This policy explains which personal data BloxRealm Interactive ("BloxRealm", "we") collects on the website and on its Minecraft servers, why, how long we keep it and what your rights are. It follows the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Who is responsible
The data controller is the BloxRealm Interactive team, which runs the website and the Minecraft servers of the network (Survival play.neotopiaworld.com, SkyBlock and Creative). To contact us about your data, use the Help & questions category of the forums or ask a staff member in game. We answer within one month.
2. What we collect
2.1 Your website account
- Your Minecraft username and your password. The password is never stored in clear: our authentication provider only keeps a secure hash of it.
- A technical login address derived from your username (for example
name@players.neotopia.world). It is not a real email address and we never write to it. If you signed up with a real email address instead, we keep that address. - The date you signed up and the date of your last login.
- If you link your account in game with
/link, your Minecraft UUID (your account's unique identifier).
2.2 Your public profile
- Your bio, if you write one.
- Your privacy settings (which stats you hide).
- The date you accepted the server rules.
2.3 Your game data
When you play, the server sends the website, every minute: your username and UUID, your rank, your town and nation, your money, coins, level and level XP, your playtime, deaths, player kills and mob kills, and the dates of your first and last connection. They are shown on your profile, except the ones you choose to hide.
2.4 What you post
Your forum posts and replies and your comments on articles, with your username and the date. They are public.
2.5 Moderation
If you are sanctioned, we keep the sanction, its reason, its duration and the staff member who applied it.
2.6 Technical data
Like any website and game server, our providers see your IP address when you connect, and the Minecraft server keeps it in its logs to fight cheating, ban evasion and attacks.
2.7 Purchases and donations
Coin purchases are handled entirely by Tebex. Tebex collects your payment details; we only receive your Minecraft username, the pack you bought and a transaction number, so the coins can be delivered. Donations for the hosting are handled by BisectHosting on its own page; we don't receive your payment details.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your website account | Performance of our terms of use (contract) |
| Showing your profile and stats | Contract, with your privacy settings |
| Forums, articles and comments | Contract |
| Moderation, security, fighting cheating and ban evasion | Our legitimate interest in keeping the community safe |
| Delivering purchased coins | Contract of sale |
| Keeping accounting and legal records | Legal obligation |
We do not sell your data, we do not use it for advertising, and we do not make automated decisions about you.
4. Cookies and browser storage
We only use what the site needs to work, so no consent banner is required:
nw_langandnw_theme(cookies, 1 year): your language and light/dark theme;nw_session(browser storage): keeps you logged in until you log out;- a small browser storage entry so an article view is only counted once per visit.
There are no advertising or tracking cookies and no analytics.
5. Other services involved
Some content comes from other services, which may see your IP address when your browser loads it:
- Supabase: database, accounts and file storage for the website;
- Lovable / Cloudflare: hosting of the website;
- BisectHosting: hosting of the Minecraft server and of the web map;
- Tebex: coin purchases (when you open the store);
- mc-heads.net: player head and skin images;
- Google Fonts: the site's fonts;
- YouTube (privacy-enhanced mode): the trailer, only when you press play;
- mcsrvstat.us: the number of players online.
Some of these providers are located outside the European Union. Transfers are covered by the European Commission's standard contractual clauses or an equivalent safeguard.
6. How long we keep it
| Data | Kept |
|---|---|
| Account, profile and settings | Until you delete your account |
| Game stats | While your account exists, then deleted with it |
| Forum posts and comments | Until you or the staff delete them, or your account is deleted |
| Sanctions | For their duration, then 1 year to prevent ban evasion |
| Server logs (IP addresses) | 90 days at most |
| Purchase records | As long as the law requires (up to 10 years for accounting) |
7. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a reusable format (portability). You can change your bio and privacy settings yourself at any time from your profile. To use your rights, contact us as explained in section 1. If you think we did not respect your rights, you can complain to the CNIL (cnil.fr) or to your country's data protection authority.
8. Minors
BloxRealm is open to players of all ages. If you are under 15, please ask a parent or guardian before creating an account.
9. Security
Passwords are hashed, access to the database is protected by row-level rules, staff tools are restricted to verified staff members, and all traffic to the website is encrypted (HTTPS).
10. Changes
We may update this policy when the site or the server changes. The date of the last update is shown at the top of this page.