Privacy Policy
Last updated: February 26, 2026
SlimeChunk ("we", "us", "our") operates the game server hosting platform at slimechunk.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
1. Information We Collect
1.1 Account Information
When you register, we collect:
- Email address
- Username
- Password (stored securely using one-way hashing)
1.2 Payment Information
When you make a purchase, our payment processor (Stripe) collects payment details. We do not store your full credit card number or payment credentials on our servers. We may store transaction IDs and billing history for accounting purposes.
1.3 Server and Usage Data
We collect data related to your use of our Service, including:
- Server configurations and settings
- Server activity logs (start, stop, crash events)
- Modpack installation history
- Support ticket communications
1.4 Technical Data
We automatically collect:
- IP address
- Browser type and version
- Pages visited and actions taken within the Service
- Date and time of access
- Referring URL
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process payments and manage your subscription
- Send transactional emails (payment confirmations, server alerts, support replies)
- Diagnose technical issues and provide customer support
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and United Kingdom, we process your data under the following legal bases per GDPR Article 6:
- Contract performance: Processing necessary to provide the Service you have subscribed to (account management, server provisioning, billing).
- Legitimate interests: Security monitoring, fraud prevention, service improvement, and analytics, where these interests are not overridden by your rights.
- Legal obligation: Where we are required to process data to comply with applicable law (e.g., tax records, law enforcement requests).
- Consent: Where applicable, for optional communications or non-essential cookies. You may withdraw consent at any time.
4. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
5. Third-Party Service Providers
We share personal information with the following categories of third-party processors, solely for the purposes of operating the Service:
We do not sell your personal information to any third party.
6. Data Retention
- Account data: Retained for the lifetime of your account plus 30 days after deletion.
- Server data: Retained while your server is active. After server termination, data is deleted within 14 days.
- Payment records: Retained for up to 7 years as required by tax and accounting laws.
- Server logs: Retained for up to 90 days for debugging and abuse prevention.
- Support tickets: Retained for the lifetime of your account.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Request restriction of processing in certain circumstances.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
GDPR (EEA/UK): You have all rights listed above and may lodge a complaint with your local data protection authority.
CCPA (California): You have the right to know what data we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
PIPEDA (Canada): You have the right to access, correct, and challenge compliance with your data handling.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or sooner if required by applicable law).
8. International Data Transfers
Your data may be processed in countries outside your country of residence, including within the European Union (Hetzner infrastructure). Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS/HTTPS)
- Secure password hashing
- Access controls and authentication for administrative functions
- Regular security updates and monitoring
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top indicates when the latest revision was made.
12. Contact Us
For privacy-related inquiries, data subject access requests, or complaints:
- Email: [email protected]
- Support: Through the Support section of your account dashboard
