Privacy contact:[email protected]
Who operates this service
Pretty Technologies Ltd., a federally incorporated Canadian corporation, operates this website and the associated Minecraft community. It handles personal information in accordance with applicable Canadian privacy legislation, including Alberta’s Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable.
Information we collect
The information collected depends on what you do and which form you use. It may include a name or chosen display name; email address, optional phone number, or other contact information; Minecraft username or UUID; a voluntarily supplied Discord username or other community identifier; date of birth and timezone where a form requests them; the contents of inquiries, reports, applications, appeals, or bug reports; attachments you intentionally submit; IP address or an irreversible keyed representation of it; timestamps; basic request, browser, and network metadata; and security or anti-abuse signals. Not every form asks for every item. Please do not submit sensitive personal information that is not reasonably necessary for your request.
Minecraft server information
Normal use of the Minecraft server may create records such as Minecraft usernames and UUIDs, connection times, chat and commands, gameplay and moderation events, claim or economy activity, and technical connection information such as IP addresses. These records support gameplay, moderation, service reliability, troubleshooting, security, and abuse prevention.
Why information is used
Information is collected, used, and disclosed only for reasonable purposes connected with operating the website and Minecraft community. These include responding to inquiries and support requests; investigating player or moderation reports; reviewing moderator applications and appeals; resolving rule or enforcement disputes; diagnosing technical problems; protecting users, services, and Pretty Technologies Ltd. infrastructure from fraud, abuse, attacks, or other malicious activity; maintaining necessary security, moderation, administrative, and audit records; meeting legal obligations; and other purposes explained when information is collected. Pretty Technologies Ltd. does not sell personal information or use submissions for unrelated advertising, data-broker activity, or unrelated profiling.
Who can access submissions
Access is restricted by role and need to know to authorized Pretty Technologies Ltd. personnel and, when necessary for the purpose of a submission, specifically authorized Minecraft server moderators or administrators. A moderator receives only the information reasonably needed for the relevant moderation or community-management task. Permission to review a report, appeal, or similar record does not provide general access to backend systems, databases, infrastructure logs, or unrelated personal information. Administrative infrastructure access is controlled separately.
Uploaded files
Attachments may contain personal information in their contents or metadata. Accepted files are stored under generated internal identifiers with details such as the original filename, detected and browser-reported media types, extension, size, cryptographic digest, processing state, security-scan state, storage state, and lifecycle audit events. They are not published as executable public paths. Files may be subject to automated security inspection and should contain only information reasonably necessary for the submission.
Storage and safeguards
Data controlled directly by this website is stored in secure infrastructure managed by Pretty Technologies Ltd.; limited processing also occurs through the service providers described below. Safeguards include access controls, least-privilege administration, separated management and production access, network segmentation, hardened systems using relevant CIS Level 2 Server benchmarks as a baseline with documented risk-based deviations, managed credentials, encryption for network communications where appropriate, security monitoring, and separately protected backups. Security controls are reviewed as systems and threats change. No internet-connected service can guarantee absolute security.
Cloudflare Turnstile and abuse prevention
Public forms use Cloudflare Turnstile and other automated controls to distinguish legitimate submissions from automated, abusive, or malicious traffic. This may involve IP and network information, browser or client characteristics, request metadata, interaction or security signals, and related technical information needed to prevent abuse. A Turnstile token is verified by the server before a form is accepted and is not stored with the completed submission.
Service providers and information outside Canada
Primary website and database infrastructure is controlled by Pretty Technologies Ltd., but some providers may process, transmit, protect, or store limited information outside Canada. Cloudflare provides authoritative DNS, edge and application security, Turnstile, caching, edge request handling, logging, and public-facing TLS through its global network. Amazon Web Services (AWS) is used for certain archival or backup storage that may be located in the United States. Akamai Cloud / Linode may be used for cloud infrastructure or transport functions in the applicable hosting or network jurisdiction. Discord applies its own privacy practices when you follow an invite, and the separately hosted BlueMap service receives ordinary web-request information when opened. Information outside Canada may be subject to lawful access in the jurisdiction where it or the provider is located. Pretty Technologies Ltd. remains responsible for its own handling and uses reputable providers and appropriate safeguards as applicable.
Technical and security logs
Using the website or related services can create logs containing IP addresses, timestamps, requested resources, protocol and response information, user-agent or client metadata, security decisions, authentication events where applicable, system or firewall events, and indicators of potentially malicious activity. Logs are used for administration, security monitoring, incident investigation, service reliability, abuse prevention, and troubleshooting. Access to infrastructure and security logs is more restricted than access to ordinary Minecraft moderation submissions.
How long information is kept
Ordinary submissions are kept only as long as reasonably required to process them, maintain necessary community or administrative records, resolve disputes, meet legal or business requirements, or protect service integrity. Security, access, audit, and infrastructure logs may be kept for up to seven years where reasonably required for security, audit, integrity, operations, legal needs, or incident response. Records connected with suspected malicious activity, abuse, an investigation, litigation hold, security incident, fraud, or another legitimate legal or security requirement may be kept longer where reasonably necessary. When information is no longer reasonably required, it is securely deleted, destroyed, or de-identified as appropriate.
Children and youth
This community may include children and teenagers, so the site aims to explain important privacy consequences clearly and not intentionally request unnecessary personal information from young players. Do not submit a legal name, home address, school information, telephone number, date of birth, or other identifying details unless the specific form asks for it and it is reasonably necessary. Where applicable law requires consent from a parent or guardian because a young person cannot provide meaningful consent themselves, the service must not rely only on that young person’s consent.
Your privacy choices and requests
Subject to applicable law and legitimate exceptions, you may ask whether Pretty Technologies Ltd. holds personal information about you, request access, ask that inaccurate information be corrected, raise a privacy concern, withdraw consent where consent is the applicable basis and withdrawal is legally available, or ask whether information is still required and eligible for deletion. Deletion is not unconditional where a record must reasonably be preserved for legal obligations, a security incident, an abuse investigation, dispute resolution, fraud prevention, or a similar legitimate purpose. Contact the privacy address shown on this page, including for questions about service providers outside Canada.
Security and privacy incidents
Pretty Technologies Ltd. maintains processes for investigating suspected security and privacy incidents. If applicable law requires notice to affected individuals or a privacy regulator, the required notification will be provided. This does not mean that every technical event is a reportable breach or that any system can be made completely immune from incidents.
Policy updates
This policy may be updated when services, providers, legal requirements, or data-handling practices change. The date at the top of the page will be revised when a material update is published. The version in effect when information is handled applies to that activity.