diff --git a/privacy-policy.md b/privacy-policy.md index 2fdf63f..c0eb511 100644 --- a/privacy-policy.md +++ b/privacy-policy.md @@ -1,6 +1,6 @@ # Privacy Policy -**Last updated:** 2026-08-20 +**Last updated:** 2026-08-31 This Privacy Policy explains how Majjo Duran collects, uses, stores, and protects data when you use our services. It works alongside our Terms of Service. @@ -16,6 +16,8 @@ This policy applies to user-facing services covered by our Terms of Service: - **Seerr** — media request management - **Bitwarden (Vault)** — password and credential management - **Slink** — image upload, storage, and link sharing +- **Speed Test** — browser-based connection testing +- **Email accounts** — personal email addresses provided to invited users - **Community game servers** — including Minecraft and Palworld Administrative and supporting infrastructure—including reverse proxies, security monitoring, access logging, analytics, media-management tools, dashboards, and AI-assisted administration—may process data behind these services but is not separately offered to users. @@ -31,6 +33,9 @@ Depending on the service you use, we may process: - **Request activity** — Seerr requests, requester, approval or denial state, requested media, timestamps, and history - **Vault and authentication metadata** — login and session events, known-device checks, failed authentication, and security events where logged; private vault contents and raw credentials are not used for analytics or AI training - **Slink account and upload data** — usernames, account settings, uploaded image files, filenames, image type and size, dimensions, share/privacy/password/expiration settings, upload and deletion times, storage usage, and access activity where logged +- **Speed test data** — test results (download, upload, ping, jitter), timestamp, and network or ISP classification; IP addresses are redacted and result identifiers are obfuscated before storage, and ISP lookup uses a local offline database rather than a third-party lookup +- **Email account data** — mailbox contents, message metadata such as senders, recipients, and subjects, spam and malware filtering, and mail server logs including IP addresses and login and delivery events +- **Donation and supporter records** — donation amounts, dates, currencies, platform usernames, name or email attached to a payment where the platform provides it, and any message included with a donation; used to document and deliver supporter perks - **Game-server data** — player names, UUIDs or platform/account identifiers, IP addresses, connection history, chat and command logs where enabled, gameplay and administrative events, moderation actions, inventories, character or player progress, server statistics, and contributions stored in shared world files - **Access and security logs** — IP, host, path, method, status code, timestamp, duration, routed service, user-agent, TLS/router metadata, and traffic volume - **Enforcement data** — warnings, bans, suspensions, blacklists, moderation actions, suspected cheating or exploitation, scanner/probing records, and incident notes @@ -50,6 +55,7 @@ Data may be used to: - Investigate rights complaints, incidents, and Terms of Service violations - Restore backups, troubleshoot corrupted game state, and maintain shared worlds - Provide support and communicate service changes +- Document donations and deliver supporter perks - Train or evaluate internal AI models as described in Section 4 ## 4. AI & Automated Processing @@ -86,6 +92,9 @@ We retain data for as long as reasonably necessary to operate, secure, moderate, - **Accounts and service activity** — retained while the account or service relationship remains active and longer where needed for functionality or support - **Slink uploads** — retained until deleted by the user, expired, removed by management, or deleted with the account, subject to backups and third-party copies +- **Speed test results** — retained to troubleshoot connectivity and monitor service performance +- **Email contents and logs** — retained while the mailbox is active; after a mailbox is deleted, contents may persist in rotated backups until the retention window expires +- **Donation and supporter records** — retained as required for accounting purposes and to document supporter perks and history - **Game worlds and player state** — retained as part of the active world or server history; individual player data may remain embedded in shared world files and backups - **Playback, request, and dashboard history** — may be retained indefinitely to provide history and service functionality - **Access and security logs** — retained as needed for diagnostics, bandwidth monitoring, abuse prevention, and security analysis @@ -96,7 +105,7 @@ Data connected to suspected abuse, compromise, illegal content, rights complaint ## 8. Data Storage & International Processing -Primary service storage and most sensitive operational data are hosted on private infrastructure in Stockholm, Sweden. +Primary service storage and most sensitive operational data are hosted on private infrastructure in Stockholm, Sweden. Email services are hosted on infrastructure operated by a provider within the European Union. Limited data may be processed outside Sweden or the European Union when you interact with third-party services or when infrastructure providers are required to deliver the service. In particular, public Slink images and links may be fetched or cached globally by Discord, browsers, recipients, and content-delivery networks. Game publishers, platform providers, email providers, DNS providers, and cloud AI providers may also process limited data in other jurisdictions under their own terms. @@ -106,6 +115,7 @@ We do not sell personal data or voluntarily share it with unrelated third partie - **Infrastructure, DNS, and hosting providers** — traffic metadata and technical information needed for routing, delivery, and security - **Email providers** — data required for email delivery and support communications +- **Payment and donation platforms** — such as Ko-fi and PayPal, which process donations under their own terms and privacy practices; we receive only what is needed to deliver supporter perks - **Discord** — messages and usernames used for support or community access, plus shared Slink images and link metadata when users post links to Discord - **Game and platform providers** — such as Microsoft, Mojang, Xbox, Pocketpair, and Steam when their games, accounts, networking, or software are used - **Cloud AI providers** — including Ollama Cloud and OpenAI; limited task data when cloud inference is used. These providers do not use service data to train their models. Where a provider offers no-log or zero-retention processing, that protection applies. @@ -140,6 +150,7 @@ Some data may not be immediately or fully removable, including: - Security, ban, moderation, and enforcement records required to prevent evasion or protect services - Player state or contributions embedded in shared game worlds where separation is not technically reasonable - Data in rotated backups until the retention window expires +- Donation and supporter records where retention is required for accounting purposes - Data required for an active investigation, legal obligation, or rights complaint - Copies downloaded, reposted, recorded, or cached by other users or third parties outside our control @@ -166,4 +177,4 @@ This policy is governed by Swedish law and applicable European Union law. Mandat For privacy questions, access requests, deletion requests, or concerns: - Discord: `@majjoduran` -- Email: `support@majjoduran.xyz` \ No newline at end of file +- Email: `support@majjoduran.xyz` diff --git a/terms-of-service.md b/terms-of-service.md index cc04f51..b910dd5 100644 --- a/terms-of-service.md +++ b/terms-of-service.md @@ -1,6 +1,6 @@ # Terms of Service -**Last updated:** 2026-08-20 +**Last updated:** 2026-08-31 By accessing or using any service operated by Majjo Duran and offered to users, you agree to these Terms of Service. If you do not agree, you must discontinue use of the services. @@ -18,6 +18,8 @@ These terms apply to services operated by Majjo Duran and offered to users, incl - **Seerr** — media request management - **Bitwarden (Vault)** — password and credential management - **Slink** — image upload, storage, and link sharing +- **Speed Test** — browser-based connection testing +- **Email accounts** — personal email addresses provided to invited users - **Community game servers** — including Minecraft and Palworld servers made available to invited or community users Administrative and supporting systems—including Gitea, Portainer, monitoring dashboards, media-management tools, reverse proxies, access logging, analytics, and AI-assisted administration—are not offered as user services. They may process data behind the covered services as described in the Privacy Policy. @@ -39,6 +41,7 @@ You agree not to: - Cheat, grief, exploit bugs, evade moderation, damage shared worlds, or intentionally degrade a game server or another player's experience - Impersonate management, another user, Mojang, Microsoft, Pocketpair, or another third party - Resell or commercially exploit access to the services +- Send spam, unsolicited bulk email, or harmful automated messaging from provided email accounts - Use VPN, proxy, Tor, or datacenter IP addresses where prohibited under Section 8 ## 4. Accounts & Credentials @@ -120,13 +123,23 @@ Access is provided for reasonable personal and community use. Management may app Repeated automated downloading, hotlinking, deliberate bandwidth amplification, excessive storage consumption, or other disproportionate use may be limited or suspended. Legitimate platform previews and caching of ordinary shared Slink links are not considered abuse by themselves. -## 12. Enforcement & Termination +## 12. Donations & Supporter Program + +The services are privately operated and not run for profit. Donations are voluntary gifts that fund the operation, maintenance, and expansion of the services — they are not payment for a service and do not create a contract, entitlement, or guarantee of availability, performance, or features. + +Supporter perks — such as Discord roles, access levels, or early features — are offered as a thank-you for donations and may change or be retired as the services evolve. Donating does not exempt anyone from these terms. + +Donations are generally non-refundable. If you believe a donation was charged in error, contact us using the details below. + +Donations are processed by third-party platforms (such as Ko-fi and PayPal) under their own terms and privacy practices. We receive only the information needed to deliver supporter perks. Supporter perks may be suspended or revoked if an account violates these terms or is removed for abuse. + +## 13. Enforcement & Termination Management may warn, mute, remove content, roll back progress, suspend, restrict, or terminate access for violations, security risks, disruption, rights complaints, or other valid operational reasons. Immediate action may be taken without warning when necessary to protect users, shared worlds, data, infrastructure, or legal compliance. Attempts to evade enforcement may result in longer or permanent restrictions. -## 13. Account Deletion & Data Removal +## 14. Account Deletion & Data Removal You may request deletion of identifiable data by contacting management and verifying your identity. Requests may take up to 30 days. @@ -139,21 +152,21 @@ Subject to technical and legal limits, deletion may include account data, Slink Deletion of data required to operate an account or enforce access restrictions may result in loss of access. -## 14. Age Requirement +## 15. Age Requirement Users must be at least 13 years old. A parent or legal guardian is responsible for any additional consent required for a minor under applicable law or third-party platform terms. Some media, user uploads, chat, and multiplayer interactions may not be suitable for all ages. Users and guardians are responsible for applying appropriate supervision and platform controls. -## 15. Changes to These Terms +## 16. Changes to These Terms We may update these terms periodically. Material changes will be announced by email, through the Discord server's announcement channel, or by another reasonable service notice. Unless a later date is stated, updated terms take effect upon publication. Continued use after notice constitutes acceptance. -## 16. Governing Law +## 17. Governing Law These terms are governed by Swedish law and applicable European Union law. Mandatory rights that cannot legally be waived remain unaffected. -## 17. Severability +## 18. Severability If a provision is unenforceable or invalid, it will be limited or removed only to the minimum extent necessary. The remaining provisions remain in effect. @@ -166,4 +179,4 @@ For questions, rights complaints, takedown requests, or other concerns: - Discord: `@majjoduran` - Email: `support@majjoduran.xyz` -**Minecraft disclaimer:** NOT AN OFFICIAL MINECRAFT SERVICE. NOT APPROVED BY OR ASSOCIATED WITH MOJANG OR MICROSOFT. \ No newline at end of file +**Minecraft disclaimer:** NOT AN OFFICIAL MINECRAFT SERVICE. NOT APPROVED BY OR ASSOCIATED WITH MOJANG OR MICROSOFT.