietor (French entrepreneur individuel, EI) who operates PVPFACTION: identity and address in the legal notice. For any question about your personal data: contact@pvpfaction.net.

Data we process

Website account

Email address, password (stored hashed with argon2, never in clear text), display name, chosen language, chat and direct-message preferences and, where applicable, a two-factor secret. Sessions are stored as a hashed token, with the connecting IP address and the last-activity date.

Minecraft account

The unique identifier (UUID) issued by Mojang, the current username and previous ones. The UUID is what identifies a player: it does not change when someone renames.

Game activity

Combat statistics, playtime, faction membership and past memberships, votes, achievements, bounties, event participation. This data is sent by the game server.

For the administration's attendance statistics, each play session (Minecraft identifier, server, connection and disconnection times) is kept for 90 days; after that only anonymous daily totals remain (active players, new players, playtime, players online), kept for 25 months. The number of players online, recorded every 5 minutes, identifies no one.

Communications

Direct messages and faction channels: their content is encrypted at rest (AES-256-GCM); it is only in clear text for the time it takes to deliver it.

Server chat: this chat is public in game. Its messages are kept for 30 days, in clear text, so that the moderation team can find a message (by text, player, channel or period) when a behaviour is reported to it. Only staff members allowed to moderate can access it.

News

Reactions to articles: they are linked to your account, and others only see how many there are. You can remove them at any time; they are deleted with your account.

Reads: the site counts how many times each article is read without cookies or trackers. To count a single read per visitor and per day, it computes a fingerprint from the fingerprint of your IP address, your browser and the date. That fingerprint is kept for 24 hours, in memory, and is never written to the database: only the total number of reads is.

Site audience measurement

To know which pages are useful, where visitors come from and which links are broken, the site measures its own traffic, without cookies, identifiers or third-party tools. On each page, your browser only sends the page template (for example "a player's page", never the username or the exact address), the language, the domain of the site you came from (on the first page) and any campaign parameters of a link. The device type (mobile, tablet, computer) is inferred from your browser when counting, and not kept.

To estimate the number of visitors of the day, the server computes a fingerprint from the fingerprint of your IP address, your browser and the date. It changes every day, so no visitor is followed from one day to the next, and it is never stored: only a statistical summary from which it cannot be recovered is kept for three days, then only anonymous daily totals, for 25 months.

You can refuse this measurement from this page or from the information banner: your browser remembers your choice and then sends nothing. Your browser's "Do Not Track" and "Global Privacy Control" settings are honoured automatically. Being strictly limited to the site's statistics and never cross-referenced, this measurement does not require your prior consent (French data protection authority CNIL guidelines on audience measurement).

Idea box

The ideas and comments you post are public, with your username. Your supports are linked to your account, but others only see how many there are. When your account is deleted, your ideas and comments remain visible without your name (they are part of a public discussion); your supports are deleted.

Moderation

Sanctions, reports and their attachments, appeals, staff notes, security alerts, connection log. IP addresses are never kept in clear text for these purposes: they are reduced to a cryptographic fingerprint (HMAC) that allows two connections to be matched without ever revealing the address. The only exception is the address attached to an account session.

Support tickets

The requests you send to the team (questions, disputes, follow-up of a report or an appeal, complaint about a staff member) and their replies, with the attachments you add. Messages are encrypted at rest and only read by the team members in charge of the relevant category; a complaint about a staff member is never visible to the person concerned. The team may add internal notes, which are not shown to you.

Payment and invoicing

No banking data passes through the website or is stored on it: payments are handled by Stripe, which receives card details directly along with the billing details you enter there (name, email address, country or address when asked). These details appear on your invoices, issued by Stripe on behalf of the seller.

The site keeps a payment register: for each purchase and each subscription instalment, the description, amount, date, status (paid, refunded, disputed…), invoice number and links to the invoice and receipt, refunds and their reason, and the Stripe references of the customer, payment and invoice. It is used to deliver what was bought, to show your history in Account settings › Billing, to handle refunds and disputes, and to keep the accounts.

Before each payment, the site records proof of your consent: date, version of the terms of sale accepted, boxes ticked (acceptance of the terms of sale, request for immediate performance and waiver of the right of withdrawal), language, browser used and a cryptographic fingerprint (HMAC) of your IP address, never the address itself. It allows a complaint or a chargeback to be answered.

This processing is based on the performance of the sales contract, on the legal obligation to keep accounting records and on the seller's legitimate interest in being able to prove the order.

Proximity voice

Audio is carried by LiveKit. No in-game coordinates are sent to the client: the server computes a gain and a pan, and sends only those two values. Positions are not retained.

Retention

Recipients

Data is neither sold nor shared. The following act as technical processors:

• Hetzner Online GmbH (Germany): hosting of the website, its database and the voice server;
• Minestrator: hosting of the Minecraft game server;
• OVH SAS (France): email delivery;
• Stripe: payment and invoices;
• Discord: OAuth sign-in, if you use it;
• a third-party Minecraft avatar service, which only ever receives a public UUID;
• where applicable, a file storage service (report attachments, images published on the site).

Stripe also processes some data on its own behalf (fraud prevention, regulatory obligations of payment providers), as described in its privacy policy. Data may then be transferred outside the European Union, with the safeguards provided for by the GDPR (standard contractual clauses).

Cookies and local storage

The site uses no advertising trackers and no third-party analytics tools: its audience measurement (see "Site audience measurement") and the news read counter run on the server, without cookies or identifiers. The only cookies it sets are necessary for it to work:

• pvpf_session: your sign-in session. Without it you cannot stay signed in.
• A temporary state cookie during a Discord sign-in, for the duration of the exchange.
• A language cookie, which remembers the display language you chose.

Your browser also keeps a few display preferences (kill feed on or off, banners already dismissed) and, if you expressed it, your refusal of audience measurement. They stay on your device and are never transmitted.

No consent is therefore requested: these are either strictly necessary, or a preference you set yourself.

Minors

The site and the server are open to players of all ages. Under 15, creating an account and the processing of data that follows require the consent of a holder of parental authority (article 45 of the French Data Protection Act). A parent may request access to their child's data, its rectification or the deletion of the account at the contact address above.

Your rights

From Account settings › My data you can:

• Export your data: an archive is prepared, then announced to you by email.
• Delete your account: deletion works by anonymisation. Your personal data is erased and your Minecraft account is unlinked; what belongs to moderation (sanctions issued, reports handled) and to accounting (payment register, invoices, proofs of consent, kept for ten years as the law requires) remains, without identifying you any more.

You also have the right to rectification and to object, and the right to lodge a complaint with your supervisory authority — in France, the CNIL (www.cnil.fr), or the authority of your country of residence.

To exercise these rights: contact@pvpfaction.net. You will receive an answer within one month.