Privacy Policy

This policy explains how we use your personal data when you play on Novara, visit this website or buy from our store. It follows the EU General Data Protection Regulation (GDPR) and, for players in the UK, the UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

The controller is Julia Zakrzewska trading as Novara, Józefa Sierakowskiego 3 ul. Warszawa Województwo mazowieckie 03-712, Poland (NIP ). Contact us about privacy at [email protected].

What we collect, why, and our legal basis

• Playing on the server: Minecraft username, UUID, IP address, chat messages, commands and in-game activity (server logs). We use it to run the server, prevent cheating and abuse, and enforce the rules. Basis: performing our contract with you (art. 6(1)(b)) and our legitimate interest in a safe, fair server (art. 6(1)(f)).
• Purchases: name, email, the Minecraft username you enter, what you bought, and your membership and payment status. We receive these from Whop and keep a record of every order (product, quantity, price, dates and status). For stackable items, you enter your Minecraft username on our website; we pass it to Whop with your order and use it to work out how many you have. If a partner website sent you to our checkout, it may give us your email address, which we keep with the order, and we tell that partner the result of your order (its reference, the product, quantity, price, status and, for stackable items, your Minecraft username) so it can complete its side. We never see your full card details. Basis: performing our contract (art. 6(1)(b)) and complying with tax and accounting law (art. 6(1)(c)).
• Withdrawals, complaints and support: whatever you send us, such as your name, email, order details and messages. Basis: complying with consumer law (art. 6(1)(c)) and our legitimate interest in handling and defending claims (art. 6(1)(f)).
• Website: our web server briefly processes your IP address and browser details to deliver pages and keep them secure. Basis: legitimate interest (art. 6(1)(f)).

Giving us your data is voluntary, but we cannot let you play or complete a purchase without the data needed for it. We do not make automated decisions about you that have legal or similarly significant effects.

Cookies

This website does not use advertising, analytics or tracking cookies. Fonts are served from our own server, not Google's. Whop's checkout may set cookies needed for payments, as described in Whop's own policy.

Who we share it with

• Whop, which runs our checkout and payments. Whop acts as an independent controller for payment data, under its own privacy policy.
• Our hosting and email providers, which process data for us under data processing agreements.
• Partner websites that sent you to our checkout, limited to the result of that order as described above.
• Discord, if you join our Discord server (under Discord's own policy).
• Authorities, where the law requires it.

We never sell your data.

Transfers outside the EEA / UK

Some providers, such as Whop and Discord, are based in the United States. Where data leaves the EEA or UK, it is protected by an adequacy decision (such as the EU-US Data Privacy Framework and the UK Extension) or by Standard Contractual Clauses. Contact us for a copy of the safeguards.

How long we keep it

• Server logs: up to 90 days, or longer if needed for an active ban or investigation.
• Purchase and accounting records: 5 years from the end of the calendar year in which the tax became due, as Polish tax law requires.
• Withdrawal and complaint records: up to 6 years, the limitation period for claims.
• Support messages: up to 2 years after the issue is closed.

Your rights

You can ask to access, correct or delete your data, restrict or object to how we use it, and receive a copy in a portable format. Where we rely on legitimate interests, you can object at any time. Email [email protected]. We will reply within one month.

You also have the right to complain to a data protection authority:

• Poland/EU: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or the authority in your EU country.
• UK: Information Commissioner's Office (ICO), ico.org.uk.

Children

Novara is open to players of all ages. We collect only what is needed to run the game. We do not rely on consent as a legal basis, and players under 18 need a parent or guardian's permission to buy anything. Parents can contact us to exercise their child's data rights.

Changes

We may update this policy. The date at the top shows when it last changed, and we will tell you about important changes.