Privacy Policy

1. Controller

The controller for the processing described here, within the meaning of the EU General Data Protection Regulation (GDPR / DSGVO), is the operator of this website.

Full contact details are available in our Imprint (Impressum).

Email: contact@onthepixel.net

2. Overview

This website advertises a Minecraft hosting service that does not exist yet. It sells nothing, takes no payment details, and creates no accounts. In practice that means:

• No cookies are set.
• No analytics, tracking or advertising service is embedded. Fonts are served by this site itself. The only third-party content is the bot check on the signup form, described in section 4.
• Personal data only arises if you submit the waitlist form, plus the server logs that any web server unavoidably produces.
• There is no automated decision-making or profiling.

3. Server Logs

When you open this website, the server processes the technical data your browser transmits: IP address, date and time of the request, requested URL, HTTP status code, amount of data transferred, referrer URL, and browser and operating system.

Purpose and legal basis: delivering the site, keeping it stable and secure, and defending against abuse. This rests on our legitimate interest in a secure and functioning service (Art. 6(1)(f) GDPR).

Retention: log files are deleted after 7 days.

Processor: the site runs on an external hosting provider (rented VPS/root server), which processes this data exclusively on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

4. Abuse Protection for the Form

Rate limit

To prevent mass submissions, the server counts how many form submissions arrive from one IP address within a minute. That counter lives in memory only, is discarded after at most one minute, and is never stored or shared. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Bot check (captcha)

The signup form is protected by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When the form is displayed, your browser loads the widget from Cloudflare, which processes your IP address, browser and device information and your interaction with the challenge in order to distinguish humans from bots. It generates a token that our server has Cloudflare confirm before a signup is accepted.

Turnstile is not used for analytics or advertising and does not build a profile across websites. Depending on configuration it may store information on your device that is strictly necessary to run the challenge.

Legal basis: our legitimate interest in protecting the form against automated abuse (Art. 6(1)(f) GDPR). Transfer to a third country: Cloudflare is based in the USA, so processing outside the EU/EEA is possible; the transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR). The Cloudflare privacy policy is available at www.cloudflare.com/privacypolicy/.

5. Waitlist

When you submit the form, we process:

• Name and email address — required, so we can reach you
• Location — required, so we can see which regions the interest comes from
• Discord username — optional
• Preferred plan and your choices on the two toggles (launch notification, newsletter)

Purpose: to find out whether there is enough interest in this service, and to tell you if it launches. Your details are not sold, not used for third-party advertising, and not combined into profiles.

Legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit the form. You can withdraw it at any time with effect for the future — an informal email is enough. Withdrawal does not affect the lawfulness of processing carried out before it.

Retention: until we have decided whether to launch and have told you about it, and at the latest until you withdraw consent or ask for deletion. The entry is deleted afterwards.

Recipient: submissions are forwarded to Discord (Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA) and held there in a channel accessible only to us, so that we can get back to you. Their privacy policy is available at discord.com/privacy.

Transfer to a third country: this may involve processing outside the EU/EEA, in particular in the USA. The transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR). Despite these safeguards, access by US authorities cannot be entirely ruled out.

Duplicate check: so that one address cannot join twice, our server keeps a one-way hash (SHA-256) of your email address. The hash cannot be turned back into an address; it is only compared against the hash of a new signup, and it is deleted together with your entry.

Is it required? No — neither by law nor by contract. Not submitting the form costs you nothing; you simply will not hear from us automatically if the service launches.

6. Newsletter

If you switch on the “Newsletter” toggle, we additionally use your email address for occasional updates on how the project is going. The legal basis is again your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, informally or via the unsubscribe note in every message.

7. No Cookies, No Tracking

This site sets no cookies of its own, uses no browser storage for analytics, and embeds no reach measurement, advertising networks, social media plugins, video players or streams. The only content loaded from a third-party domain is the bot check described in section 4, which is required to run the form and is not used to track you.

8. Data Security

We use appropriate technical and organisational measures to protect your data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Traffic to this site is encrypted in transit (HTTPS). No transmission over the internet is ever 100% secure.

9. Your Rights

Under the GDPR you have the right to:

• access your data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure, the “right to be forgotten” (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent at any time (Art. 7(3) GDPR)

To exercise any of these, an informal email to contact@onthepixel.net is enough.

10. Right to Lodge a Complaint

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR). The competent authority for us is:

11. Minors

Persons under the age of 16 should not submit personal data without the consent of a parent or guardian (Art. 8 GDPR). We do not knowingly collect data from children under 16. If we become aware that we have, we delete it promptly.

12. Changes to This Policy

We will update this policy whenever the processing changes — for instance if this interest check turns into an actual service. The version published here is the one that applies, and the “last updated” date above tells you when it last changed.

13. Contact

Questions about this policy, or about the data we hold on you: contact@onthepixel.net or via Discord: discord.com/invite/Dpx3eK9t3z.