Privacy policy
Courtesy translation. The French version is the legally binding one.
This policy explains what personal data SileneMC (the website, the Minecraft server and the Discord server) processes, why, for how long, who can access it and how to exercise your rights. If a point is unclear, write to us.
1. Data controller
The controller is the site's publisher: [TO BE COMPLETED : publisher name], [TO BE COMPLETED : address]. Contact for any question about your data: [TO BE COMPLETED : email address].
2. The processing activities, one by one
We only collect what the service needs. No data is sold and none is used for advertising. The service is not designed to collect sensitive data: do not write any in applications or tickets.
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Browsing the site | IP address, date, page requested, browser (technical logs) | Run and protect the site (security, abuse limits) | Legitimate interest (security) | 12 months at most |
| Site audience measurement | Page views, language, device type, referring domain: daily counters, no cookie or identifier, IP address never kept | Know which pages are useful and how to improve the site | Legitimate interest (strictly limited measurement, exempt from consent under CNIL rules) | 25 months |
| Logging in to the site with Discord | Discord ID (we do not ask for your email or your server list), name and ID of the linked player, session cookie | Recognise you on the site: manage your clan, buy, apply | Performance of the contract (terms of use) | 7-day session; the Discord link is kept until removed |
| Player account and game | Username, player ID, password (hashed, never in clear), premium status, language, client platform and version, connection dates, statistics, level, ranks, friends, clan, preferences | Provide the game and the rankings | Performance of the contract | While the account is active, then 3 years after the last login |
| Security and moderation | Hashed IP address (irreversible fingerprint), reports (with the reported message), sanctions, reasons, history | Enforce the rules, ban cheaters, spot multiple accounts | Legitimate interest | Hashed addresses: 12 months after the last login; reports: 12 months after handling (24 months if never handled); sanctions: 3 years after they end (permanent ban: while it lasts) |
| Game sessions | Connection start and end, platform (Java or Bedrock), client version | Measure network attendance and fix problems | Legitimate interest | 13 months |
| Shop purchases | Player name and ID, transaction ID, amount, currency, date, content bought; proof of your agreement to immediate delivery (date, terms version, IP address fingerprint) | Deliver crystals, handle disputes and chargebacks, prove your agreement | Performance of the contract, legal obligation (accounting) | Transactions: 10 years (accounting); proof of agreement: 5 years, IP fingerprint erased after 13 months |
| Applications (recrute.) | Username, Discord account, age bracket, legal guardian's agreement if a minor, availability, motivation, answers to the position's questions, the team's notes | Choose new members of the volunteer team | Pre-contractual steps taken at your request | Deleted 6 months after the decision, 12 months if unanswered; you can withdraw at any time |
| Discord (community server) | ID, name, roles, edited or deleted messages (staff log), sanctions, tickets and their transcripts, giveaway entries, invitations | Moderate, answer your requests, run giveaways and reward invitations | Legitimate interest, performance of the contract | Logs and transcripts: 12 months; sanctions: 3 years after they end |
| Rankings and public pages | Username, skin head, statistics, level, clan, competitive match results and competitive-mode warnings (without the moderator's name) | Show life on the server and competitive play | Legitimate interest (you can object, see §7) | While the account is active |
| Staff dashboard | Staff members' ID and name, actions taken (audit log), moderation activity | Run the server, oversee staff actions | Legitimate interest | Audit log: 12 months |
| Advanced measurement (optional) | Clicks, scrolling and anonymised recording of browsing (heatmaps, replays) by Microsoft Clarity | Improve pages | Your consent | 13 months at most; only if you accept |
3. Where your data comes from
From you (in-game registration, forms, purchases), from your use of the game and the site, from Discord (your ID, when you log in or link your account) and from Mojang / Microsoft (the skin tied to your username, to show your head on the site).
4. Who receives your data
Data is accessible to the publisher and to the staff members who need it (moderation, recruitment), and to the following providers.
| Recipient | Role | Data | Country and safeguards |
|---|---|---|---|
| OVH SAS | Hosting of the site, the game and the databases | All | [TO BE COMPLETED : data centre country] |
| Cloudflare, Inc. | Protection and delivery of pages | IP address and browser requests | USA: EU–US Data Privacy Framework (the company's certification) and standard contractual clauses |
| Discord Inc. | Discord login, community server, the server's bots | Discord ID, name, messages on the Discord server | USA: EU–US Data Privacy Framework (the company's certification) |
| PayNow Services, Inc. | Seller and payment provider for crystals | Username, player ID, basket; PayNow itself collects your email and payment details | United States: European Commission standard contractual clauses |
| Microsoft / Mojang | Player skins (heads on the site) | Username or player ID | USA: EU–US Data Privacy Framework |
| GeyserMC (public API) | Bedrock player skins | The player's Xbox ID | This API may be hosted outside the European Union |
| mc-heads.net | Player head image in Discord tickets | Username (sent by Discord, not by the site) | Possibly outside the European Union |
We share your data with no other third party, except where legally required (an authority's order).
5. Cookies and audience measurement
The site only uses cookies needed for it to work (login, language, remembering your choices), which need no consent. Basic audience measurement is cookie-free. Any tool that needs your consent only loads after "Accept all". Details, lifetimes and choices: cookie policy.
6. Minors
The Discord server is for people aged 13 or over (Discord's rule). Purchases are for people aged 16 or over (our payment provider's rule). A child under 15 needs parental consent for any optional processing, such as advanced measurement. Applications from minors ask for confirmation of the legal guardian's agreement.
7. Your rights and how to exercise them
You can ask for access to your data, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, as easily as you gave it. You can also set instructions about your data after your death.
- By email: [TO BE COMPLETED : email address]. To prevent anyone impersonating your username we check that you control the account (Discord login linked to the account, or a message sent from that account).
- Hide your public profile: when logged in, from the My data page, you remove your name from rankings, clan pages and match recaps.
- Withdraw an application: from "My applications" on recrute., which erases your answers.
- Audience measurement and cookies: from the cookie policy.
We reply within one month (two months at most for a complex request, with an explanation). Exercising your rights is free. Erasing an account deletes your statistics, profile and Discord link; we keep what the law requires (transactions for accounting) and sanctions still in force.
8. Automated decisions
The Discord server's automoderation may warn a member automatically (forbidden language). No decision with legal effect is taken solely by automated means: a staff member reviews on request, by ticket.
9. Security
Encrypted connection (HTTPS); game passwords hashed with PBKDF2-SHA512, never stored in clear; IP addresses kept only as an irreversible fingerprint; session cookies not readable by page scripts; data access limited to the team members who need it; dashboard actions logged. In case of a data breach likely to harm you, we notify you and the CNIL within 72 hours.
10. Complaints
If, despite our efforts, you believe your rights are not respected, you can complain to the CNIL, the French data protection authority: cnil.fr/fr/plaintes (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
11. Changes
This policy may change. The version date is at the bottom of the page; for an important change we announce it on Discord.
Version of October 1, 2026.