Data Privacy Policy

Borna Smital (sole proprietorship)
operating as ManasMods
Übach-Palenberg, Germany
Email: contact@manasmods.com

This privacy policy explains how personal data is processed in connection with this website and related services (Tebex, Patreon, Discord, YouTube, Twitch).

This website is used exclusively for the presentation of ManasMods.
All personal data processed in connection with payments, purchases, or communication are handled exclusively through external, GDPR-compliant third-party providers.

Tebex Ltd.
All purchases, donations, and payments related to our Minecraft servers are processed through Tebex Ltd.
ManasMods does not process payment data directly.
Legal basis: Contract performance in accordance with Art. 6(1)(b) GDPR
Data transfers: governed by Standard Contractual Clauses (SCCs)
Data processed: name, email address, IP address, in-game username, transaction amount

Patreon Inc.
Memberships and support payments are handled through Patreon Inc.
Patreon acts as an independent data controller under the GDPR.
Legal basis: Contract performance in accordance with Art. 6(1)(b) GDPR
Agreement: Patreon Creator Privacy Promise (DPA)
Data processed: username, email address, membership tier, shipping address (if applicable)

PayPal Europe S.à r.l.
Payments to contractors are processed via PayPal, which acts as an independent data controller under the GDPR.
Data processing is carried out in accordance with PayPal’s privacy policy.

Discord, YouTube & Twitch
Community interactions and communication occur via these platforms.
They act as independent controllers and process data according to their own privacy policies:

• Discord Privacy Policy
   
• YouTube Privacy Policy
   
• Twitch Privacy Policy
   

This website uses only technically necessary cookies that are required for proper operation and functionality.
These include, for example:

• Session cookies to maintain navigation and security
   
• Cookies for storing language or display preferences
   
• Security cookies for protection against misuse (e.g. CSRF protection)
   

These cookies do not contain personal data that allow direct identification and are automatically deleted when the browser is closed.
Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG (legitimate interest in secure and functional operation of the website)
Purpose: ensuring technical functionality, stability, and system security
Retention period: only for the duration of the session

When visiting this website, certain technical information is automatically stored in so-called server log files.
The following data may be collected:

• IP address (possibly anonymized)
   
• Date and time of access
   
• Accessed pages or files
   
• Browser type and version
   
• Operating system used
   
• Referrer URL (previously visited page)
   

This information is used exclusively for technical monitoring, security, and troubleshooting.
No combination with other data or profiling takes place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security and fault prevention)
Retention period: Log files are automatically deleted after a short period (usually under 90 days).

No analytics, tracking, or marketing cookies are used.
Third-party tools such as Google Analytics or Meta Pixel are not implemented.

When connecting to our Minecraft servers, certain data are automatically processed for technical operation, security, and moderation purposes.
The following data may be collected:

• Minecraft username and UUID
   
• IP address and connection timestamps
   
• Chat messages and in-game interactions (for moderation and anti-cheat purposes)
   
• Playtime, statistics, inventory data, and progression
   

Purpose: ensuring server functionality, preventing abuse, maintaining fairness, and enforcing community rules.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure and fair multiplayer network).
Retention period: technical log data are automatically deleted or anonymized after a maximum of 90 days.
Disciplinary records (e.g., suspensions or bans) may be retained longer if necessary for the investigation of abuse cases.
Recipients: server hosting partners LilyPad (United Kingdom) and SideroCloud (India) under Standard Contractual Clauses pursuant to Art. 46 GDPR.

Personal data such as name, Discord tag, PayPal address, and billing information are processed for the administration of staff and contracted work.
Legal basis: contract performance (Art. 6(1)(b) GDPR) and legal recordkeeping obligations (Art. 6(1)(c) GDPR)
Storage: data are stored in Google Drive (Ireland) with encryption and two-factor authentication.
Retention: 10 years in accordance with § 147 AO and § 257 HGB.

Services such as Patreon, PayPal, and Discord may process data outside the EU (e.g., in the United States or the United Kingdom).
These transfers are carried out only under recognized safeguards, particularly Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

All accounts (Google, Patreon, Tebex, Discord) are protected by two-factor authentication (2FA).
Access to personal data is restricted exclusively to Borna Smital.
Data are only shared with third parties on a valid legal basis.
This website uses SSL/TLS encryption for secure data transmission.

Under the GDPR, you have the following rights:

• Access to your stored data (Art. 15)
   
• Rectification of incorrect data (Art. 16)
   
• Erasure (“right to be forgotten”, Art. 17)
   
• Restriction of processing (Art. 18)
   
• Data portability (Art. 20)
   
• Objection to processing (Art. 21)
   

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law (Art. 77 GDPR).

Supervisory Authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
P.O. Box 20 04 44
40102 Düsseldorf
Website: https://www.ldi.nrw.de

To exercise your rights, please contact: privacy@manasmods.com

Business and payment records are retained in accordance with legal requirements for up to 10 years and are then deleted or anonymized.

This privacy policy may be updated in response to legal, organizational, or technical changes.
The most current version is always available on this website.

Last updated: October 22, 2025