Privacy Policy.

We respect your privacy. This page explains what data we collect, why, how long we keep it, and what you can do about it. It applies to astroworldmc.com, all Astroworld subdomains, the Minecraft server, the store, convert.astroworldmc.com, write.astroworldmc.com, apps.astroworldmc.com, browser extensions, QR code tools, Discord, and any other Astroworld service.

Quick summary

• We collect your Minecraft username, optional email, and gameplay data so the server can run.
• For convert.astroworldmc.com, uploaded files are temporary and deleted after 1 hour.
• For write.astroworldmc.com, AI request metadata is logged for usage limits, but request content is not stored.
• For apps and accounts, we store the account data needed to run the service, such as email, name, subscription status, and usage counts.
• For browser extensions, page content may be sent to our server for AI analysis, but that page content is not stored or logged.
• For QR tools, premium analytics may include hashed scan IP, country, and device type.
• We use Google Analytics to understand how the website is used (you can opt out via the cookie banner).
• We also keep our own visitor count that uses no cookies and stores nothing that identifies you.
• On our own websites we record how a visit goes (pages, clicks, cursor movement, scrolling, errors) so we can find pages that are broken or confusing. Everything you type is masked and never recorded, and you can switch recording off in one click.
• We do not sell your data to anyone, ever.
• You can request a copy of your data, or have it deleted, by emailing info@astroworldmc.com.

If you want the full details, keep reading.

Who we are

Astroworld is a Minecraft server, community, and web tools network. The website astroworldmc.com is partly operated by Astroworld MC, a company registered in the Netherlands.

For all privacy questions: info@astroworldmc.com

What we collect by service

When you play on the server

• Your Minecraft username and UUID
• IP address (for security and fraud prevention)
• Gameplay data: claims, economy balances, playtime, vote counts
• Chat messages (kept for moderation purposes)

When you visit the website

• Pages you visit (via Google Analytics, only if you accept analytics cookies)
• Browser type and approximate location (country level)
• Time of visit

We also keep our own measurement, separate from Google Analytics, which uses no cookies and collects no personal data. It counts only aggregate daily totals per site: how often a page was viewed, which of our domains it was on, the domain name of the website a visit came from (never the full referring URL, because that can carry personal data), and campaign parameters such as utm_source. It also counts, per campaign, how many visits read on beyond the landing page and how many click through to another of our domains or to an external site. No visitor identifier, cookie or profile is stored, and individual visits cannot be linked to each other or to you.

Because our sites are spread over around fifty domains, a click from one to another carries a short code in the link (_aw) so the visit is not counted as a new, unknown one. That code holds only the campaign label, for example "google / organic": no visitor identifier and nothing that can be linked to you. It is removed from the page address on arrival. For as long as your browser tab is open, your browser itself remembers that campaign label and which steps were already counted; it is cleared when you close the tab and is never sent to us. Short measurable links of the form astroworldmc.com/go/... count the click and send you straight on to the destination.

Session recordings on our own websites

To see how our pages actually work for real people, our own websites (astroworldmc.com and its subdomains, except the webmail, calendar and API subdomains) record how a visit goes. A recording lets us replay the visit as a reconstruction of the page: which pages you opened, where you clicked, how your cursor moved, how far you scrolled, and any browser errors that happened to you. We use this to find broken pages, dead links and confusing layouts, and to build aggregate heatmaps of where visitors click and look.

What we deliberately do not record:

• Anything you type. Every form field, search box and text area is masked at the moment of capture, so passwords, messages and search terms never leave your browser.
• Your IP address. It is turned into a one-way hash on arrival; the original is not stored.
• Your identity. A recording is tied to a random id, not to a name or an email address, unless you are logged in to an Astroworld account.

So that one visit across our domains does not look like fifty separate visits, we set a small cookie on .astroworldmc.com holding a random session id (expires after 30 minutes of inactivity) and a random visitor id (1 year). They hold no personal data and are used for nothing else.

Recordings and cursor data are deleted after 30 days, and the summary of a visit (pages, counts, country, device) after 120 days. Everything stays on our own servers, is visible only to the site owner, and is never sold, never used for advertising, and never used to train AI models. No third-party recording or heatmap service is involved.

Switching it off. We honour the Global Privacy Control signal: if your browser sends GPC, we do not record you at all. You can also switch it off yourself at any time by opening astroworldmc.com/?aw_no_rec=1. That remembers your choice for a year across all our domains. To switch it back on, open astroworldmc.com/?aw_no_rec=0.

When you use convert.astroworldmc.com

• Uploaded files, only temporarily so we can convert them
• IP address and request timing for rate limiting and abuse prevention
• Basic conversion metadata, such as requested input and output format

Uploaded files are deleted after 1 hour. We never store conversion files permanently.

When you use write.astroworldmc.com

• IP address for rate limiting and abuse prevention
• Account ID if you are signed in
• AI request metadata, such as time, tool used, plan tier, and usage count
• Subscription tier and usage limits if you use premium features

AI requests are logged for usage limits, but the text content you submit is not stored. Content may be processed by our servers or AI providers only to generate the requested result.

When you use apps.astroworldmc.com or account-based tools

• Email address
• Name, if you provide it
• Subscription status
• Usage counts
• Account settings and feature access
• Billing status where needed to provide paid features

When you use a browser extension

• Page content or selected text sent to our server for AI analysis when you request an extension feature
• The extension action you requested
• Temporary technical data needed to return the result

The page content itself is not stored and not logged.

When you use QR codes or redirects

• QR code ID or redirect ID
• Scan time
• Scan IP address, stored only as a hash for analytics and abuse prevention
• Approximate country
• Device type and browser category

QR scan analytics are provided for premium users only.

When you sign up for the newsletter

• Your email address
• Subscription preferences

When you join the beta launch list

• Your email address
• The signup source, such as homepage, store, or vote
• Hashed IP address and hashed browser user agent for abuse prevention

We store hashes for beta signup IP and browser data, not the raw values. The beta launch list is used only for the launch announcement email unless you separately subscribe to other updates.

When you submit a support report

• Your username
• Your message
• IP address (used to prevent spam, deleted after 30 days)
• Optional: email if you want a reply

When you link Discord

• Your Discord user ID and username
• The fact that this Discord account is linked to your Minecraft account

When you make a purchase (when /store is live)

• Order details
• Payment processor handles the actual payment data (we never see your full card number)
• Billing email and country (required for VAT)
• Minecraft username or account identifier needed to deliver the purchase

Why we collect it

Per GDPR Article 6, we have a legal basis for each kind of data:

• Contract: When you join the server, you accept our Terms. Most gameplay data is needed to run the server you signed up for.
• Contract: When you use paid subscriptions, file conversion, writing tools, QR tools, accounts, or extensions, we process the data needed to provide the requested service.
• Legitimate interest: IP logging for security, ban evasion prevention, fraud detection, rate limiting, spam prevention, and service abuse prevention.
• Consent: Newsletter signup, marketing analytics. You can withdraw at any time.
• Not personal data: our own cookieless visitor count produces aggregate day totals only. It is not personal data under the GDPR and needs no consent, which is why it runs regardless of your cookie choice.
• Legitimate interest: session recordings of our own websites, so we can find and fix pages that are broken or confusing. What you type is masked, IP addresses are only stored hashed, and you can opt out at any time (see "Session recordings on our own websites").
• Legal obligation: Tax records for purchases (kept 7 years per Dutch law).

How long we keep it

Some limited records may be kept longer where required by law, needed for payment records, or needed to investigate fraud, chargebacks, abuse, or security incidents.

Who we share it with

We share data only with services we need to run Astroworld:

• Mojang/Microsoft: required for Minecraft authentication
• Discord: only if you link your account
• Google Analytics: only if you accept analytics cookies
• Stripe or other payment processors: for store purchases and premium subscriptions
• AI processing providers: when needed to provide write tools or extension analysis
• Cloudflare: for DDoS protection (some data passes through their servers)
• Our hosting provider: server infrastructure

Session recordings are the exception to that list: they are stored on our own servers and are not shared with any third-party analytics or session-replay service.

We never sell your data to advertisers or data brokers.

Your rights under GDPR

If you are in the EU or EEA, GDPR gives you the right to:

• Access: request a copy of all data we have on you
• Correct: fix anything that's wrong
• Delete: have your data erased ("right to be forgotten")
• Export: get your data in a machine-readable format
• Object: tell us to stop processing your data
• Withdraw consent: for anything based on consent (newsletter, analytics)
• Complain: file a complaint with the Dutch Autoriteit Persoonsgegevens

To use any of these rights, email info@astroworldmc.com with the account email, Minecraft username, or service details needed to find your data. We respond as soon as we can.

Account deletion

You can delete your account and associated personal data by using account deletion tools where available or by emailing info@astroworldmc.com.

Deletion includes account profile data, usage counts, subscription access data, and service data tied to your account, unless we must keep a record for legal, tax, payment, chargeback, fraud prevention, abuse prevention, or security reasons. Temporary service content that we do not store, such as convert files after 1 hour, write request content, and extension page content, cannot be recovered because it is not retained.

Children

If you are under 16, you need a parent or guardian's permission to play on Astroworld and use this website. If you are a parent and want to remove a child's data, email us.

International data transfers

Some of our service providers (like Cloudflare) operate servers outside the EU. When this happens, the transfer is protected under standard contractual clauses or adequacy decisions, as required by GDPR Article 46.

Changes to this policy

If we update this policy, we will post the new version here and announce it on /news. Continued use of the website means you accept the updated policy.