LEGAL
PRIVACY POLICY.
Draft: this page describes the data the website actually processes. The operator's legal identity marked [TO BE COMPLETED] will be added before launch.
Who is responsible
The controller of your personal data is the operator of INEX [TO BE COMPLETED: operator legal identity]. Contact: inex-sector@tuta.io.
What data we process
We only process the data needed to run your account, link it to Minecraft and handle supporter purchases:
- Account: e-mail address, creation and update times. There is no password; you sign in with a one-time link sent to your e-mail.
- Minecraft link: your Minecraft UUID and username, the time of linking, and single-use in-game link codes that expire.
- Sign-in sessions: a session token, your IP address and browser user agent, and the session expiry. One-time sign-in link tokens are stored only as hashes and expire after 15 minutes.
- Abuse protection: rate-limit counters keyed by IP address or account, used to block brute-force and spam.
- Purchases: Tebex notifies us of transaction references, purchased packages, amount, currency, status and the Minecraft UUID/username. Card and payment details are handled by Tebex and never reach us.
- Error logs: technical server logs with personal data redacted.
- Hall of Fame (optional): only if you opt in on your account page, your Minecraft username and supporter-since month are shown publicly while you have an active SPONSOR subscription. This is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Purposes and legal basis
Providing your account, the Minecraft link and purchased supporter benefits is necessary to perform our contract with you (Art. 6(1)(b) GDPR). Session and abuse-protection data are processed on the basis of our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR). Purchase and subscription metadata received from Tebex is processed to show your supporter status and purchase history (Art. 6(1)(b) GDPR).
Recipients
Purchases are processed by Tebex, which acts as the reseller and merchant of record under its own privacy policy. The website and its database are hosted by Cloudflare. Sign-in e-mails are delivered through Resend, our e-mail delivery provider. We do not sell your data or share it for advertising.
How long we keep data
We keep data only as long as needed. Account and Minecraft link data are kept while your account exists. An account nobody signs in to within 24 hours of registration (e-mail never confirmed) is deleted together with its Minecraft link. Expired sessions, link codes and sign-in link tokens are deleted about one day after they expire. Purchase and subscription metadata received from Tebex is deleted about 90 days after your subscription ends (90 days without any new purchase activity). Tebex keeps its own records as merchant of record under its privacy policy.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. Contact us at inex-sector@tuta.io. You can also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, www.uoou.cz).