Legal
Privacy Policy
Short version: we collect as little as we can, we never sell it, and you can see or delete your data any time. Last updated: 18 October 2026.
Who we are
VillageBud (the website villagebud.net and the Minecraft server play.villagebud.net) is run by Matthew Caprisont, Croatia. For anything about your data, write to villagebud.mc@gmail.com.
When you only visit the website
- Our host, Cloudflare, processes your IP address, browser type and the pages you open to deliver the site and protect it from attacks. We only see totals (visits, countries), never a list of people. Legal basis: our legitimate interest in running a safe website (GDPR Art. 6(1)(f)).
- We use no tracking cookies, no analytics trackers, no ads and no social-media embeds.
- The Vote page remembers, in your own browser only (localStorage), the Minecraft name you type and when you last clicked each vote site, so it can tick them off for you. It is never sent to us. Clearing your browser data for villagebud.net removes it.
- Vote sites, Discord and Reddit are other companies' websites with their own privacy policies; we only link to them.
When you make a VillageBud account
An account is optional: you can play, read the site and vote without one.
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| E-mail address | log in, confirm the account, answer your help requests, security mails | the account you asked for (Art. 6(1)(b)) | until you delete the account |
| Password | log in - stored only as a salted one-way hash, never the password itself | Art. 6(1)(b) | until you delete the account |
| Minecraft name, UUID and skin id | link the account to your player, rewards, your profile picture (your Minecraft face, drawn from the skin you use on the server) | Art. 6(1)(b) | until you delete the account |
| Votes: Minecraft name, when you last voted on each vote site, your total number of votes (sent by the Minecraft server for every player who votes, with or without an account) | the vote page shows which sites you can vote on again and when; your website level | legitimate interest (Art. 6(1)(f)) - making voting easier | vote times 60 days, the name 90 days after your last vote (with an account: until you delete it) |
| Minecraft profile stats: rank, profile rating, island name and level, money, credits, number of friends (sent by the server for online players and for players on the leaderboard) | the rank next to names on the leaderboard; everything else only on the public profile of players who linked an account and kept "Public profile" on, and in their own account | legitimate interest (Art. 6(1)(f)); for linked accounts the account you asked for (Art. 6(1)(b)) | replaced every few minutes; removed 90 days after the last update, or when you delete your account |
| Help requests (topic and message) | answer you | Art. 6(1)(b) | 12 months after the request is closed |
| Game stats (playtime, logins, island level, money, votes, bosses, friends) | your profile and, if you switch it on, the weekly stats mail | Art. 6(1)(b); your consent for the mail | while the account exists |
| IP address and time of logins and failed logins | stop bots and break-in attempts | legitimate interest (Art. 6(1)(f)) | 30 days |
| Your choice for news / weekly stats mails | send them only if you said yes | your consent (Art. 6(1)(a)) - withdraw any time, with one click in every mail or in your settings | until you withdraw |
We don't collect your real name, address, phone number or date of birth, and we never sell or rent your data.
Cookies
The website itself sets no cookies. When you log in, one cookie, __Host-vb_session, keeps you logged in. It is strictly necessary for the account you asked for, so it needs no cookie banner (ePrivacy Directive Art. 5(3) and the Croatian Electronic Communications Act). It holds a random code and nothing else, and ends after 30 days or when you log out. On the account forms, Cloudflare Turnstile checks that you are human; it is used only for security.
Who else handles the data
- Cloudflare, Inc. - hosting, database, bot check (EU-US Data Privacy Framework and Standard Contractual Clauses).
- Resend - sends our e-mails (EU-US Data Privacy Framework and Standard Contractual Clauses).
- Discord Inc. - help requests (your Minecraft name, the topic and your message) are also posted in a private staff channel so staff can answer quickly.
Children
Accounts are for people 16 or older, or younger with a parent's or guardian's permission, as Croatian law requires. If you are a parent and think your child gave us data without your permission, write to villagebud.mc@gmail.com and we delete it.
Your rights
You can ask to see your data, correct it, delete it, get a copy to take elsewhere, object to processing based on our legitimate interest, and withdraw consent at any time. Most of this is in your account (Download my data, Delete my account); for anything else write to villagebud.mc@gmail.com - we answer within one month.
You can also complain to the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Security
HTTPS everywhere, strict security headers, hashed passwords, single-use links that expire, rate limits and a bot check. No system is perfect: if your data were ever exposed, we would tell you and AZOP as the law requires.
Changes
If this policy changes, the date at the top changes too. For big changes we tell account holders by e-mail.