Privacy Policy

InPvP LLC (“InPvP”, “we”, “us”) operates Minecraft Bedrock Edition multiplayer servers including Mineville, MegaSMP, Genwars, and associated web services (collectively, the “Services”). This Privacy Policy explains what information we collect, why we collect it, and how you can exercise your rights.

We are committed to complying with the General Data Protection Regulation (GDPR), Children's Online Privacy Protection Act (COPPA), and Microsoft's Xbox network policies. Our Services operate on and integrate with the Xbox network; by using our Services you also agree to the Xbox Terms of Service and the Microsoft Privacy Statement.

Our Services are accessed through the Xbox network. Eligibility and age requirements follow the Xbox Terms of Service. Players must have a valid Microsoft / Xbox account. Accounts for children under 13 (or the applicable age of digital consent in your country) require parental consent managed through Microsoft Family Safety.

We do not knowingly collect personal information directly from children under 13. If a parent or guardian believes we hold data for a child under 13 without proper consent, please submit a data deletion request using the form below.

Important: InPvP only collects and stores personal identity data (Gamertag, XUID, email) when you voluntarily sign in on our website via Microsoft / Xbox OAuth. Playing on our game servers alone does not cause InPvP to collect or retain your identity data - game server data is managed by Microsoft PlayFab. All website data collection requires your explicit, voluntary consent through the sign-in process.

We collect the following categories of data:

• Xbox / Microsoft identity (website sign-in only): Xbox Gamertag, Xbox User ID (XUID), and Microsoft account email — collected only when you voluntarily sign in on our website via Microsoft OAuth. This data is provided directly by you through the authentication process, not by Microsoft. InPvP does not receive or retain this data unless you initiate sign-in.
• PlayFab game profile:In-game currency (Minecoins, Orebits, etc.), purchase history, inventory, teams, ranks, statistics, and playtime - stored in our Microsoft PlayFab backend. Certain PlayFab-sourced data (such as player identifiers and gameplay statistics) is used to display information on our website and is retained for as long as the player account exists, unless deletion is requested by the player or by Microsoft on the player's behalf.
• Website profile data: Information you voluntarily add to your profile, including your bio, favorite server, and screenshots. Profile data (excluding screenshots) is visible to other signed-in players.
• Email address (opt-in only): Only collected when you voluntarily sign in via Microsoft on our website and consent to provide it. Used for account communications and support.
• Discord username (opt-in only): Only collected when you voluntarily link your Discord account through our website.
• Age classification:Your Microsoft account's age group classification (e.g., Adult, Minor), obtained via the Microsoft Graph API during sign-in. Used to implement age-appropriate safety features, gate access to age-restricted content, and comply with child protection regulations including COPPA.
• Support correspondence: Messages, attachments, and information you submit through our support ticket system.
• Activity data: We log certain actions on the website (sign-ins, profile views, support tickets, etc.) to maintain security and operate our services. Activity logs are retained for up to 90 days.
• Technical / security data: IP addresses (stored as one-way hashes, not in raw form), connection timestamps, and browser information retained for security, fraud prevention, ban enforcement, and anti-cheat purposes.
• Screenshots: Images you upload to your profile are stored on our servers. Uploaded images are automatically scanned for inappropriate content before being accepted (see Section 4).

• To operate and maintain game servers and services.
• To provide in-game features, track player progress, and deliver purchased content.
• To process support requests and enforce our community rules.
• To detect and prevent fraud, cheating, and abuse.
• To communicate with you about your account (email, only if you provided it).
• To scan uploaded images for safety and compliance with our Acceptable Use Policy.
• To comply with legal obligations.

We do not use your data for advertising profiling or sell it to third parties.

We do not sell your personal data. We share data only with the following processors and partners, all of which are bound by their own data protection commitments:

• Microsoft / Xbox Live - authentication and identity services. Microsoft Privacy Statement.
• Microsoft PlayFab - game backend and player data storage. PlayFab Terms.
• Discord - only if you voluntarily link your Discord account. Discord Privacy Policy.
• Cloudflare - file storage for screenshots and support ticket attachments (Cloudflare R2). Cloudflare Privacy Policy.
• Google Cloud- uploaded screenshots are scanned for inappropriate content using Google's Vision API. Image data is sent to Google for safety analysis only and is not retained by Google for other purposes. Google Cloud Privacy Notice.
• Upstash - database services for player profiles and support tickets. Upstash Privacy Policy.
• Vercel - web hosting and analytics for inpvp.net. Vercel collects anonymized performance and usage data. Vercel Privacy Policy.
• Law enforcement - only when required by applicable law or to protect the safety of users.

Our servers operate within the Xbox ecosystem and adhere to Xbox Community Standards and Xbox Requirements (XR) for online multiplayer. This includes safe communication features, parental controls enforced at the Microsoft account level, and full compliance with Xbox network policies for third-party game publishers.

Players under 18 benefit from safety protections imposed by Microsoft Family Safety and Xbox parental controls, including communication restrictions and content filters - all of which operate at the platform level independently of InPvP.

• Game data (PlayFab):PlayFab-sourced data displayed on our website is retained for as long as the player account exists, unless deletion is requested by the player or by Microsoft on the player's behalf.
• Website profile data: Retained until you modify or delete it, or request account deletion.
• Activity logs: Retained for up to 90 days, then automatically deleted.
• Server / security logs: Retained for up to 90 days.
• Support tickets: Retained for up to 2 years.
• Ban records: Retained permanently to protect the safety of our community. IP addresses in ban records are stored as one-way hashes and cannot be reversed to the original IP.
• Screenshots: Retained until you delete them or request account deletion.
• Email address (opt-in): Retained until you request deletion.

You may request deletion of your data at any time using the form below. We will process requests within 30 days as required by applicable law.

We also comply with data deletion requests initiated by Microsoft on behalf of users in accordance with our agreements with Microsoft and applicable data protection laws.

Depending on your jurisdiction, you may have the right to:

• Access - request a copy of the personal data we hold about you.
• Deletion (Right to Erasure) - request that we delete your personal data from our systems.
• Correction - request correction of inaccurate personal data.
• Portability - request your data in a structured, machine-readable format.
• Withdraw consent - where processing is based on consent (e.g., email address), you may withdraw at any time.
• Object to processing - where processing is based on legitimate interest.

COPPA (USA, under 13):Parents and guardians may review, request deletion of, or refuse further collection of their child's personal information by submitting a request using the form below.

California residents (CCPA/CPRA):You have the right to know what data is collected, the right to delete, and the right to opt-out of the “sale” or “sharing” of personal data. We do not sell or share personal data.

To exercise any of these rights, use the data deletion/request form below.

Our website uses the following cookies and browser storage:

• xbox_session cookie (60 seconds) - a short-lived cookie used only to transfer authentication data immediately after Xbox OAuth sign-in. Deleted automatically after 60 seconds.
• Security cookie (1 year) - an httpOnly cookie set if your account has been suspended, used to prevent repeated unauthorized access attempts. Contains no personal information.
• localStorage - stores your session token, profile information, and preferences (such as theme and email opt-in decisions) locally in your browser. Cleared when you sign out, except for preference flags.
• sessionStorage - stores temporary UI state. Cleared when you close the browser tab.

We use Vercel Analytics for anonymized website performance metrics. We do not use advertising cookies, tracking pixels, or behavioral targeting cookies.

We may update this Privacy Policy from time to time. Material changes will be announced on our website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our Services after changes take effect constitutes your acceptance of the updated policy.