Privacy Policy

Last updated: May 18, 2026

Silent Studio is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, on what legal basis, with whom we share it, and what your rights are, in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and the French Data Protection Act ("Loi Informatique et Libertés").

1. Data Controller

The data controller is:

Silent Studio, SAS, SIREN 999 511 785, 200 rue de la Croix Nivert, 75015 Paris, France. Contact: [email protected].

2. Data We Collect

a) Data collected when creating an Account

When you log in to the Site via Microsoft authentication, we collect:

• your email address (provided by Microsoft);
• your Minecraft username (pseudo);
• your Minecraft UUID;
• the date of creation and last login of your Account.

b) Data collected through the use of the Services

• the Content you publish (suggestions, comments);
• your in-game activity on the Server (connection time, basic statistics, in-game actions necessary for the operation of the Server);
• your IP address and technical data (browser type, operating system, language) when you connect, for security and logging purposes;
• a strictly necessary session cookie used by our authentication system (Auth.js) to keep you logged in. See our Cookie Policy.

c) Data collected if you contact us

• the content of your message and the contact information you provide (email, Discord username, etc.).

3. Purposes and Legal Bases

4. Data Retention

We retain your data only for as long as necessary for the purposes set out above:

• Account data: for the entire lifespan of your Account, then deleted or anonymized within 12 months after the closure of your Account or after 24 months of inactivity. [À CONFIRMER : durées à adapter à votre politique réelle]
• Server logs and connection logs: 12 months for security and technical purposes. [À CONFIRMER]
• User Content (suggestions, messages): until your Account is deleted, unless the Content remains relevant to the community (in which case it may be anonymized).
• Data retained for legal obligations: for the duration prescribed by applicable law (e.g. accounting records: 10 years).

5. Recipients of the Data

Your data may be shared with:

• Our authorized staff (administrators, moderators, developers) within Silent Studio, on a strict need-to-know basis;
• Our technical service providers (sub-processors):
  • XFLAREHOSTING LLC (United States): hosting of the Site and the Minecraft Server;
  • Microsoft Corporation (United States): authentication via Microsoft / Minecraft account;
  • Discord Inc. (United States): if you join our Discord server, your interactions are subject to Discord's privacy policy;
  • Mojang Synergies AB / Microsoft: in-game elements rely on the Minecraft authentication system;
• Public authorities, where legally required (judicial requisition, etc.).

We do not sell your personal data to third parties.

When the shop is launched, additional processors (notably Tebex for payment and order processing) will be added to this Privacy Policy.

6. International Data Transfers

Our hosting provider (XFLAREHOSTING LLC) is established in the United States, and other processors (Microsoft, Discord) also process data in the United States. As a result, your personal data is transferred outside the European Economic Area.

To ensure an adequate level of protection, we rely on appropriate safeguards in accordance with Chapter V of the GDPR, in particular:

• the EU-U.S. Data Privacy Framework, where the recipient is certified;
• and / or the Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914), supplemented by additional measures where necessary.

A copy of these safeguards may be obtained by writing to [email protected].

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): obtain a copy of the data we hold about you;
• Right to rectification (Art. 16): correct inaccurate or incomplete data;
• Right to erasure ("right to be forgotten", Art. 17): obtain the deletion of your data, subject to legal exceptions;
• Right to restriction of processing (Art. 18);
• Right to data portability (Art. 20);
• Right to object (Art. 21), in particular to processing based on legitimate interest;
• Right to withdraw consent at any time, where processing is based on consent;
• Right to define instructions regarding the fate of your data after your death (Article 85 of the French Data Protection Act).

To exercise these rights, please contact us at: [email protected]. We may request proof of identity if necessary to verify your request.

You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your country of residence.

8. Minors

The Services are intended for users aged 13 and over. We do not knowingly collect personal data from children under this age. In the European Union, processing the data of a minor under 15 based on consent requires the authorization of a person holding parental authority.

If you believe that a minor has provided us with personal data without the appropriate consent, please contact us so that we can delete this data.

9. Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no security measure is infallible, and we cannot guarantee absolute security.

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed in accordance with applicable regulations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified to you by appropriate means (notification on the Site, by email, etc.).

11. Contact

For any question relating to this Privacy Policy or to the processing of your personal data: [email protected].