Privacy

The controller within the meaning of the DSGVO is the provider named in the imprint . Please address requests regarding your rights to support@jexcellence.de.

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Lodging a complaint with a supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG) — in Lower Saxony, e.g. the LfD Niedersachsen

With a user account you can export your data yourself in the account settings (Art. 20 DSGVO, machine-readable as JSON) and delete your account yourself (Art. 17 DSGVO). We handle all other requests, also without a user account, upon email request to support@jexcellence.de . We respond within the one-month period under Art. 12 Abs. 3 DSGVO; for complex requests the period may be extended by a further two months, of which we will inform you.

Hosting is provided by Hetzner Online GmbH in Germany (EU). A data processing agreement under Art. 28 DSGVO is in place. On every request, technically necessary data is processed (IP address, user agent, timestamp, requested URL) — legal basis: legitimate interest in stable operation. Server logs are deleted or anonymised after 14 days at the latest.

You can create a user account on the website. For this we process your email address, your password (stored only as a hash) and, optionally, your Minecraft username. To confirm your email address and to reset your password, we send you a link by email. If you sign in via Discord, Google or Microsoft, we receive only your email address confirmed there from that provider; no password is created in that case. If you link a Minecraft account, we look up the associated Minecraft UUID via Mojang's public interface and store the username and UUID. We also store whether your email address is confirmed, the time of your last login and the website language you last used. After login we set the session cookie jx_session (see section 9). Legal basis: Art. 6 (1)(b) DSGVO. We store the account data until your account is deleted.

To process your purchase, we use Stripe (Stripe Payments Europe Ltd., Ireland) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). With Stripe, you are redirected to the checkout page hosted by Stripe to pay. With PayPal, you are either redirected to PayPal, or PayPal's payment buttons are shown directly on our checkout page. For this, your browser loads PayPal's JavaScript SDK from PayPal's servers (www.paypal.com); PayPal thereby receives your IP address and technical browser data. The SDK is only loaded once you choose PayPal as the payment method at checkout and have filled in the required fields. During the purchase process we transmit the invoice amount, the order reference and your Minecraft username (as a delivery note in the item description) to the respective provider, and, for Stripe and PayPal subscriptions, also your email address. You enter card/account details directly with the provider, and they are not accessible to us. Via webhooks, the providers send us the status of payments and subscriptions so that we can deliver orders and manage monthly passes. Both providers are certified under the EU-US Data Privacy Framework; standard contractual clauses under Art. 46 Abs. 2 lit. c DSGVO are additionally agreed.

So that a purchase can be delivered in-game, we store your Minecraft username and the link to your order. The Minecraft server queries these entitlements via an HMAC-SHA256-signed interface; replay protection is 5 minutes. Legal basis: Art. 6 (1)(b) DSGVO (contract). During ongoing gameplay, the server plugin additionally processes in-game activities (blocks mined, phase progress, battle pass tier, vote streaks, island memberships, bank balances) to fulfil the game offering. So that you can choose which profile (island) a purchase is delivered to, the Minecraft server also sends us your profile list: profile ID, slot, mode (Normal, Ironman, Season) and the profile name you set. We keep only the latest list; older lists are overwritten. Without login the profile picker shows only slot and mode; the profile name is shown only to the logged-in account linked to that Minecraft account. Legal basis: Art. 6 (1)(b) DSGVO (contract).

On first joining the server each season, you receive a written book in-game with the season participation terms. If you accept them (command /season accept), your game statistics are included in the season leaderboard as your season score and, upon success, processed as part of the top-5 payout. If you decline (/season decline), you do not appear in the leaderboard and are not payout-eligible — regular gameplay is not affected by this. The choice can be revised at any time via /season accept or /season decline (Art. 7 Abs. 3 DSGVO withdrawal). We store a timestamp and a hash of the specific book version accepted (Art. 7 Abs. 1 DSGVO burden of proof) in the table ob_season_participation.

From Season 4 there are only in-game prizes and shop vouchers; we process no additional data for them. For the PayPal payout of the Season 3 cash prizes, for places 1 and 2 we additionally process the PayPal recipient email you provide and, where applicable, proof of age under § 107 BGB (minors). The PayPal payout is carried out manually by the server team via the PayPal Payouts API. Legal basis: Art. 6 (1)(b) DSGVO (participation terms). We delete verification data after the payout is completed; we retain tax records for up to 10 years in accordance with § 147 AO.

We use exclusively “strictly necessary” storage accesses without consent. We do not use analytics or tracking cookies. In detail:

• Cookie jx_session: session cookie after login (HttpOnly), valid for 24 hours, deleted on logout.
• Local storage jexone-cart: the contents of your shopping cart, so that it is kept for your next page visit.
• Local storage jexone-checkout-chain and jexone-combined-order: the state of a payment in progress, so that the order can be completed after you return from the payment provider; removed on completion and no longer used after 45 minutes.
• Local storage mb_ob_clicks: the count of the click block on the home page; only stored once you click the block.

The website does not embed third-party content, with one exception: PayPal's JavaScript SDK, which is only loaded if you choose PayPal at checkout (see section 5).

Our Discord server is operated by Discord Inc. (USA). On our website we merely link to the invite link (Discord); no Discord widget is embedded. When accessing Discord, your IP address, among other data, is transmitted to Discord; Discord is DPF-certified.

If you contact us by email, we process your details to handle the request (Art. 6 (1)(b) DSGVO, or (1)(f) for general questions). We delete requests as soon as they are no longer necessary, at the latest after 24 months, provided no statutory retention periods stand in the way.

Minors may only place paid orders with the consent of their parents/guardians (§ 107 BGB). At checkout you expressly confirm that you are at least 18 years old or have the consent of your parents/guardians. Where we process data on the basis of your consent (section 7), persons under 16 require the consent of their parents/guardians (Art. 8 DSGVO). Participation in the season payouts is additionally subject to a minimum age of 18 — minors require the consent of their parents/guardians (§ 107 BGB).

We update this policy when technical or legal conditions change. You can always find the current version at this URL.