HeliosMine is a Minecraft server. This page explains what we keep about you in the game and on heliosmine.net, why, who we share it with, and your rights (Turkish Personal Data Protection Law No. 6698, article 10; the GDPR if you live in the European Union).
Not an official Minecraft server. Not approved by or associated with Mojang or Microsoft. Mojang’s and Microsoft’s privacy policies do not cover this server: HeliosMine is responsible for what it keeps about you here.
Data controller: Muhammet Ali Kayapınar (catzalli), owner of HeliosMine. Contact: contact@heliosmine.net
What we keep
- Your account: your player name, a one-way hash of your password, your two-step verification key if you turned it on, when you registered and last logged in.
- Your connection: the IP address you join the game or create your account from, and when; the server address you typed the first time you joined (such as an ad’s own address).
- Your progress: your island, items, money, rank, statistics and votes.
- Chat: what you write stays in the server logs for at most 30 days, then it is deleted automatically. Messages that break the rules and the punishments given are also recorded.
- On the site: your logins and failed login attempts (time, IP address), your open sessions (IP address and the line your browser introduces itself with), and changes to your password and two-step verification.
- Site visits: which pages you look at, which site or link brought you (the site’s name and the link’s campaign tag), whether you copied the server address, and whether you use a computer or a phone. We use no cookie for this and don’t store your IP address: to link one day’s visits together, your IP address and the line your browser introduces itself with are turned into a one-way hash with that day’s random key. The key is deleted the next day, and leaves our backups when they expire; after that these records point to no one.
- Credits and the store: the credit packages you top up (package, amount, Tebex’s transaction number, the payment’s country and method, the IP address you started it from), your credit history and the items you buy in the store. Your card details, name, email and billing address never reach us: only Tebex receives them.
- Discord: if you link your account, which Discord account belongs to which player name; the support tickets you open.
- Bedrock: if you play from Bedrock, which Xbox account id (XUID) belongs to which player name.
- Email: if you write to us, your email and our answer.
Why
- To create and protect your account, run the game and deliver what you buy (performance of a contract).
- To stop cheating, account theft, ban evasion, payment fraud and rule breaking (legitimate interest). For this we look at accounts joining from the same connection, and when someone joins with a name that is not registered yet we check whether the IP is a VPN.
- To keep connection and payment records as the law requires (Turkish Law No. 5651; for payments, tax law).
- To protect your data against loss (legitimate interest); for this we keep encrypted backups.
- To promote HeliosMine (legitimate interest): what you build in the game and your player name may show in our promotional images; if you’d rather they didn’t, write to us and we’ll take them down.
- To see how many people the site and our ads reach and where players find us (legitimate interest). For this we use only the visit counts above and the server address typed at the first join.
Who we share it with
The server and the site are in Türkiye (Istanbul). Encrypted copies of our backups are kept on the administrator’s computer in Türkiye and in Germany (Hetzner). For some tasks these go to services abroad:
- Tebex (United Kingdom): Tebex takes your payment when you top up credits. Tebex receives your player name, your IP address (its checkout sets your country and tax from it) and the payment’s number. You give your card, name and email to Tebex directly on its checkout page; Tebex’s privacy policy covers those.
- DeepSeek (China): only the text of your chat and private messages, without your name or IP; to translate a message into its reader’s language and to check it for swearing, advertising and other rule breaking. Messages with an IP address, a link or an email address are stopped on our server and never sent to DeepSeek. Your private messages are not stored. Don’t write your real name, phone number or address in chat.
- Discord (USA): in-game chat, with your name and your skin’s head, to the chat channel of our Discord server.
- proxycheck.io (United Kingdom): only your IP address, when you join with a name that is not registered yet, for the VPN check.
- Mojang, MineSkin, mc-heads.net: the name or address you give for a skin; your skin, for your head picture on Discord.
- GeyserMC: if you play from Bedrock, the login details Xbox signed (your Xbox name and id), your skin and the device details the game reports (model, operating system, language, version), so that Java players see your skin.
- Hostinger (Lithuania): the emails you send to contact@heliosmine.net and our answers are kept on Hostinger’s mail servers.
- Hetzner (Germany): an encrypted copy of our backups. Only we hold its key; Hetzner cannot read what is in it.
These transfers are made to provide the service you ask for (payment, chat translation and moderation, Discord chat, an answer to your email) and to protect your data against loss (KVKK article 9, GDPR chapter V); each service’s own privacy terms apply too. We don’t sell your data or use it for advertising. The site has no advertising, analytics or other sites’ cookies; visits are counted without cookies (Cookies).
How long
- Your account and your progress: as long as your account exists. Ask and we delete it (below).
- The security records tied to your account (which IP addresses you joined the game from, your punishments, your messages counted as rule breaking): as long as your account exists; they go when it is deleted. The anti-cheat’s records are deleted automatically after 1 year, their details after 90 days.
- Login records on the site: 90 days; sessions until they end (30 days at most).
- Site visit counts: 13 months; the key that links one day’s visits is deleted the next day. The address you first joined by: as long as your account exists.
- Your credit, payment and order records: as long as your account exists, for your history and for any refund or dispute.
- The log files of the server and its plugins (chat, commands, connections; they may hold IP addresses): 30 days at most, then they are deleted automatically.
- Our backups: 7 days on the server, at most 2 months in the encrypted copies elsewhere; deleted data leaves them within that time too.
- What the law makes us keep: payment and tax records, and the part of the connection records the law requires (which account, from which IP address, when), stay for as long as the law requires even if your account is deleted; in the payment records your name is replaced by a number. A punishment still running also stays until it ends.
AI moderation
Chat is checked by an AI; a message it counts as a violation is not sent. If you think a decision was wrong, open a support ticket on Discord or write to contact@heliosmine.net; a staff member will look at it.
Your rights
To learn whether we process your data, get a copy, learn who it was shared with, have it corrected, have it deleted, object to a result against you that came from automated processing alone, and claim compensation for harm. Send your request to contact@heliosmine.net or through a Discord support ticket; once we have confirmed the account is yours we answer within 30 days, free of charge. When you ask us to delete your data, we delete everything but what the law makes us keep, and our answer says what stays and why. If you are not satisfied with our answer you can apply to the Turkish Personal Data Protection Board (KVKK). If you live in the EU you also have your rights under the GDPR, including complaining to your local data protection authority.
Age
If you are under 13, play on HeliosMine with the knowledge and permission of a parent or guardian. Your parent or guardian can use all the rights about your account (asking for information, deletion) by writing to contact@heliosmine.net. Under Tebex’s terms you must be at least 16 to top up credits. Discord’s own age rules apply to using Discord.
Changes
If we change this page we update the date on it and announce it on Discord.