DonutSMP Privacy Policy

Last updated: October 9, 2026
Applies to: DonutSMP Minecraft servers, DonutSMP Discord (including our Discord apps and bot), our website, and our support/ticket systems ("Services").

1) Who we are

Organization: DonutSMP ("we", "us")
Website: https://donutsmp.net
Discord: https://discord.gg/donutsmp
Privacy & support contact: [email protected]

2) What we collect and store

We store limited information linked to a player/account for security, moderation, and support.

A) Account identifiers

• Minecraft UUID
• Minecraft username (current; historical usernames may appear in retained support/moderation records and may also be derivable through UUID linking)

B) Network and security logs

• IP address history associated with logins (and related timestamps)

C) Moderation records

• Ban history (status, reason label, timestamps, duration if applicable)
• Mute history (status, reason label, timestamps, duration if applicable)

D) Support and reports

• Ticket transcripts and support history (including player reports), as retained by our ticket/transcript systems
• Ticket records may include attachments or links provided by users/staff (e.g., screenshots), where present

E) Filter-triggered chat safety logs (limited)

We do not store all chat by default.
If a message triggers our automated chat/toxicity filters, we may store that message in Discord to maintain a record for moderation (for example: the message content that triggered the filter, timestamp, and the account identifier).

F) Voice chat (Simple Voice Chat)

We operate an in-game proximity voice chat system (Simple Voice Chat). Voice audio may be processed in real time for moderation purposes. We do not retain voice recordings by default. A recording may be created and stored only when it is needed as evidence in connection with a moderation action (e.g., ban proof for harassment, threats, or other rule violations). Such recordings are limited to the relevant segment of audio and are linked to the associated account identifier(s).

G) Client integrity checks (anti-cheat)

We perform real-time client integrity checks upon connection and during gameplay to detect the use of unauthorized modifications (e.g., cheat clients). These checks are performed in memory and are used solely to determine whether a player's client complies with our rules. No data from these checks is stored.

H) Discord account data

• When you log in to our website with Discord, Discord shares your Discord user ID, username, and email address with us. We never receive your Discord password.
• When you verify, we link your Discord account to your Minecraft account (UUID).
• Your email is used to secure accounts and stop abuse (for example, blocking sign-ups from some disposable email providers), and may be viewed by authorized staff during account investigations.

I) Discord server moderation

• Our Discord bot passes messages posted in the DonutSMP Discord server to our staff moderation tool so staff can moderate in real time. This live feed is held in memory only and is not saved.
• Messages our automated checks flag (for example scams, malicious downloads, IRL trading, or advertising) are saved with the sender's Discord ID, username, the message, and its time.
• When staff take action in our Discord server (such as a ban, timeout, or blocking a message), we keep a record of the action, the reason, the staff member, and any messages used as evidence.

J) Website verification and device data

When you verify your Minecraft account on our website, we record a device identifier generated by your browser, along with the IP address and browser details used. It is linked to your Minecraft and Discord accounts and is used to detect ban evasion and alternate accounts.

K) Game client details

When you join, we record your client name and version, game language, and view distance from your most recent join. We use these for support and to help detect unauthorized clients. Client name and version may also be kept with in-game payment records for fraud checks.

3) What we do not store

• We do not receive or store your Discord password.
• We do not store the results or raw data of client integrity checks. Detection is performed in real time and no fingerprint, mod list, or check result is retained.
• We do not keep a permanent archive of our Discord server's chat. Apart from flagged messages and moderation evidence (Section 2(I)), Discord messages stay on Discord.
• We do not store full in-game chat logs by default, except where captured as part of support tickets or filter-triggered moderation logs.
• We do not store continuous or bulk voice chat recordings. Voice data is only retained when captured as moderation evidence as described in Section 2(F).

4) Why we collect it (purposes)

We use the data above to:

• operate the Services (e.g., account identification via UUID)
• let you log in to our website with Discord and link your Discord and Minecraft accounts
• prevent abuse, cheating, harassment, and ban evasion
• investigate and enforce rule violations (moderation)
• enforce voice-chat conduct rules and retain evidence of violations when necessary for moderation actions or appeals
• respond to support requests and player reports
• protect the security and integrity of our infrastructure and community

5) Where the data is stored

Data may be stored in:

• our game server databases and logs (e.g., login/IP logs, moderation records)
• our support/ticket systems (ticket transcripts)
• our website and staff tool databases (e.g., Discord login data, account links, verification records, Discord moderation records)
• our Discord server channels used for moderation/support records (e.g., filter-triggered logs)

Data may be processed and stored in different jurisdictions depending on infrastructure and service providers. As a result, it may be subject to the laws of those jurisdictions.

6) Sharing and disclosure

We do not sell personal information.

Data we receive from Discord is only used to run the features described in this policy. We do not sell, rent, or license it, we do not give it to data brokers or advertising services, and we do not use Discord messages to train AI models.

We may share data only:

• with service providers that help us run the Services (e.g., hosting, DDoS protection, log storage, ticket tooling), under appropriate safeguards. This includes AI service providers (currently Google), which process support ticket messages and some in-game content (such as chat and sign text) to sort tickets and help staff moderate;
• with Discord, when we take moderation actions in our Discord server; and/or
• if required by law or to protect the rights, safety, and security of our users and our Services.

7) Retention (how long we keep it)

We keep data only as long as necessary for the purposes above.

Our current retention targets are:

• IP history / login security logs: up to 12 months
• Ticket transcripts: up to 36 months
• Voice chat moderation recordings: up to 12 months (or longer if linked to an active ban, appeal, or dispute)
• Discord login data and account links (Discord ID, username, email): while you use the Services or your accounts are linked, or until you ask us to delete them
• Flagged Discord messages: up to 35 days
• Discord moderation actions and evidence: kept with your moderation history
• Website verification device records: up to 180 days after your last verification (or longer if linked to a ban)
• Logs posted in our Discord server channels: retained according to Discord's platform retention and our server configuration

We may retain relevant records longer if needed for security incidents, fraud prevention, chargebacks, ban evasion prevention, or to resolve active disputes (e.g., a report investigation or appeal).

Data may also exist temporarily in replicated systems and backups for operational reliability and is deleted on a rolling schedule consistent with the retention targets above.

If we stop operating a feature or Discord app, we delete the Discord data it collected.

8) Security

We use reasonable safeguards appropriate to the sensitivity of the information, including access controls and limiting access to authorized staff.

If we learn that someone accessed your personal information without permission, we will notify affected users as required by law, and notify Discord where it involves data we received from Discord.

9) Children

Our Services are not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect their personal information, and if we learn we have, we delete it. If you believe a child has given us personal information, contact [email protected].

10) Your rights and requests (access, correction, deletion)

Depending on your jurisdiction (including Canadian privacy principles such as PIPEDA), you may request:

• access to the personal information we hold about you
• correction of inaccurate information
• deletion of information where appropriate and where we are not required to keep it for security, dispute resolution, or legal compliance

This includes the data we received from Discord, such as your email address and the link between your Discord and Minecraft accounts.

Identity verification: To prevent unauthorized disclosure, we may require reasonable identity verification before providing account-linked information (especially IP history and support transcripts).

To submit a request, open a Privacy & data ticket at support.donutsmp.net, or email [email protected], and include:

• your Minecraft username and UUID (if known)
• the categories of data requested (e.g., IP history, ban history, transcripts)
• the relevant date range
• your Discord ID if your account is linked (optional but helpful)

Further identity proof may be required.

Questions or complaints about privacy can be sent to [email protected].

11) Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the latest version.