Privacy Policy

Effective Date: January 1, 2025 | Last Updated: January 1, 2025

Summary (TL;DR)

What we collect: Account data (Discord/Email), uploaded texture packs, anonymized statistics
Discord Bot: Files are processed temporarily and immediately deleted - we store nothing
We never: Sell your data, share with advertisers, or use data brokers
Your rights: Access, correct, or delete your account data anytime
Statistics: Download/view counts are collected anonymously and cannot be linked to individual users
Data location: European Union (Germany)
Contact: info@texturepack.be

1. Introduction and Data Controller Information

This Privacy Policy applies to the Texturepack.BE website ("Website") and the Texturepack.BE Discord Bot ("Bot"), collectively referred to as our "Services." We are committed to protecting your privacy and ensuring transparent data processing practices in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection regulations.

Data Controller:

Texturepack.BE

Christoph Thiel

Brodberg 11, 14532 Kleinmachnow, Germany

Email: info@texturepack.be

Data Protection Contact: info@texturepack.be

2. Data We Collect

2.1 Website Data Collection

Account Registration Data:

Discord OAuth Users: Discord username, profile picture URL, Discord User ID, and email address (if authorized)
Email Registration Users: Email address, chosen username, and password (encrypted)
Profile Information: Display name, optional social media channel links (user-provided), join date

Content Data:

Uploaded texture packs (edition porting packs, self-created packs, mix packs)
Pack descriptions, titles, and metadata
Upload timestamps and modification dates

Anonymized Statistics:

Download counts per texture pack (not linked to individual users)
View counts per texture pack (not linked to individual users)
These statistics cannot be traced back to specific users

Technical Data:

Session cookies and authentication tokens
Error logs and performance data

2.2 Discord Bot Data Processing

Temporary Processing Data (Not Stored):

Files submitted for Java edition porting (processed immediately, delivered, then deleted)
Images for sky/heaven texture generation (processed immediately, delivered, then deleted)
Command usage patterns (aggregated anonymously)
Discord User ID and Server ID for command execution

Database Query Data:

Search queries to texture pack database (read-only)
Query timestamps and response metrics
No personal data retained from queries

3. Legal Basis and Purposes of Processing

3.1 Legitimate Interests (Article 6(1)(f) GDPR)

Service Provision: Operating the website and Discord bot functionality
Security: Protecting against abuse, fraud, and unauthorized access
Improvement: Analyzing aggregated usage patterns to enhance services
Support: Responding to user inquiries and technical issues

3.2 Consent (Article 6(1)(a) GDPR)

Discord OAuth: Your explicit consent when authorizing Discord access
Marketing Communications: Optional newsletter subscriptions
Analytics Cookies: Non-essential cookies for usage analysis
Social Media Links: Display of user-provided channel links on profiles

3.3 Contract Performance (Article 6(1)(b) GDPR)

User Agreement: Fulfilling our terms of service obligations
Content Hosting: Storing and serving your uploaded texture packs
Account Management: Maintaining your user account and preferences

3.4 Legal Obligations (Article 6(1)(c) GDPR)

Compliance: Meeting regulatory requirements
Law Enforcement: Responding to valid legal requests
Rights Requests: Processing data subject access requests

4. Data Processing Distinctions

4.1 Permanent Storage (Website Operations)

What We Store:

User accounts and authentication credentials
Uploaded texture packs and associated metadata
Profile information and social media links
Anonymized download/view statistics (not linked to users)

Retention Period:

Account data: Until account deletion request
Uploaded content: Until user deletion or account termination
Anonymized statistics: Stored indefinitely (no personal data)
Security logs: Maximum 12 months

4.2 Temporary Processing (Discord Bot)

What We Process (Never Store):

Java Edition Porting: Files processed in memory, converted, and immediately delivered
Sky Texture Generation: Images processed algorithmically and immediately delivered
Command Logs: Basic command metadata retained for maximum 30 days for debugging

Key Distinction: Discord bot operations involve zero file storage. All processing occurs in temporary memory with immediate delivery and deletion.

5. International Data Transfers

5.1 Data Locations

Primary Servers: European Union (Germany)
Backup Systems: European Union
CDN Services: Global distribution for texture pack downloads (Cloudflare)

5.2 Transfer Safeguards

We ensure appropriate safeguards for international data transfers through:

EU-US Transfers: Standard Contractual Clauses approved by the European Commission
Other Transfers: Adequacy decisions or appropriate safeguards per Article 46 GDPR
Encryption: All data transfers use TLS 1.3 encryption

6. Your Privacy Rights

6.1 Universal Rights (All Users)

Right to Access: Request a copy of your account data (profile, uploaded packs)
Right to Correction: Update or correct inaccurate personal information
Right to Deletion: Request deletion of your account and associated data
Right to Data Portability: Receive your account data in JSON/CSV format
Right to Object: Opt-out of certain processing activities

Note: Download and view statistics are collected anonymously and cannot be attributed to individual users. Therefore, we cannot provide user-specific usage data as it does not exist.

6.2 European Union Rights (GDPR)

Right to Restriction: Request temporary suspension of data processing
Right to Withdraw Consent: Revoke previously given consent
Automated Decision-Making: We do not use automated decision-making that produces legal effects
Supervisory Authority: Lodge complaints with your local data protection authority

6.3 California Rights (CCPA)

Right to Know: Request information about data collection
Right to Delete: Request deletion of personal information
Right to Correct: Request correction of inaccurate information
Right to Non-Discrimination: Exercise rights without discrimination
Right to Opt-Out: We do not sell personal information

6.4 Exercising Your Rights

Contact: info@texturepack.be

Account Dashboard: Self-service options for common requests

Response Timeline: We respond to all requests within 30 days

Verification: We may request additional information to verify your identity

7. Data Security and Retention

7.1 Security Measures

Technical Safeguards:

Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
Access Controls: Role-based permissions and multi-factor authentication
Infrastructure: Secure cloud hosting with DDoS protection
Monitoring: Security monitoring and intrusion detection

Organizational Measures:

Data processing agreements with all third-party processors
Incident response procedures with 72-hour breach notification
Regular security assessments

7.2 Data Retention Schedules

Data Category	Retention Period	Deletion Method
User Accounts	Until deletion request	Complete removal
Uploaded Packs	While account active	Immediate deletion
Anonymized Stats	Indefinite	Already anonymous
Discord Bot Logs	30 days	Automatic purge
Security Logs	12 months	Automatic deletion
Email Communications	6 months	Automatic archival

7.3 Data Breach Procedures

In the event of a personal data breach, we will:

Notify affected users within 72 hours when required
Inform relevant supervisory authorities
Document the breach and remediation steps
Implement measures to prevent recurrence

8. Cookie Policy

8.1 Cookie Categories

Strictly Necessary Cookies:

Authentication tokens for logged-in users
CSRF protection tokens
Session management cookies
Discord OAuth state parameters

Functional Cookies:

Language and region preferences
Theme and display settings
Recently viewed packs
Upload preferences

Analytics Cookies (With Consent):

Usage pattern analysis
Performance monitoring
Error tracking

8.2 Cookie Management

Consent: We request consent for non-essential cookies via our cookie banner.

Control Options:

Browser settings to block or delete cookies
Cookie preference center on our website
Opt-out links for analytics services

9. Third-Party Services and Data Sharing

9.1 Service Providers

Discord API:

Purpose: OAuth authentication and bot functionality
Data Shared: User ID, username, authorized scopes
Restrictions: No selling or commercialization of Discord data

Cloud Infrastructure (Vercel, Cloudflare R2):

Purpose: Hosting and content delivery
Data Shared: All service data (encrypted)
Location: European Union (Germany)

9.2 Data Sharing Principles

We Never:

Sell your personal data to third parties
Share data with advertising networks
Provide data to data brokers
Use your data for unrelated purposes

We May Share When:

You explicitly consent
Required by law or legal process
Necessary to protect rights and safety
In connection with business transfers (with notice)

10. User-Generated Content

10.1 Content Ownership

You retain all rights to texture packs you upload. By uploading, you grant us a license to host, display, and distribute your content through our services.

10.2 Content Guidelines

No automated content scanning or moderation
Community reporting for guideline violations
Manual review of reported content only
Respect for creator rights and intellectual property

10.3 Content Removal

Delete your uploads anytime through your account
Removed content deleted from active servers within 24 hours
Backup retention for maximum 30 days
CDN cache clearance within 7 days

11. Age Restrictions

11.1 Minimum Age Requirements

In compliance with Discord's Terms of Service and applicable laws:

Minimum Age: 13 years old globally
EU Users: 16 years old (or lower if permitted by member state)
Parental Consent: Required for users under applicable age of consent

11.2 Underage User Policy

We do not knowingly collect data from users under 13. If we discover underage user data:

Immediate account suspension
Complete data deletion within 48 hours
Notification to Discord if applicable
Documentation of deletion for compliance

12. Data Protection for Specific Jurisdictions

12.1 European Union (GDPR)

Legal Basis: Documented for all processing activities
Privacy by Design: Data minimization and purpose limitation
DPO Contact: info@texturepack.be
Supervisory Authority: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg)

12.2 California (CCPA/CPRA)

Notice at Collection: Provided before data gathering
Financial Incentives: None offered for data provision
Shine the Light: Not applicable
Do Not Track: Honored through Global Privacy Control

13. Changes to This Policy

13.1 Update Procedures

Annual Review: Comprehensive policy review every 12 months
Material Changes: 30-day advance notice via email and website banner
Minor Updates: Posted immediately with updated timestamp
Archive: Previous versions available upon request

13.2 Notification Methods

Email to registered users
Website banner announcement
Discord bot notification
Account dashboard alert

14. Contact Information

Privacy Inquiries: