Privacy Policy

Last updated: 26 September 2026

Introduction

Thumpstone SMP (“Thumpstone”, “we”, “our”, or “us”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains what personal information we collect and process when you use the Thumpstone website, Minecraft server, Discord community, and related services; why we use it; how long we keep it; who it may be shared with; and the rights you have in relation to it.

For the purposes of UK data protection law, Thumpstone is responsible for determining how and why personal information covered by this policy is processed.

Information We Collect

When you use Thumpstone SMP and its related services, we may collect and process information necessary to operate, secure, moderate, and improve those services.

This may include:

Minecraft account information, such as your Minecraft username, UUID, and information associated with your activity on the server.
Technical and connection information, such as your IP address, connection times, login history, client or protocol information, and other technical information recorded in server logs.
Gameplay information, including commands, chat messages, private messages sent through server systems, player interactions, transactions, claims, deaths, progression, and other activity recorded by the server or its plugins.
Discord information, such as your Discord username and user ID where you link your Minecraft and Discord accounts or interact with our Discord services.
Moderation and security information, including player reports, anti-cheat or security alerts, warnings, mutes, kicks, bans, appeals, staff notes, and evidence relating to suspected rule violations or abuse.
Support and communications information, including information you provide when contacting us by email, Discord, through the website, or through other available support channels.
Email address, where you voluntarily provide it to receive updates, contact us, or use another service that requires an email address.

Some information is collected automatically when you connect to or use the Minecraft server. For example, the server and its plugins may record your username, UUID, IP address, connection activity, commands, chat activity, and gameplay events.

Information may also be generated by plugins and other systems used to provide features such as land management, economy, moderation, anti-cheat, server statistics, voting, Discord integration, backups, and security.

We aim to collect and retain only information that is reasonably necessary for the operation and protection of Thumpstone SMP and its community.

How We Use Your Information

We may use personal information to:

Operate and administer the Minecraft server, website, Discord integrations, and related services.
Identify and authenticate players and maintain player accounts, permissions, progression, economy data, claims, and other server features.
Maintain server security, prevent cheating, detect abuse, investigate suspicious activity, and protect the server and its players.
Enforce our rules and investigate player reports, disputes, ban evasion, cheating, harassment, scams, exploits, and other suspected misconduct.
Maintain moderation records so that staff can make informed and consistent moderation decisions.
Provide support and respond to reports, appeals, questions, and other communications.
Diagnose technical problems and monitor server reliability and performance.
Maintain backups and recover the server or its data following technical problems or data loss.
Integrate supported Minecraft and Discord functionality where players choose or are required to link those services.
Produce server statistics, rankings, leaderboards, or similar community features.
Send newsletters or community updates where you have chosen to receive them.
Comply with applicable legal obligations and respond to lawful requests.

We do not sell personal information to advertisers or data brokers.

Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the purpose, we may rely on:

Legitimate interests: where processing is reasonably necessary to operate, administer, secure, moderate, and protect Thumpstone SMP and its community. This includes maintaining server logs, preventing abuse, investigating rule violations, maintaining moderation records, and protecting our systems and users.

When relying on legitimate interests, we consider those interests against the rights and interests of the people whose information we process.

Consent: where you have made a genuine choice to provide information or receive an optional service, such as subscribing to marketing or newsletter communications. Where we rely on consent, you may withdraw it at any time.

Legal obligation: where processing is necessary for us to comply with an applicable legal requirement.

In some circumstances another lawful basis may apply where permitted by data protection law.

Chat, Commands and Private Messages

Players should be aware that communications made through the Minecraft server may be logged.

This may include public chat, commands, and private messages sent using server-provided messaging systems. Authorised staff may access relevant records where reasonably necessary for moderation, security, investigating reports, resolving disputes, or maintaining the server.

You should therefore not use Minecraft chat or server messaging systems to communicate highly sensitive or confidential personal information.

Discord

Thumpstone operates a Discord community and uses integrations between Discord and the Minecraft server.

Where these services are used, information such as your Minecraft username or UUID and Discord username or user ID may be associated with each other. Messages or events may also be transmitted between Minecraft and Discord where a server feature is designed to do so.

Discord independently processes information according to its own privacy policies when you use its services.

Automated Systems and Moderation

Thumpstone uses automated systems and plugins to assist with server security, anti-cheat, spam prevention, moderation, and abuse detection.

These systems may automatically identify or flag activity for review and, in some circumstances, may automatically take limited protective or enforcement actions.

Significant moderation decisions may also involve review by authorised staff. If you believe an automated system or moderation action has made an error, you may contact us or use our available appeal process.

Who We Share Information With

We do not sell your personal information.

Personal information may be processed by third parties where this is necessary to operate Thumpstone or provide a particular service. These may include:

Minecraft server hosting and infrastructure providers.
Website and domain hosting providers.
Email and communications providers.
Email newsletter providers, where applicable.
Discord and services used to integrate Discord with the Minecraft server.
Voting, server-list, or related services where you choose to interact with them.
Backup, security, monitoring, or technical service providers.

We may also disclose information where reasonably necessary to comply with a legal obligation, respond to a valid legal request, establish or defend legal rights, or protect the safety and security of Thumpstone, its users, or others.

Third-party services may process information under their own privacy policies as independent controllers, or on our behalf as processors, depending on the service and circumstances.

International Data Transfers

Some third-party services used by Thumpstone may process or store personal information outside the United Kingdom.

Where UK data protection law applies to an international transfer for which we are responsible, we take appropriate steps to ensure that the transfer is permitted under applicable data protection law. This may include relying on UK adequacy regulations or appropriate contractual or other safeguards.

You may contact us if you would like further information about safeguards relevant to your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it is processed, taking into account the nature of the information, the operational needs of the server, security and moderation requirements, backup cycles, and any applicable legal obligations.

Different categories of information may therefore be retained for different periods.

For example:

Routine technical and server logs may be retained while they remain useful for security, troubleshooting, administration, or abuse investigation.
Gameplay and account information may be retained for as long as it is required to maintain the server and relevant player records.
Moderation records may be retained after a player leaves or is banned where they remain reasonably necessary for enforcing sanctions, identifying ban evasion, handling appeals, or maintaining the integrity and safety of the community.
Support requests and correspondence may be retained for as long as reasonably necessary to resolve the matter and maintain an appropriate record of it.
Backup copies may temporarily contain information that has subsequently been removed from active systems and will be overwritten or deleted according to the relevant backup cycle.
Information used for optional email communications may be retained until you unsubscribe or it is no longer required for that purpose.

We periodically review whether retained information is still required.

Your Data Protection Rights

Depending on the circumstances and the lawful basis on which your information is processed, UK data protection law may give you rights including:

The right to request access to personal information we hold about you.
The right to ask us to correct inaccurate or incomplete information.
The right to ask us to erase personal information in certain circumstances.
The right to ask us to restrict processing in certain circumstances.
The right to object to certain processing.
The right to data portability in certain circumstances.
The right to withdraw consent at any time where we rely on consent.

These rights are not absolute and may not apply in every situation. For example, we may have a legitimate or legal reason to retain certain moderation or security information even after an erasure request.

We may need to ask for information to verify your identity before fulfilling a request.

Your Right to Object

Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing in certain circumstances.

If you wish to object, please contact us at the address below and explain which processing you are concerned about.

Email Communications

Where you have opted to receive newsletters or other optional email updates from us, you can unsubscribe at any time using the unsubscribe mechanism provided in those communications.

Withdrawing from optional communications does not affect service, security, moderation, or other processing that is carried out on a different lawful basis.

Age Requirement

Thumpstone SMP is primarily intended for players aged 18 or over.

New players are required to confirm that they are at least 18 years old before joining the server. We rely on this self-declaration and do not routinely collect identity documents or other proof of age for age-verification purposes.

The 18+ requirement was introduced after Thumpstone SMP launched. Some existing members who joined before this requirement was introduced were permitted to remain members of the community despite being under 18.

We therefore recognise that we may process personal information relating to a limited number of under-18 legacy members. We take this into account when determining how their personal information is processed and aim to collect and use only the information reasonably necessary to operate, secure, and moderate the server and community.

If a new player falsely declares that they are 18 or over and we subsequently become aware that they are under 18, we may restrict or terminate their access in accordance with our rules. Where appropriate, we may also delete personal information associated with that player, subject to information that we reasonably need to retain for security, moderation, legal, or other legitimate purposes.

If you are a parent or guardian with a concern about personal information relating to an under-18 member, please contact us at admin@thumpstone.com.

Cookies and Website Technologies

The Thumpstone website may use cookies or similar technologies that are necessary for the website to function.

Where we use non-essential cookies or similar technologies that require consent under applicable law, we will provide appropriate information and request consent where required.

Third-party content or services embedded in or linked from our website may operate according to their own privacy and cookie policies.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no internet service or data-storage system can be guaranteed to be completely secure.

Third-Party Services

Thumpstone uses or links to third-party services including Minecraft/Microsoft and Discord.

Those services are operated independently and may collect and process information under their own privacy policies. This Privacy Policy describes processing for which Thumpstone is responsible and does not replace the privacy policies of third-party services.

Contact Us

If you have questions about this Privacy Policy, how your personal information is handled, or wish to exercise a data protection right, please contact:

admin@thumpstone.com

Please provide enough information for us to identify the relevant account or records and understand your request, but do not send passwords or other unnecessary sensitive information.

Complaints

If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Information about making a complaint is available from the ICO at ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time, for example where our services, plugins, infrastructure, or legal obligations change.

The current version will be published on this page and the “Last updated” date will be revised when material changes are made.