Privacy Policy
Privacy
Privacy Policy
Information pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)
1. Controller
Sandra Glassl
Doktorberg 22, House 4
2391 Kaltenleutgeben, Austria
Support: https://discord.pluginsmc.com
No data protection officer has been appointed because the requirements of Article 37 GDPR are not met.
2. Principles of data processing
We process personal data only to the extent necessary to provide a functional website, process purchases, and comply with legal obligations. Processing for other purposes takes place only with your express consent.
3. Hosting and technical operation
This website is operated on our own infrastructure in Austria. When the website is accessed, technical access data (server log files) is collected automatically, including the IP address, date and time of access, page accessed, browser type, and operating system.
Processing is based on our legitimate interest in providing the website securely and efficiently (Article 6(1)(f) GDPR).
Server log files are deleted after no more than 45 days unless continued retention is required for evidentiary purposes.
4. Webshop and contract processing
When you purchase Minecraft plugins, we process the data you provide (such as email address, username, and payment information) to perform the contract, provide the digital content, and provide support where applicable (Article 6(1)(b) GDPR).
Where we are legally obliged to retain data (for example, tax-law retention periods of seven years under the Austrian Federal Fiscal Code (BAO)), continued storage is based on compliance with a legal obligation (Article 6(1)(c) GDPR).
Payment service provider (PayPal)
For payment processing, we use PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. If you choose to pay via PayPal, the data required to process the payment (including name, email address, invoice amount, order and transaction data, and your IP address) is transmitted to PayPal. Processing is carried out for performance of the contract pursuant to Article 6(1)(b) GDPR and on the basis of the legitimate interest in fraud-resistant payment processing pursuant to Article 6(1)(f) GDPR.
PayPal is an independent controller for the payment data it processes. PayPal's privacy policy is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
4a. Licence management and plugin activation
Our plugins are licence-bound. When a purchased plugin is started on a Minecraft server, it contacts our licence server (plugins-verify.pluginsmc.com) to verify the licence. In doing so, the server's IP address, a technical server identifier, and the licence key are transmitted to and stored by us.
This processing serves to bind the licence to the authorised server or servers, enforce the permitted number of servers, and prevent misuse and unauthorised distribution (piracy). Processing is carried out for performance of the contract (Article 6(1)(b) GDPR) and on the basis of our legitimate interest in protecting our digital products (Article 6(1)(f) GDPR).
The server IP addresses stored for a licence can be viewed by the respective customer in their dashboard and by us as operator in the administration area. They are stored for as long as the licence is active and are removed after the licence expires or is deactivated in accordance with our retention and deletion routines.
5. Contacting us
If you contact us by email, we process the data you provide in order to handle your enquiry (Article 6(1)(b) or (f) GDPR).
6. Cookies and tracking
This website uses only technically necessary cookies required to operate the website and shop (for example session cookies, shopping cart, and language preference) (Article 6(1)(f) GDPR).
During payment via PayPal, PayPal may set its own cookies for fraud prevention. Details are provided in our Cookie Policy and PayPal's privacy notice.
7. Disclosure to third parties
Personal data is disclosed to third parties only where this is necessary to perform the contract (in particular to the payment service provider PayPal), where a legal obligation exists, or where you have expressly consented.
Data is transferred to third countries (outside the EEA) only where appropriate safeguards within the meaning of Article 46 GDPR are in place (for example EU Standard Contractual Clauses).
8. Your rights
Under the GDPR, you have the following rights: access to your stored data (Article 15), rectification of inaccurate data (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and objection to processing (Article 21).
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
9. Data security
This website uses SSL or TLS encryption for secure data transmission. You can identify an encrypted connection by the padlock symbol in the browser bar.
10. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy as necessary to reflect changes in the law or changes to our data processing. The current version on this page applies.
Last updated: 3 June 2026
Version v3 · 2026-06-03