Ashfall

01Who is responsible

Ashfall, run from the Netherlands, is responsible for the personal data described here. For anything about your data, including the requests in the section on your rights, write to support@playashfall.com.

02What the website collects

When you sign in with Discord

We ask Discord only for the basic profile it calls identify: your Discord user ID, username, display name and avatar. We do not get your email address, your servers or your messages.

When you link Minecraft

The Minecraft username and account ID (UUID) you link, and the one-time code used to link it.

When you buy something

The items, prices, any discount code, the Minecraft account the order goes to, your Discord ID, whether it was a gift, and whether it was delivered. Payment itself happens at Tebex, so we never see card numbers, bank details or your billing address.

Visitor statistics

We use Vercel Web Analytics and Speed Insights to count page views and measure how fast pages load. They set no cookies and do not identify you. What we see is totals: which pages were visited, which site you came from, your country, and your device and browser type.

When you email us

Your email address and whatever you write, so we can answer.

03What the game server collects

Your Minecraft username and UUID.
Your IP address when you connect, used to stop cheating, ban evasion and attacks on the server.
Chat messages and commands, kept in server logs for moderation.
Gameplay data: rank, prestige, balances, blocks mined, playtime, votes, items and purchases.
Moderation records, such as warnings, bans and notes staff make about reports.

When you vote for Ashfall on a server listing site, that site sends us your username so we can give you the reward. The listing site has its own privacy policy.

04What is public

Leaderboards and player pages on this website show Minecraft usernames with rank, prestige and gameplay statistics, for everyone who has played on the server. Your Discord account is never shown publicly. If you do not want to appear on the leaderboards, email us and we will look at hiding your profile.

05Why we use it

To provide what you asked for: signing you in, linking your account, running your progress on the server, and delivering what you buy. This is necessary for our agreement with you.
To keep the server fair and safe: anti-cheat, moderation, stopping ban evasion and abuse, and protecting the website from attacks. This is our legitimate interest in running a working server.
For leaderboards and profiles, which are part of the game. Also a legitimate interest.
To improve the website, using the anonymous visitor statistics. Also a legitimate interest.
To keep order records for support, payment disputes and accounting, which the law requires.

We do not sell your data, and we do not use it for advertising.

06Cookies

The website uses two cookies, both needed for signing in, and nothing else:

ashfall_session keeps you signed in for up to 7 days.
A short-lived cookie that protects the Discord sign in from being tampered with.

There are no advertising or tracking cookies, which is why the site has no cookie banner.

07Who else handles it

We use these services to run Ashfall. Each only gets what it needs for its part:

Vercel hosts the website and provides the visitor statistics.
Neon hosts the website database, in the EU (Frankfurt).
Hetzner hosts the game server.
Cloudflare runs our domain, the connection between the website and the game server, stores news images, and forwards support email.
Google (Gmail) holds the support inbox.
Discord handles signing in.
Tebex takes payments as the reseller of store items, under its own privacy policy.

Some of these companies are based in the United States. Where data leaves the EU, it is covered by the safeguards the GDPR requires, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

08How long we keep it

Sign in sessions: 7 days. Unused link codes expire within minutes.
Your linked account and gameplay data: for as long as you play, or until you ask us to delete it.
Server logs with IP addresses, chat and commands: up to 90 days, unless they are part of a ban or report that is still relevant.
Order records: up to 7 years, which is how long Dutch law requires financial records to be kept.
Support emails: up to 2 years after the conversation ends.

09Your rights

Under the GDPR you can ask us to:

show you the data we hold about you, and give you a copy
correct data that is wrong
delete your data
stop or limit using your data, or object to how we use it

Email support@playashfall.com from an address we can reply to, and tell us your Minecraft username and Discord username so we can find your data. We will answer within a month. Some data we may have to keep even after a deletion request, such as order records the law requires or records of a ban.

If you are unhappy with how we handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own EU country.

10Children

You need to be at least 13 to sign in on the website. If you are a parent and think your child under 13 has signed in, email us and we will remove their data.

11Changes

When this policy changes, the date at the top changes with it, and bigger changes are announced in the news. The terms and refund policy are separate pages.

Privacy Policy