Privacy Policy

Last updated: August 27, 2026

This is the privacy statement of DorpCraft. Here we explain which personal data we process via dorpcraft.nl, why we do that, and what rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act on GDPR.

DorpCraft is part of the Verdraaid network: a group of friends, not lawyers. This document was created with the help of AI based on how DorpCraft works. It is seriously intended, but not official legal advice. Have questions? Email [email protected] — we're happy to look at it together.

Are you a lawyer (or have legal knowledge) and want to help us make this sharper or better? Email [email protected]. We are a friend group without a budget for paid legal help, so we're mainly looking for people who want to support us. However, we're happy to include a credit snippet in these legal pages for those who help us.

1. Who is responsible?

The data controller for processing personal data at DorpCraft (dorpcraft.nl) is DorpCraft / Verdraaid network — the community behind DorpCraft.

Privacy questions or requests: [email protected]. You can also reach us via our Discord.

2. Which data do we process?

2.1 Account data

If you create a DorpCraft account, we process among other things:

display name and username;
email address;
password (only as a secured hash; we cannot read your password);
optional: phone number, profile photo, bio, and social links;
preferences such as notifications for new content;
technical data about your session (session identification via a cookie).

2.2 Forms

If you fill out a form with us, we process the answers you yourself enter (for example, name, email, text, or files). Depending on the form settings, we may also store an IP address to limit abuse and duplicate submissions.

2.3 Technical and usage data

Our servers and any hosting/proxy partners (such as Cloudflare) may process standard server logs, such as IP address, timestamp, requested URL, and browser information. This is necessary for security, stability, and troubleshooting of DorpCraft.

2.4 Cookies and local storage

We use cookies and similar techniques. See our cookie policy for an overview and your choices via the cookie banner.

2.5 Own analytics (no Google Analytics)

We use no Google Analytics and no session replay. Without analytics consent, we place no analytics cookie and load no measurement script. We count only aggregated daily statistics (path, allowed UTM fields, referrer host, country, and rough browser/OS) in our own database. That counting is no tracking identity and is not automatically “anonymous” or GDPR-free; the basis for that is a documented balancing of interests (no cookie of our own). IP address and user-agent we use only temporarily for country/browser and do not store.

If you accept Analytics, we use a first-party analytics cookie and collect additional usage data such as visited pages, scrolling, clicking, and screen size. If you are logged in, these statistics may be linked to your account. If you have linked your Minecraft account via /koppel, they may also be linked to that Minecraft connection — never retroactively on old hits, and never via IP matching. Revoking can be done via the cookie icon: new measurement stops, and saved consented visit data for that identity is erased.

Google Search Console search data (queries, impressions, clicks) we use internally for reporting. Those queries may incidentally contain identifying terms and are not treated as public or “GDPR-free” data.

On the Minecraft server we count anonymous server totals: joins and quits, how many messages players send (without the text), peak online count, and a unique-player count that the server itself calculates. For that we store no UUID, player name, IP, or chat text. That stands separate from the optional linking via /koppel on this website.

3. Purposes and legal bases

We process personal data only for clear purposes:

Account and community functions — execution of the agreement / service (Art. 6 para. 1 sub b GDPR): logging in, profile, access to parts of DorpCraft.
Forms and submissions — execution of your request or consent (Art. 6 para. 1 sub b or a GDPR), depending on the form.
Security and abuse prevention — legitimate interest (Art. 6 para. 1 sub f GDPR): protection of DorpCraft, accounts, and submissions.
Legal obligations — if applicable (Art. 6 para. 1 sub c GDPR).
Minimal usage statistics without analytics cookie — legitimate interest (Art. 6 para. 1 sub f GDPR): aggregated daily statistics (path, UTM, referrer host, country, rough browser/OS) without tracking identity. That counting is active. Without Analytics consent, we place no analytics cookie and read no device storage for analytics.
Minecraft server totals — legitimate interest (Art. 6 para. 1 sub f GDPR): anonymous totals (joins, quits, number of player chats without content, peak online). No UUID, names, or chat text in that counting.
Non-essential cookies / external media / analytics — consent (Art. 6 para. 1 sub a GDPR and Telecommunications Act), via our cookie banner. Revoking is just as easy as accepting.

4. Sharing with third parties

We do not sell your data. We may share data with:

Hosting and infrastructure partners (for example, server hosting and Cloudflare) that process technically on our behalf;
External platforms you yourself open or accept, such as YouTube, Twitch, or Discord — those have their own privacy policies;
AI/processing services we use internally for content management (for example, text help in the CMS). Personal data of members is not shared there by default for marketing.

Where necessary, we close processor agreements or rely on appropriate safeguards (such as standard contract clauses) when transferring outside the EEA.

5. Retention periods

Accounts: as long as your account is active, and afterward as long as needed for completion, security, or legal obligations.
Sessions: session cookies usually expire after a maximum of 30 days (or earlier upon logout).
Form submissions: as long as needed for the purpose of the form or until we delete them.
Unlock/limit cookies: usually up to 7 days or 1 year, depending on the purpose (see cookie policy).
Consented analytics hits/sessions: 90 days, or earlier upon revoking Analytics consent.
Daily aggregates (without personal ID): up to 14 months.
Minecraft server totals (without personal ID): up to 14 months.
Server logs: as short as reasonably necessary for security and troubleshooting.

6. Security

We take appropriate technical and organizational measures, such as password hashing, secure session cookies (HttpOnly, Secure in production), HTTPS, and access restrictions for management. No system is 100% secure; report suspicious situations via [email protected].

7. Your rights

Under GDPR, you have among other things the right to:

access to your personal data;
rectification of incorrect data;
erasure (“right to be forgotten”), within legal limits;
restriction of processing;
data portability, where applicable;
objection against processing based on legitimate interest;
retraction of consent, without this affecting the lawfulness before retraction.

You can adjust most account data yourself via your account page, including your display name, email address (after verification), and username (maximum once per year; the old profile URL remains valid for one year). You can also delete your account there (confirmation with password + username). For other requests, email [email protected]. We respond within legal timeframes.

Do you have a question, concern, or complaint about how we handle your data? First contact us via [email protected] (or Discord). We look at it together and try to solve it with you.

Does that not work, or do you still want to file an official complaint? Then you can contact the Data Protection Authority. That right always remains.

8. Age and minors

DorpCraft is gaming and community content. Sometimes we use language or humor that may not be suitable for younger viewers. We advise against DorpCraft for children under 14. We recommend watching from around 14 to 15 years old. We try to limit it, but cannot guarantee that everything is always suitable — live streams, chat, and unexpected moments are part of the chaos.

In addition to the processing of personal data via an account, the following applies: if you are under 16 years old, you must ask for consent from a parent or guardian before creating an account or sharing personal data (in accordance with the GDPR Implementation Act).

9. Changes

We may update this privacy statement. The date at the top indicates the last update. For major changes, we try to make it known via DorpCraft.