Privacy policy

Controller

Private individual responsible for LitematicaWeb

Contact

[email protected]

• Your account data and posts, for as long as your account is active.
• If you delete your account, your profile, posts and files are deleted immediately. They may remain in backups for up to 30 days, after which they are overwritten.
• Verification codes expire after 15 minutes.
• If we suspend an account, we keep the data strictly needed to prevent it from registering again and to handle any claims, for the limitation period of legal actions.

We don't sell your data or use it for advertising. Only these providers are involved, as data processors:

• Hosting: Contabo GmbH (Alemania), where the platform runs and the database and files are stored.
• Resend (Resend, Inc., USA), to send verification and notice emails. It only receives your email and the message. The international transfer is covered by the EU-US Data Privacy Framework and standard contractual clauses.
• GitHub (raw.githubusercontent.com): your browser downloads the Minecraft textures and models for the 3D viewer from there, so GitHub receives your IP address when it does. They are cached in your browser so they aren't requested again.
• Discord (Discord Inc., USA) and Google (Google LLC, USA), only if you choose to log in with them. They send us your identifier, email and display name (basic «identify/email» and «openid/email/profile» scopes). Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can unlink these accounts in Settings and revoke access from your Discord or Google account.
• Discord also receives, in the team's private channels, internal moderation notices (usernames, post titles, report and suspension reasons) and technical error alerts.
• Cloudflare (Cloudflare, Inc., USA): protects and speeds up the site (CDN) and, through Turnstile, checks that you aren't a bot when signing up, logging in or recovering your account. It receives your IP and technical browser data; it doesn't use advertising cookies.

What you publish (username, profile and approved builds) is visible to any visitor. Your email is never shown.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected] from your account's email. We will reply within one month.

• You can correct your email, public name, photo and password from Settings.
• You can delete your account and all your content from Settings → Delete account.
• You can download a copy of your data in JSON format from Settings → Your data (portability).
• You can turn email notices on or off from Settings → Email notices.

If you believe we haven't handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country.

The platform isn't aimed at children under 14, who can't sign up (art. 7 LOPDGDD). If we detect an account belonging to a child under that age, we will delete it. If you are a parent or guardian and believe your child has signed up, write to us at [email protected].

We apply appropriate technical and organizational measures: encrypted connection (HTTPS), passwords hashed with bcrypt, optional two-step verification (mandatory for the moderation team), signed sessions that are revoked when an account is suspended, limits against brute-force attacks, validation of every uploaded file and restricted access to data by the moderation team, who can't see your email.

We only use the cookies and local storage needed for your session and preferences. Full details are in the Cookie policy.

If we make significant changes to this policy, we will let you know on LitematicaWeb or by email before they take effect.