The Cloudsail Project - Privacy Policy
Last Updated: March 12, 2026
1. Information We Collect
We collect specific information to operate our infrastructure, provide secure game servers, and maintain community standards. This includes:
Automatically Collected Data: When you connect to our servers or websites, we automatically log your IP address, in-game username, chat history, and server actions.
Donation Information: If you choose to donate, we collect your email address, name, and Minecraft username to assign digital perks.
2. Cookies, Analytics, and Consent
To protect our network and monitor performance, we utilize specific web tools.
Consent Management: We use Osano as our Consent Management Platform (CMP). When you visit our website, Osano allows you to opt-in or opt-out of non-essential cookies. (Note: Webmaster tools such as Google Search Console are utilized strictly for backend search performance and do not deploy tracking cookies on end-user browsers).
Essential Cookies: Cloudflare utilizes strictly necessary security cookies (such as
__cf_bm) to protect our network architecture and reverse proxies from malicious bot traffic and DDoS attacks. These essential cookies cannot be disabled, as they are required for the safe operation of our infrastructure.
3. Payment Processing and Opt-In Transparency
The Cloudsail Project does not directly collect, process, or store your credit card or financial information.
All financial transactions are securely handled by our fiscal sponsor, the Hack Foundation (HCB), and processed via Stripe.
Financial Transparency: We practice Privacy by Design. Donor identities can be kept private should you choose, given you check the appropriate box. Donors must explicitly opt-out during checkout if they wish to have their name and donation amount removed from our public financial ledger. Note: This setting is managed by our bank (HCB).
4. Data Storage, Security, and Cross-Border Transfers
We take the security of your data seriously. Our game servers and databases are hosted in the United States (US West region). By accessing our services, international users acknowledge and consent to their data being transferred to, stored, and processed in the United States.
Access Controls: Administrative access to our infrastructure is protected by strict access controls, including Cloudflare Zero Trust authentication, reverse proxies, and restricted panel access.
IP Masking: Within our standard administrative consoles, user IP addresses are redacted to prevent abuse by lower-level moderators. While masked for general moderation, these addresses remain accessible to senior administrators strictly for security enforcement.
5. Data Retention, Anti-Cheat, and Human Appeal
To protect the integrity of our community, IP addresses and server action logs are retained within our backend files.
Retention Period: Data required for network security and automated anti-cheat systems is retained for the active duration of the ban, or for the functional lifespan of the underlying infrastructure, to permanently enforce IP-based bans against malicious actors and prevent ban evasion.
Automated Decision-Making: Users subject to automated disciplinary actions (such as IP-based anti-cheat bans) have the right to request a manual human review or appeal the decision by contacting our administrative team.
6. Children and Minors We are committed to protecting the privacy of minors.
Under 13: We do not knowingly collect personal information from children under the age of 13. If we discover we have inadvertently collected data from a user under 13, we will delete that information immediately.
Ages 13-17: Users between the ages of 13 and 17 may only access our infrastructure and make financial contributions with the explicit, verifiable consent of a parent or legal guardian. This consent is verified implicitly when a parent or guardian utilizes their payment method via Stripe to process a donation, or explicitly via a mandatory acknowledgment checkbox during account registration.
7. Jurisdiction-Specific Data Rights
Depending on your geographic location (such as the UK, the European Union, or applicable US states), you may have specific legal rights regarding your personal data, including the right to request access to or deletion of your information.
We comply with verifiable data subject access requests (DSARs) originating from jurisdictions where such rights are legally guaranteed.
Security Exemption: We legally reserve the right to deny deletion requests for specific technical information—such as IP addresses and hardware identifiers—when that data is actively required to enforce server bans, maintain anti-cheat systems, and protect infrastructure security.
8. Sharing of Information
We do not sell, rent, or trade your personal data. We only share information with trusted third-party services necessary to operate Cloudsail, including:
Infrastructure & Analytics: Cloudflare, Google, and Osano.
Payment Processing: Hack Foundation (HCB) and Stripe.
Legal Compliance: We will disclose logged data to legal authorities if required by law, or to protect the safety, property, and rights of The Cloudsail Project, our infrastructure, and our users.
9. Contact Us
If you wish to exercise your data rights, appeal an automated decision, or have questions about our privacy practices, please contact our administrative team via:
Email: support@cloudsail.uk