Privacy Policy

InPvP LLC (“InPvP”, “we”, “us”) operates Minecraft Bedrock Edition multiplayer servers including Mineville, MegaSMP, Genwars, and associated web services (collectively, the “Services”). This Privacy Policy explains what information we collect, why we collect it, and how you can exercise your rights.

We are committed to complying with the General Data Protection Regulation (GDPR), Children's Online Privacy Protection Act (COPPA), and Microsoft's Xbox network policies. Our Services operate on and integrate with the Xbox network; by using our Services you also agree to the Xbox Terms of Service and the Microsoft Privacy Statement.

Our Services are accessed through the Xbox network. Eligibility and age requirements follow the Xbox Terms of Service. Players must have a valid Microsoft / Xbox account. Accounts for children under 13 (or the applicable age of digital consent in your country) require parental consent managed through Microsoft Family Safety.

We do not knowingly collect personal information directly from children under 13. If a parent or guardian believes we hold data for a child under 13 without proper consent, please submit a data deletion request using the form below.

We collect the following categories of data:

• Xbox / Microsoft identity: Xbox Gamertag, Xbox User ID (XUID), and Microsoft account email — provided by Microsoft authentication when you sign in on our website or join our servers.
• PlayFab game profile: In-game currency (Minecoins, Orebits, etc.), purchase history, inventory, teams, ranks, statistics, and playtime — stored in our Microsoft PlayFab backend.
• Website profile data: Information you voluntarily add to your profile, including your bio, favorite server, and screenshots. Profile data (excluding screenshots) is visible to other signed-in players.
• Email address (opt-in only): Only collected when you voluntarily sign in via Microsoft on our website and consent to provide it. Used for account communications and support.
• Discord username (opt-in only): Only collected when you voluntarily link your Discord account through our website.
• AI assistant conversations: Messages you send to Orbie (our AI chatbot) and the responses generated. Conversations are associated with your gamertag and stored on our servers. See Section 4 for details.
• Support correspondence: Messages, attachments, and information you submit through our support ticket system.
• Activity data: We log certain actions on the website (sign-ins, profile views, support tickets, etc.) to maintain security and operate our services. Activity logs are retained for up to 90 days.
• Technical / security data: IP addresses (stored as one-way hashes, not in raw form), connection timestamps, and browser information retained for security, fraud prevention, ban enforcement, and anti-cheat purposes.
• Screenshots: Images you upload to your profile are stored on our servers. Uploaded images are automatically scanned for inappropriate content before being accepted (see Section 5).

Our AI assistant, Orbie, is available on our website and Discord. Orbie is powered by artificial intelligence using third-party AI providers and is not a human. When you use Orbie:

• Your messages are sent to third-party AI service providers for processing. These providers may temporarily retain data in accordance with their own privacy policies.
• Along with your message, we send recent conversation context (up to 6 prior messages) and your basic player information (gamertag, staff rank if applicable, and public profile data) to generate relevant responses.
• Conversations are stored on our servers, associated with your gamertag, and retained indefinitely unless you request deletion.

We recommend that you do not share personal information (real name, address, phone number, etc.) in messages to Orbie.

InPvP may use data collected through its Services — including but not limited to AI assistant conversations, in-game public chat messages, in-game interactions, gameplay data, and other user-generated content — to develop, train, and improve our own AI models and features.

This data may be used in aggregated, de-identified, or individual form for machine learning purposes. By using our Services, you consent to this use.

If you do not wish for your AI conversations to be used for training, you may opt out by not using the Orbie chat feature and requesting deletion of any existing conversations using the form below.

• To operate and maintain game servers and services.
• To provide in-game features, track player progress, and deliver purchased content.
• To process support requests and enforce our community rules.
• To detect and prevent fraud, cheating, and abuse.
• To communicate with you about your account (email, only if you provided it).
• To power AI-assisted features (Orbie) that help answer gameplay questions.
• To develop, train, and improve our own AI models using conversations, in-game data, and other user-generated content (see Section 4a).
• To scan uploaded images for safety and compliance with our Acceptable Use Policy.
• To comply with legal obligations.

We do not use your data for advertising profiling or sell it to third parties.

We do not sell your personal data. We share data only with the following processors and partners, all of which are bound by their own data protection commitments:

• Microsoft / Xbox Live — authentication and identity services. Microsoft Privacy Statement.
• Microsoft PlayFab — game backend and player data storage. PlayFab Terms.
• Third-party AI providers — AI processing for Orbie. Your chat messages and basic player context are sent to third-party AI service providers to generate responses.
• Discord — only if you voluntarily link your Discord account. Discord Privacy Policy.
• Cloudflare — file storage for screenshots and support ticket attachments (Cloudflare R2). Cloudflare Privacy Policy.
• Google Cloud — uploaded screenshots are scanned for inappropriate content using Google's Vision API. Image data is sent to Google for safety analysis only and is not retained by Google for other purposes. Google Cloud Privacy Notice.
• Upstash — database services for player profiles, support tickets, and AI conversation storage. Upstash Privacy Policy.
• Vercel — web hosting and analytics for inpvp.net. Vercel collects anonymized performance and usage data. Vercel Privacy Policy.
• Law enforcement — only when required by applicable law or to protect the safety of users.

Our servers operate within the Xbox ecosystem and adhere to Xbox Community Standards and Xbox Requirements (XR) for online multiplayer. This includes safe communication features, parental controls enforced at the Microsoft account level, and full compliance with Xbox network policies for third-party game publishers.

Players under 18 benefit from safety protections imposed by Microsoft Family Safety and Xbox parental controls, including communication restrictions and content filters — all of which operate at the platform level independently of InPvP.

• Game data (PlayFab): Retained for as long as you have an active player account.
• Website profile data: Retained until you modify or delete it, or request account deletion.
• AI conversations: Retained indefinitely unless you delete individual conversations through the chat interface or request full deletion via the form below.
• Activity logs: Retained for up to 90 days, then automatically deleted.
• Server / security logs: Retained for up to 90 days.
• Support tickets: Retained for up to 2 years.
• Ban records: Retained permanently to protect the safety of our community. IP addresses in ban records are stored as one-way hashes and cannot be reversed to the original IP.
• Screenshots: Retained until you delete them or request account deletion.
• Email address (opt-in): Retained until you request deletion.

You may request deletion of your data at any time using the form below. We will process requests within 30 days as required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Deletion (Right to Erasure) — request that we delete your personal data from our systems.
• Correction — request correction of inaccurate personal data.
• Portability — request your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent (e.g., email address), you may withdraw at any time.
• Object to processing — where processing is based on legitimate interest.

COPPA (USA — under 13): Parents and guardians may review, request deletion of, or refuse further collection of their child's personal information by submitting a request using the form below.

California residents (CCPA/CPRA): You have the right to know what data is collected, the right to delete, and the right to opt-out of the “sale” or “sharing” of personal data. We do not sell or share personal data.

To exercise any of these rights, use the data deletion/request form below.

Our website uses the following cookies and browser storage:

• xbox_session cookie (60 seconds) — a short-lived cookie used only to transfer authentication data immediately after Xbox OAuth sign-in. Deleted automatically after 60 seconds.
• Security cookie (1 year) — an httpOnly cookie set if your account has been suspended, used to prevent repeated unauthorized access attempts. Contains no personal information.
• localStorage — stores your session token, profile information, and preferences (such as theme and email opt-in decisions) locally in your browser. Cleared when you sign out, except for preference flags.
• sessionStorage — stores temporary state such as the AI chat widget's open/closed state. Cleared when you close the browser tab.

We use Vercel Analytics for anonymized website performance metrics. We do not use advertising cookies, tracking pixels, or behavioral targeting cookies.

We may update this Privacy Policy from time to time. Material changes will be announced on our website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our Services after changes take effect constitutes your acceptance of the updated policy.