NoRisk Client Blog

Privacy Policy

Who We Are

Your Rights as a Data Subject

  • You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, pursuant to Art. 15 GDPR.
  • Pursuant to Art. 16 GDPR, you have the right to obtain without undue delay the rectification of inaccurate or incomplete personal data concerning you.
  • If one of the reasons set out in Art. 17 GDPR applies, you have the right to have the personal data concerning you deleted without undue delay.
  • If the requirements of Art. 18 GDPR are met, you have the right to obtain restriction of processing of your personal data.
  • Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data relating to you infringes the GDPR.

Withdrawal of Consent

You have the right to withdraw any consent you have given us to process your personal data pursuant to Art. 6(1)(a) GDPR at any time. The legality of the data processing carried out based on the consent until the time of withdrawal remains unaffected. You can declare your withdrawal using the contact details provided above.

Obligation to Provide Data and Consequences of Non-Provision

The provision of personal data is neither legally nor contractually required and is not necessary for concluding a contract, and is generally voluntary. However, the provision of certain personal data is necessary in order to use the client. If you do not provide this data, the software cannot be used.

Collected Data

Game Data, Moderation Data:

By using our client, game-related data depending on your use is generated, assigned to your account, and stored. The processing of this data is necessary to provide you with a smooth and functional gaming experience. The data generated through use includes, among other things:

  • Date and time
  • Minecraft UUID and username
  • Discord ID
  • Cosmetics, skins, friends, blocked players
  • Sent reports, received punishments
  • Game statistics, achievements, experience points, and coins
  • Chat-Data

The processing and storage of this data is necessary to track game progress and ensure the safety and enjoyment of other users. For this purpose, the above-mentioned data is linked to your Minecraft account. Some of this data may be publicly accessible to other players (e.g., in the form of leaderboards); in some cases, this can be disabled in the in-game settings.

The legal basis for processing is the consent given before the start of use pursuant to Art. 6(1)(a) GDPR.

The data mentioned above is stored from the beginning of usage and remains stored as long as active use of the client by the user can be assumed. You can request the deletion of your stored data at any time; however, this will result in a reset of your game progress or, if applicable, exclusion from potential future use of our client. The only exception is moderation data such as penalties imposed on you. These are stored pursuant to Art. 6(1)(f) GDPR based on our legitimate interest, which, after weighing interests, outweighs in favor of providing a safe gaming environment for other users.

Chat-Data:

When you use the chat features of our client, your Chat-Messages are stored on our servers. These servers are hosted by Hetzner Online GmbH in Germany. The chat messages are stored in an unencrypted form. The purpose of this storage is to enable communication between players and to ensure the smooth operation of the chat functionality.

The legal basis for processing is your consent to the use of the chat feature, given prior to its use, in accordance with Article 6(1)(a) of the GDPR.

Chat data is stored for as long as active use of the client by the user can be assumed. You may request the deletion of your chat history.

Content moderation data:

To ensure a safe and appropriate gaming environment, we use automated moderation services. This applies in particular to:

  • Perspective AI: We use Google’s Perspective API for content moderation of public texts, including the “Additional Nametags.” Messages are transmitted to Perspective AI to identify potentially offensive, toxic, or inappropriate content. The results of this analysis are used to enforce our community guidelines.
  • OpenAI Moderation: To review visual content—particularly in connection with “McReals” (or similar features that allow sharing images or media)—we use the OpenAI Moderation API . This API helps us detect and filter content that may be classified as “Not Safe For Work” (NSFW).

The processing of this data is based on our legitimate interest under Article 6(1)(f) of the GDPR in creating a safe, respectful, and rule-compliant environment for all users and in enforcing our terms of use. The data transmitted to these third-party providers is limited to the minimum necessary for moderation purposes. We do not retain this data beyond the moderation process unless it is required to enforce sanctions or maintain security.

Processing by Third-Party Providers

To provide our services, we use third-party providers, on whose systems data processing takes place in accordance with the data protection regulations of the respective provider. The data processed mainly includes traffic data (see section "Server Logfiles"). Other data types are stored on third-party systems, but there is no direct access to this data by the third parties. The legal basis for the processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR, which, after weighing interests, lies in providing a functional, stable, and secure client. We use the services of the following providers:

Note on Consent to Data Processing

By giving your consent to data processing at the beginning of your use of the software, you agree to this privacy policy and declare that you are at least 16 years old (or meet the age requirement applicable in your country under Art. 8 GDPR), or that consent has been given by a holder of parental responsibility.

en_USEnglish
de_DEGerman en_USEnglish