Privacy Policy

Responsible for data processing is:

Keller Online Services
Kevin Keller
Gutschstrasse 5
6313 Menzingen
Switzerland
Swiss Business Identification Number: CHE-169.066.280
Email: info@luckysmp.net

EU Representative (GDPR Art. 27): As we regularly process personal data of individuals in the European Economic Area, we are in the process of designating an EU representative pursuant to Art. 27 GDPR. Until such designation is complete, EU data subjects may direct inquiries to info@luckysmp.net. We will respond to all data subject requests within 30 days.

For all questions regarding data protection, requests for information, correction, deletion, restriction or objection, please contact us at the email address above.

We process the following categories of personal data in the course of operating our Minecraft network, Discord community and shop:

• Server connection data: IP address, Minecraft username and UUID, client version, connection timestamps, ping and session duration. IP addresses are personal data under GDPR and nDSG and are processed on the basis of our legitimate interest in network security, DDoS mitigation, ban enforcement and fraud prevention (GDPR Art. 6(1)(f)). Connection IP logs are retained for up to 30 days; ban-related IP records are retained for the duration of the ban plus a reasonable appeal period.
• Gameplay data: in-game actions, chat messages, commands, economy transactions, statistics, punishment history (mutes, kicks, bans), and anti-cheat signals (movement patterns, click timing, packet data) processed for the purpose of fair play enforcement
• Website data: IP address, browser user agent, referrer, pages visited, timestamps; transmitted automatically by your browser
• Discord data: Discord user ID, username, roles and guild membership if you join our Discord server; public widget data shown on our website
• Purchase data: items purchased, amounts paid, order ID, Minecraft username used for delivery; full billing data is processed by PayNow.gg and not stored on our side
• Support communications: messages and tickets you send us via Discord or email, plus metadata required to respond

We process the data listed above for the following purposes:

• Providing the service (game servers, Discord, shop). Legal basis: Art. 31 para. 2 lit. a FADP (performance of a contract); for EEA customers Art. 6(1)(b) GDPR.
• Security, anti-cheat and fraud prevention, including connection logs and punishment history. Legal basis: Art. 31 para. 2 lit. b FADP (overriding legitimate interest); for EEA customers Art. 6(1)(f) GDPR.
• Fulfilling legal obligations such as tax retention (10 years under Swiss law) and law-enforcement requests. Legal basis: Art. 31 para. 1 FADP; for EEA customers Art. 6(1)(c) GDPR.
• Optional features (for example embedded third- party widgets). Legal basis: your consent, Art. 6(1)(a) GDPR, revocable at any time.

All purchases in our shop are processed by PayNow.gg (PayNow LLC), which acts as merchant of record. When you place an order, PayNow collects the following data directly from you:

• Name, email address, billing address and phone number
• Payment data (card number, bank account or alternative payment method)
• Transaction data (items, amounts, dates) and device data (IP address, browser, fraud-prevention signals)
• Where required by law: government-issued identification data (for fraud prevention and sanction screening)

PayNow shares the following data with us to fulfil the order: your name, email address, billing details, the in-game identifier you entered at checkout, and transaction details. Card numbers or bank details are never transmitted to us.

PayNow stores data in the United States and other jurisdictions where its service providers are located and relies on Standard Contractual Clauses for cross-border transfers. Full information is available in PayNow's Privacy Policy.

We rely on the following categories of processors to operate our services. Data is only shared with them to the extent necessary for the stated purpose and subject to data-processing agreements:

• Infrastructure and hosting:
  • IP-Projects GmbH & Co. KG (Germany) - Server hosting
• Payment processing: PayNow.gg (PayNow LLC)
• Discord community: Discord Inc. (data subject to Discord's privacy policy)
• Server status monitoring: Better Stack Inc. (Betterstack Uptime) - our public status page at status.luckysmp.net is hosted by Betterstack. Their probes connect to our servers to check availability; no visitor personal data is transmitted to Betterstack.
• Server status (player count): mcsrvstat.us (returns only aggregate public server information; no personal data about website visitors is sent)

Most of our infrastructure is located within the European Economic Area. We rely on the following safeguards for each processor:

• Germany (IP-Projects): located within the EEA, no additional transfer mechanism required.
• United States (PayNow): transfers are covered by Standard Contractual Clauses and, where the recipient is certified, additionally by the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework.

We retain personal data only as long as necessary:

• Server and website logs: up to 30 days for security and abuse-prevention purposes
• Gameplay data and chat logs: up to 90 days for moderation review; aggregated statistics longer
• Punishment records (bans, mutes): for the duration of the punishment plus a reasonable period for appeal history
• Order and billing records: 10 years, as required by the Swiss Code of Obligations (Art. 958f) and Swiss tax law
• Support communications: up to 2 years after the ticket is closed

Under Swiss law (FADP) you have the right to:

• request information about the personal data we process about you (Art. 25 FADP)
• request correction of inaccurate data (Art. 32 FADP)
• request deletion or restriction of processing where no legal obligation to retain exists
• object to specific processing based on legitimate interests
• receive a copy of your data in a common electronic format (data portability, Art. 28 FADP)
• file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch

If you reside in the European Economic Area, the equivalent rights under Art. 15 to 22 GDPR apply in addition, including the right to lodge a complaint with your local supervisory authority.

To exercise any right, contact us at info@luckysmp.net. We will respond within 30 days.

Our website uses only technically necessary local storage to remember your preferences (for example the last copied server IP and your consent choice). We do not use advertising cookies or cross-site analytics at this time.

Two optional features trigger requests to third parties and only run after you click Accept on the consent banner:

• Discord member count: a request to discord.com which receives your IP address and user-agent. Governed by Discord's privacy policy.
• Live server status: a request to api.mcsrvstat.us which receives your IP address and user-agent. Governed by mcsrvstat's privacy policy.

You may withdraw consent at any time by clearing your browser storage for this site. Withdrawal takes effect immediately on reload and does not affect the lawfulness of processing that took place before.

Our services are directed at a general audience. We do not knowingly collect personal data from children.

• United States (COPPA): the Service is not intended for children under 13 years of age. If we learn that personal data of a child under 13 has been collected without verifiable parental consent, we will delete it without delay.
• European Economic Area (GDPR): users under the age of 16 (or the lower digital-consent age set by their member state, down to 13) require the consent of a parent or legal guardian before providing personal data or making a purchase.
• Switzerland: minors require the consent of a parent or legal guardian for any paid purchase; the exact age of discernment follows the Swiss Civil Code.

If you believe a minor has provided us with personal data without the required consent, please contact us at info@luckysmp.net and we will delete the data without delay.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or manipulation. Our servers and databases are secured with access controls, regular updates, and encrypted data transmission (TLS).

In the event of a personal-data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay and, where required by law, also the Swiss Federal Data Protection and Information Commissioner (FDPIC) within 72 hours under Art. 24 revFADP, or the competent EEA supervisory authority under Art. 33 GDPR. Notice will describe the nature of the breach, the likely consequences and the measures we have taken to address it.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) grants you the following additional rights:

• Right to know which categories of personal information we collect, the sources, the purposes and the categories of third parties we share it with
• Right to access a portable copy of the specific personal information we hold about you
• Right to correct inaccurate personal information
• Right to delete personal information subject to statutory exceptions (for example tax-retention obligations)
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising any of these rights

We do not sell and do not “share” personal information as those terms are defined in the CCPA/CPRA. We do not use or disclose sensitive personal information for any purpose that would require the right to limit.

To exercise any California right, email info@luckysmp.net from the address associated with your account. We verify requests by matching the sender address with account records.

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa and other U.S. states with comprehensive privacy laws have analogous rights (access, correction, deletion, portability, opt-out of targeted advertising and profiling). We do not engage in targeted advertising or sell personal data; requests can be made via the email address above.

Our website links to external Minecraft server listing and voting platforms (for example MinecraftServers.org, Minecraft-MP.com). When you visit those sites or cast a vote, the respective operator collects your IP address and other data according to their own privacy policies. We receive only your Minecraft username from the listing platform to credit the vote reward in-game. We do not receive your IP address or any other personal data from third-party vote sites.

You have the right at any time to request that we confirm whether we process personal data about you, and if so, to receive a copy of that data. You also have the right to request correction, deletion or restriction of processing, and to object to processing based on legitimate interests. These rights may be limited where we are required by law to retain data (for example ban records or tax documentation).

To exercise any right, contact us at info@luckysmp.net with your Minecraft username and the nature of your request. We will respond within 30 days. We may request verification of your identity before processing the request.

EU residents may lodge a complaint with their national data protection authority. Swiss residents may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

We may amend this privacy policy to reflect changes to our service or applicable law. The current version always applies. Material changes will be announced on our Discord.