Privacy Policy

Last updated: 27 January 2026

1. Who We Are

6-7 SMP is a free Minecraft server operated by CraftCorps. This website (6-7.uk) provides companion web services for the server, including account management, a player dashboard, and a marketplace.

For any privacy-related questions, you can reach us via our Discord server.

2. What Data We Collect

We only collect data that is necessary to provide and operate the service. We do not collect data for advertising, profiling, or any purpose beyond making the service work.

2.1 Account Data

  • Minecraft username and UUID — provided by Mojang/Microsoft when you connect to the server. Used to identify your account.
  • Password hash — a securely hashed version of the password you create for the web dashboard. We never store plaintext passwords.
  • Two-factor authentication secrets — stored encrypted if you enable 2FA.

2.2 Gameplay Data

  • Play time, deaths, mob kills — basic gameplay statistics displayed on your dashboard.
  • Location data — your in-game coordinates, used for the world map feature.
  • Chat messages — server chat messages relayed to the web dashboard and support tickets.
  • Land claims — chunk coordinates you claim in-game.
  • Vote records — records of votes cast for the server on third-party voting sites.

2.3 Marketplace Data

  • Coin balance — your in-game currency balance.
  • Market listings — items you list for sale, including item data, price, and transaction history.
  • Purchase history — records of items bought and sold.

2.4 Technical Data

  • Session tokens — stored in browser cookies to keep you logged in.
  • Language preference — stored in a cookie to display the site in your chosen language.

We do not use analytics trackers, advertising cookies, or any third-party tracking scripts.

3. Why We Process Your Data (Legal Basis)

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

  • Contract performance (Art. 6(1)(b) GDPR) — processing necessary to provide the service you signed up for (account management, gameplay features, marketplace).
  • Legitimate interest (Art. 6(1)(f) GDPR) — maintaining server security, preventing cheating, and keeping the service running smoothly.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be visible to other players in the following ways:

  • Your Minecraft username and avatar appear on the public server status page when you are online.
  • Your username and server appear on marketplace listings you create.
  • Your location appears on the world map to friends and other players.

4.1 Service Providers

We use the following services to operate:

  • Convex — database hosting (stores account and gameplay data).
  • Cloudflare — website hosting and DDoS protection.
  • mc-heads.net — Minecraft avatar images (only your public username is sent).

5. Data Retention

We retain your data for as long as your account exists and the service is operational. If you request account deletion, we will remove your personal data within 30 days. Some anonymized gameplay data (e.g., aggregate statistics) may be retained.

Session tokens expire automatically and are cleaned up periodically.

6. Your Rights (EU/EEA)

Under the GDPR, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — request that we limit processing of your data.
  • Portability — request your data in a machine-readable format.
  • Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us through our Discord server or use the /support command in-game. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy

6-7 SMP does not knowingly collect personal data from children under 16. If you are under 16, you should have a parent or guardian's permission before using this service. If we become aware that we have collected data from a child under 16 without appropriate consent, we will take steps to delete it.

8. Security

We take reasonable measures to protect your data, including:

  • Passwords are hashed using industry-standard algorithms.
  • All connections use HTTPS encryption.
  • Two-factor authentication is available for additional account security.
  • Access to server infrastructure is restricted to authorized administrators.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.