We respect your privacy. This page explains what data we collect, why, and what you can do about it.
Quick summary
- We collect your Minecraft username, optional email, and gameplay data so the server can run.
- We use Google Analytics to understand how the website is used (you can opt out via the cookie banner).
- We do not sell your data to anyone, ever.
- You can request a copy of your data, or have it deleted, by emailing [email protected].
If you want the full details, keep reading.
Who we are
Astroworld is a Minecraft server and community. The website astroworldmc.com is partly operated by Stetrin B.V., a company registered in the Netherlands.
For all privacy questions: [email protected]
What we collect
When you play on the server
- Your Minecraft username and UUID
- IP address (for security and fraud prevention)
- Gameplay data: claims, economy balances, playtime, vote counts
- Chat messages (kept for moderation purposes)
When you visit the website
- Pages you visit (via Google Analytics, only if you accept analytics cookies)
- Browser type and approximate location (country level)
- Time of visit
When you sign up for the newsletter
- Your email address
- Subscription preferences
When you join the beta launch list
- Your email address
- The signup source, such as homepage, store, or vote
- Hashed IP address and hashed browser user agent for abuse prevention
We store hashes for beta signup IP and browser data, not the raw values. The beta launch list is used only for the launch announcement email unless you separately subscribe to other updates.
When you submit a support report
- Your username
- Your message
- IP address (used to prevent spam, deleted after 30 days)
- Optional: email if you want a reply
When you link Discord
- Your Discord user ID and username
- The fact that this Discord account is linked to your Minecraft account
When you make a purchase (when /store is live)
- Order details
- Payment processor handles the actual payment data (we never see your full card number)
- Billing email and country (required for VAT)
Why we collect it
Per GDPR Article 6, we have a legal basis for each kind of data:
- Contract: When you join the server, you accept our Terms. Most gameplay data is needed to run the server you signed up for.
- Legitimate interest: IP logging for security, ban evasion prevention, fraud detection.
- Consent: Newsletter signup, marketing analytics. You can withdraw at any time.
- Legal obligation: Tax records for purchases (kept 7 years per Dutch law).
How long we keep it
| Data | Retention |
|---|---|
| Account data | Until you delete your account, plus 30 days |
| Chat logs | 90 days |
| IP addresses | 30 days |
| Support reports | 1 year, then anonymized |
| Purchase records | 7 years (Dutch tax law) |
| Analytics data | 14 months |
| Newsletter subscriptions | Until you unsubscribe |
| Beta launch list | Until the launch announcement is sent or you request deletion |
Who we share it with
We share data only with services we need to run Astroworld:
- Mojang/Microsoft: required for Minecraft authentication
- Discord: only if you link your account
- Google Analytics: only if you accept analytics cookies
- Tebex/Stripe (when /store is live): for processing payments
- Cloudflare: for DDoS protection (some data passes through their servers)
- Our hosting provider: server infrastructure
We never sell your data to advertisers or data brokers.
Your rights
Under GDPR, you have the right to:
- Access: request a copy of all data we have on you
- Correct: fix anything that's wrong
- Delete: have your data erased ("right to be forgotten")
- Export: get your data in a machine-readable format
- Object: tell us to stop processing your data
- Withdraw consent: for anything based on consent (newsletter, analytics)
- Complain: file a complaint with the Dutch Autoriteit Persoonsgegevens
To use any of these rights, email [email protected] with your Minecraft username. We respond as soon as we can.
Children
If you are under 16, you need a parent or guardian's permission to play on Astroworld and use this website. If you are a parent and want to remove a child's data, email us.
International data transfers
Some of our service providers (like Cloudflare) operate servers outside the EU. When this happens, the transfer is protected under standard contractual clauses or adequacy decisions, as required by GDPR Article 46.
Changes to this policy
If we update this policy, we will post the new version here and announce it on /news. Continued use of the website means you accept the updated policy.