Privacy policy
What we know about you, where it comes from, what it is for and how long it stays. The list is short on purpose: we do not collect what access to the server does not need.
In short
- We store account identifiers and access, subscription and payment-processing records. Linking Discord adds verification and notification settings. We never see your card number; Creem handles the payment email.
- The site's host keeps a technical request log for up to 30 days; analytics count views without cookies.
- Game records have different visibility and retention rules. Deletion requests are assessed individually; some records may need to remain.
- We sell no personal data and show no advertising.
- Ask for a copy, a correction or erasure by email, naming your username; we answer within 30 days.
Who is responsible for your data
The Everdawn service operator is responsible for handling your personal data. Contact details appear at the end of this page.
This policy covers everdawn.net, buying a pass and playing on the server. Discord is a separate service with its own privacy policy; what you write there is governed by that policy, not by this one.
What we collect when you buy a pass
We use these details to manage access. The access service also stores linked Discord identifiers, language and notification preferences, account-verification state, customer and order identifiers, refund or dispute flags, and payment-processing records. We never see your card number.
Creem handles payment and sends confirmation to the game server's access service. That service adds the Minecraft account to the whitelist. Creem sees your payment email; the site does not send a welcome email.
Access follows the account’s UUID, so changing your Minecraft username does not remove your pass.
- The Minecraft username you type into the form
- The account’s unique identifier (UUID) and its username as returned by Mojang
- The pass type, payment-provider subscription identifier, status and paid-through date
What we collect when you only read the site
Vercel hosts the site and keeps request logs with the IP address, time, page address and browser type to operate the service and investigate abuse.
Vercel Web Analytics and Speed Insights report page-view totals and loading speed without analytics cookies or individual visitor profiles.
The site uses two cookies for language choice and payment confirmation. Neither is an advertising cookie. The cookie policy explains their purpose and duration.
Records created during gameplay
Polis records contracts, signatures, court decisions, land ownership, trades and supported violations against account identifiers. Visibility and retention depend on the record type. It does not record every action; automatic land logging does not apply in the Dark Zone.
The game server logs connections, disconnections, connecting IP addresses and client errors to run the service and investigate abuse.
Voice chat is relayed between players in real time. We do not record it and we do not store it.
Why we process data
For players in the EEA and the United Kingdom the bases are named under the GDPR and the UK GDPR. Elsewhere the equivalent basis in local law applies.
We make no automated decisions about you with legal effects, and we do not profile.
- To provide the purchased access: account checks, access activation, subscriptions and support (GDPR art. 6(1)(b))
- Legal obligation — the tax and accounting records Creem keeps, and answers to lawful requests from authorities (art. 6(1)(c))
- Legitimate interests: operating a secure service, investigating abuse, viewing overall usage statistics and maintaining game records that other players rely on (art. 6(1)(f))
- Consent — where we ask for it separately; it can be withdrawn at any time (art. 6(1)(a))
Who we share data with
We do not sell personal data, we do not pass it to ad networks and we do not trade it with data brokers.
We share data with authorities when a valid legal request requires it, limited to the data covered by that request.
- Creem: payment processing, taxes, invoices and refunds. Creem is responsible for the buyer data it collects under its own privacy policy.
- Mojang / Microsoft — the account lookup; only the username itself is sent
- Vercel — site hosting, server logs and cookieless analytics
- The game server host — the technical home of the world and its records
- Discord — only what you write there yourself
International data transfers
Our processors operate in the European Union and the United States, so data may leave the country you live in.
For transfers out of the EEA, the United Kingdom and Switzerland we rely on the EU Standard Contractual Clauses with the relevant addenda, and on the EU–US Data Privacy Framework for American recipients where it is available.
We do not offer the service in, or host data in, Russia or China.
Data retention
Some game records are kept after a subscription ends because other players' agreements depend on them. Different record types expire or are removed under different rules.
- The pass record — UUID, username, status, tier — while the subscription runs and for 12 months after it ends, so you can come back to the same world
- The buyer's email address — not stored by us; only Creem sees it
- Site request logs — up to 30 days
- Game server logs — up to 90 days
- Payment records — kept by Creem for the period tax law requires, usually 7 to 10 years
- Land activity logs: up to 30, 14 or 7 days, depending on the event type. Contracts, court decisions and accusations have separate retention rules.
Your rights
You can ask for a copy of your data, for a correction, for erasure, for processing to be restricted, for portability, and you can object to processing based on legitimate interests. Write to us and name the username in question. We answer within 30 days and charge nothing for it.
An erasure request does not automatically remove every game record. We assess which records can be deleted and which may need to remain for legal obligations or legal claims. A username and UUID are still personal data even without your real name. Any applicable exception under GDPR article 17 is assessed for the specific request.
If that does not suit you, the moment to decide is before your first login, not after it.
You can complain to the Ukrainian Parliament Commissioner for Human Rights in Ukraine, your national data protection authority in the EEA, or the ICO in the United Kingdom. You can also contact us directly; contacting us first is not required.
Regional additions
California (CCPA/CPRA): in the past twelve months we have not sold personal data and have not shared it for cross-context behavioural advertising. You have the right to know, delete, correct, limit the use of sensitive data, and not to be discriminated against for exercising any of it. Send the request to our email; an authorised agent is accepted with written authority.
Brazil (LGPD), Canada (PIPEDA), Japan (APPI), South Korea (PIPA), Singapore (PDPA), Australia (Privacy Act) and India (DPDP Act): send requests for access, correction or deletion, and complaints, to the same email. We reply within 30 days.
Switzerland: send privacy requests to the same contact email.
Children
Everdawn is for players aged 13 or older. If the law in your country sets a higher minimum age for consent, that age applies.
For players under 18 the pass is bought by a parent or guardian: they enter the contract and they pay. In India, processing the data of anyone under 18 requires parental consent under the DPDP Act.
We do not show advertising or use personal data to target ads to adults or children.
If you are a parent and discover that a child under 13 is using Everdawn, contact us. We will stop the account’s access and delete the child’s data that we control without delay.
Security
The site is served over HTTPS only. Payment notifications are received by the gate on the game server, which verifies their signature. The thank-you ticket is signed and lives for 30 minutes.
Access to the data is limited to the people who need it to run the server.
No system is perfectly secure. If a breach happens that puts your rights at risk, we will tell you and the supervisory authority within the period the law sets — under the GDPR, 72 hours from the moment we know.
Changes to this policy
The date of the last revision is at the top of the page. We announce material changes at least 14 days ahead in Discord and on the site.
If a change does not suit you, cancel before it takes effect — we refund the unused period pro rata.