Privacy Policy

Who we are

zuboku is a free Minecraft server hosting service run by a private individual (“we”, “us”). We decide why and how your personal data is used, so we are the data controller. You can contact us at contact@zuboku.com.

What data we collect

• Account data: your email address, nickname and password. The password is stored only as a one-way hash, so we cannot read it. We also keep your account settings and any message you send us through the suggestions form.
• Server data: the servers you create, their settings, worlds, files, mods and plugins you upload, console output, logs and backups.
• Data of your players: server logs and access lists can contain the nicknames and IP addresses of the players who join your server. We keep this data only because it is part of your server.
• Technical data: the IP address, browser, requested pages and time of each visit, processed by our web server. We use it to deliver the site, keep it secure and stop abuse.
• Cookies: see the Cookies section below.

To create an account you must give us an email address, a nickname and a password; without them we cannot provide the service. We do not ask for your real name, phone number or address. At the moment zuboku is free, so we do not collect payment data. If that changes, we will update this policy first.

Why we use your data

We use personal data for the purposes below. For visitors from the European Economic Area (EEA), the United Kingdom and Switzerland, we also name the legal basis for each purpose.

• To provide the service you asked for: your account, your servers and password reset emails. Legal basis: performing our contract with you.
• To keep the service secure and fair: limiting login attempts, finding crashes and abuse, and protecting the servers from attacks, mining and spam. Legal basis: our legitimate interest in running a safe service.
• To show advertising on public pages (see Advertising below). Legal basis: your consent.
• To answer your messages and send the optional notices you turned on in your account settings. Legal basis: our legitimate interest in answering you, and your consent for the notices.
• To meet legal obligations and answer lawful requests from authorities. Legal basis: legal obligation.

We do not sell your personal data, and we do not use it for automated decisions that significantly affect you. Some protections, such as limits on login attempts, work automatically.

Who receives your data

We use a few service providers and services to run zuboku. Most of them process data on our behalf; Google and Modrinth receive data as independent services and handle it under their own privacy policies.

• Contabo GmbH rents us the servers on which zuboku and your Minecraft servers run.
• Cloudflare, Inc. provides the DNS of zuboku.com (it turns the website name into the address of our server) and forwards the emails sent to our contact address to our mailbox; for those emails it receives the sender’s address and the message. Visitors connect to the website directly, not through Cloudflare, so Cloudflare does not see which pages you open.
• Resend sends our emails, for example the password reset email. It receives the recipient’s email address and the text of the message.
• Modrinth provides the catalogue of mods. When you search for mods or install one, your request, for example the words you search for, is sent to Modrinth.
• Google receives data from visitors’ browsers when advertising is shown on our pages (see Advertising below).

Players you give access to a server may see your nickname. We may also share data with authorities when the law requires it, or when it is needed to protect users and the service. Otherwise we share your data only with the providers listed above and with Google’s advertising partners.

International transfers

Some of these providers are based in the United States or in other countries outside the EEA and may process data there. We also run zuboku from Ukraine, which is outside the EEA, so your data can be accessed from there. Where the law requires it, the providers rely on safeguards such as standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep data

• Account and server data: until you or we delete the account. When you ask us to delete your account, we delete it together with its servers and files.
• Backups: up to 2 backups per server; the oldest is removed automatically.
• Password reset links: valid for one hour.
• Technical logs: only as long as needed for security and troubleshooting.
• Unused servers and accounts: a server or an account that nobody has used for a long time may be deleted (see the Terms of Service).

Cookies

A cookie is a small text file that a website stores in your browser. We use:

• a session cookie that keeps you logged in (needed for the site to work);
• a language cookie, NEXT_LOCALE, that remembers the language you chose;
• advertising cookies from Google and its partners, when a page shows ads (see Advertising below).

You can delete or block cookies in your browser settings. If you block the session cookie, you will not be able to stay logged in.

Advertising

Public pages of zuboku, for example the home page and the help articles, may show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet. Google and other third parties may place and read cookies, or use web beacons, IP addresses or other identifiers, to collect information as a result of ad serving on our pages.

You can opt out of personalised advertising in Google Ads Settings. You can also opt out of the use of cookies by third-party vendors for personalised advertising at aboutads.info or, in Europe, at youronlinechoices.com. To learn how Google uses data from sites that use its services, see How Google uses information from sites or apps that use our services.

If you are in the EEA, the United Kingdom or Switzerland, we show a consent message and set advertising cookies only after you agree. You can withdraw your consent at any time.

Your rights

Depending on where you live, you have the right to access the data we hold about you, to correct it, to delete it, to restrict or object to its use, to receive it in a portable form and to withdraw your consent at any time. To use these rights, write to contact@zuboku.com from the email address of your account. We answer within one month, or tell you if the law gives us more time.

To delete your account, write to the same address. We delete the account, its servers and files. Copies may stay in backups and logs for a short time until they are overwritten.

You also have the right to complain to the data protection authority in your country if you believe that we handle your data unlawfully.

Children

zuboku is not intended for children under 13, and we do not knowingly collect their data. If you are under 18, please use the service with the permission of a parent or guardian. If you believe that a child has given us personal data, write to us and we will delete it.

Security

We store passwords as hashes, limit login attempts and use encrypted connections (HTTPS) on the website. No system is completely secure, so please use a strong password that you do not use anywhere else, and keep your own copies of the worlds that matter to you.

Changes to this policy

We may update this policy. The date at the top of the page shows when it last changed. If a change is important, we will tell you on the website.