Privacy Policy
Last updated: March 2025
1. Data Controller
CreateModServers.com is the data controller for the personal data processed through this website. We are based in Sweden and subject to the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
2. Data We Collect
We collect the following types of personal data:
Server Submissions
- Email address (for communication about your submission)
- Discord username (optional, for communication)
- IP address (for abuse prevention)
- Server details you provide (name, description, address, etc.)
Voting
- Minecraft username (to verify you are online on the server)
- IP address (to prevent vote manipulation)
Reports
- IP address (for abuse prevention)
- Report details you provide
Contact Form
- Name, email address, and message content
Analytics (with consent)
- Usage data via Google Analytics (page views, device type, approximate location)
- This data is only collected if you accept cookies via the consent banner
3. Legal Bases for Processing
We process personal data under the following legal bases:
- Legitimate interest (Art. 6(1)(f) GDPR): Processing IP addresses for abuse prevention and site security; operating the server directory service.
- Consent (Art. 6(1)(a) GDPR): Google Analytics cookies are only loaded after you explicitly accept them via the cookie consent banner. You can withdraw consent at any time by clearing your cookies.
- Contract performance (Art. 6(1)(b) GDPR): Processing data necessary to provide the service you requested (e.g., submitting a server listing).
4. Data Retention
- Server submission data is retained for as long as the server listing is active, plus up to 12 months after removal.
- Vote records are retained for the duration of the voting period (typically 24 hours for duplicate prevention), with aggregated counts retained indefinitely.
- Report data is retained for up to 12 months after resolution.
- Contact form messages are retained for up to 12 months.
- IP addresses used for abuse prevention are retained for up to 12 months.
- Google Analytics data retention is configured according to Google's standard retention policies.
5. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can request correction of inaccurate data.
- Right to erasure: You can request deletion of your personal data ("right to be forgotten").
- Right to data portability: You can request your data in a machine-readable format.
- Right to restriction: You can request that we limit how we process your data.
- Right to object: You can object to processing based on legitimate interest.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at [email protected].
6. Cookies
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| cookie_consent | Stores your cookie consent preference | 1 year |
| _ga, _ga_* | Google Analytics (only with consent) | Up to 2 years |
7. Third Parties
We share data with the following third parties:
- Google Analytics: Website usage analytics (only with your consent). Google may transfer data outside the EU/EEA. For more information, see Google's Privacy Policy.
- SMTP email provider: To deliver contact form messages and notifications.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure server infrastructure, and access controls.
9. Right to Complain
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. In Sweden, the supervisory authority is:
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Contact
For any questions about this Privacy Policy or to exercise your data rights, please contact us at:
- Privacy inquiries: [email protected]
- General inquiries: [email protected]
- Or via our contact page