Privacy Policy

1. Who is responsible

The controller for your personal data is Medonn Forge. Contact for privacy questions: medonnmc@gmail.com. We have no data protection officer because we're not required to have one.

2. This website

This website has no cookies, no analytics, no ads, no tracking pixels and no contact forms. Our fonts and images are hosted with the site, so loading a page sends nothing to Google or other third parties.

Like any website, our hosting provider Vercel Inc. records technical data when you visit: IP address, date and time, the page requested, and browser type. This is needed to deliver the site and keep it secure (legal basis: our legitimate interest, Art. 6(1)(f) GDPR). Vercel keeps these logs only for a short time, under its own retention rules.

3. Our Discord server and tickets

When you join our Discord server or open a ticket, we see your Discord username, user ID, profile picture and the messages and files you send. We use them to answer you, give you downloads and support, and run the community.

• For quotes and orders, the legal basis is taking steps before a contract and performing it (Art. 6(1)(b) GDPR).
• For running and moderating the community, the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• We delete ticket transcripts 12 months after your order or question is finished, unless we need to keep them for a legal claim.

Discord itself is run by Discord Inc. It is responsible for how it processes your data on its platform under its own privacy policy.

4. Orders and payments

Plugin subscriptions are sold by Paddle.com Market Ltd (and its group companies), our reseller and Merchant of Record. Paddle collects your name, email, billing country and payment details under its own privacy policy. Paddle shares with us your email, what you bought, the order and subscription references, and anything you add at checkout such as your Discord ID, so we can deliver and manage your license key. We never see your card details.

Custom orders: we process your name, email, what you ordered, the amount and payment references.

Legal basis: performing the contract (Art. 6(1)(b) GDPR) and our legal duty to keep accounting and tax records (Art. 6(1)(c) GDPR). Order records are kept for as long as tax and accounting law requires, then deleted.

5. Our plugins and mods

Free plugins and mods don't send any data to us. Paid plugins and mods check their license key with our license server when the server starts and every 30 minutes after that. Each check sends the license key, a random server ID made by the plugin, and the plugin version. We store these with the time of the check, so we can see how many servers use a key and turn keys off. Like any server, the license server also sees the IP address it's contacted from; our hosting providers keep this in their logs for a short time, and we don't store it in the license database. Legal basis: performing the license agreement (Art. 6(1)(b) GDPR). We keep license data while the license is active and delete it 12 months after it ends. Some plugins also store player data, such as stats or IP addresses for anti-alt checks, on the server that runs them. The owner of that server is responsible for that data, not us.

6. Who we share data with

• Our hosting provider Vercel Inc., for the website.
• Supabase Inc., which runs our license database in the EU (Frankfurt).
• Discord Inc., for our Discord server.
• Paddle.com, which sells our paid plugins as Merchant of Record.
• Public authorities, where the law requires it.

We don't sell your data and don't use it for advertising.

7. Transfers outside the EU

Vercel, Supabase, Discord and our payment providers may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework where the company is certified, or by the European Commission's Standard Contractual Clauses.

8. Your rights

Under the GDPR you have the right to:

• see the data we hold about you (Art. 15)
• have wrong data corrected (Art. 16)
• have your data deleted (Art. 17)
• limit how we use it (Art. 18)
• get your data in a portable format (Art. 20)
• object to processing based on our legitimate interest (Art. 21)

To use any of these rights, email medonnmc@gmail.com or message us on Discord. We answer within one month.

You can also complain to a data protection authority, such as the one in the country where you live.

9. Do you have to give us your data?

You don't need to give us anything to visit this website. To use Discord you need a Discord account. For a paid order we need the order and payment details, or we can't complete it.

10. Children

Paid orders are only for people aged 18 or over, or with a parent's or guardian's permission. We don't knowingly collect data from children under 16 without a parent's consent.

11. Automated decisions

We don't make automated decisions or profiles about you.

12. Changes to this policy

If we change how we use your data, we will update this page and change the date at the top.