1. Who we are
DonutSocial (donutsocial.net) is an independent community site for DonutSMP players and creators. It is not affiliated with or endorsed by DonutSMP, Mojang Studios, or Microsoft. DonutSocial decides how and why the personal data described here is used and is responsible for it (the “data controller” under the GDPR and the “veri sorumlusu” under Türkiye’s KVKK). You can reach us at [email protected].
2. What we collect
Your account
You sign in with Google or Discord through Clerk, our sign-in provider. Clerk receives your email address and basic account name from them and handles your sessions. Our database keeps only an internal account id and your Clerk user id, not your email address.
Your Minecraft identity
When you verify a Minecraft Java account we store its username and UUID, its past usernames, and the history of which DonutSocial account it was linked to. We load your public skin from Mojang. Verification codes are single-use; unused codes are deleted after 7 days.
What you create and do
- Profile details: bio, social links, playstyles, favorite activities, appearance choices, and images you upload.
- Posts, guides and their earlier versions, comments, Market trade listings, polls, event sign-ups, likes, votes, and saves.
- Follows, blocks, mutes, notifications, and your notification settings.
- XP, levels, badges, and daily check-ins.
- Creators who connect YouTube or Twitch: the channel id, name, and address. We use the sign-in only to confirm you own the channel and do not keep YouTube or Twitch access tokens.
Safety records
Reports you file, reports about your content, moderation cases, sanctions, appeals, and an audit history of important actions (such as verification, moderation decisions, and staff sign-ins). We also count recent actions per account to stop spam.
Technical data
Like most websites, our servers log requests: IP address, browser type, the page asked for, and the time. When the site crashes in your browser it sends us the error message, the page, your browser type, and, if you are signed in, your account id, so we can fix it. The profit calculators run in your browser; we never receive the numbers you enter.
3. What is public
Your Minecraft username and skin, your profile, everything you publish, your XP level, badges, and follower counts are visible to anyone, including visitors who are not signed in. Your email address, saved items, blocks, mutes, notification settings, and the reports you file are private. We never tell someone who reported them.
4. Why we use it
- To run the site you signed up for: your account, profile, posts, guides, notifications, and XP (performance of our agreement with you, see the Terms of Service).
- To keep the community safe: verifying Minecraft accounts, blocking scam links, handling reports, enforcing the rules, and stopping ban evasion and abuse (our legitimate interests, and yours).
- To keep the site secure and working: logs, crash reports, rate limits, and backups (legitimate interests).
- When the law requires it: for example, a valid request from authorities (legal obligation).
We do not use your data for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.
5. Who helps us run the site
These providers process data for us, only for the purposes above:
- Clerk: sign-in, email addresses, and sessions.
- Cloudflare: domain name service, network protection, and storage for uploaded images.
- Our hosting provider: the server that runs the site and its database.
- Google and Discord: only if you choose them to sign in.
- Mojang / Microsoft: we look up public Minecraft profiles and skins.
- Google (YouTube) and Twitch: only if you connect a creator channel.
Some of these providers process data outside Türkiye and the European Economic Area, including in the United States. Where the law requires it, those transfers rely on safeguards such as the European Commission’s standard contractual clauses. We may also disclose data if the law requires it or to protect people from serious harm.
6. How long we keep it
- Account, profile, and content: while your account exists, or until you delete the content.
- After a deletion request: within 30 days we delete or anonymize your account, profile, content, and other personal data. Database backups roll over every 14 days, so copies disappear from backups soon after.
- Safety records: moderation cases, sanctions, the audit history, and Minecraft link history are kept for as long as they are needed to protect the community, prevent ban evasion, and meet legal obligations, even after an account is deleted.
- Server logs and crash reports: up to 14 days.
- Unused Minecraft verification codes: 7 days.
7. Your rights
Depending on where you live, including under the GDPR and Türkiye’s KVKK (Article 11), you can:
- ask whether we hold data about you and get a copy of it;
- have wrong data corrected;
- have your data deleted;
- object to or ask us to limit how we use it, and get it in a portable format;
- complain to a data protection authority, such as the Kişisel Verileri Koruma Kurumu in Türkiye or the authority where you live.
Edit most details yourself in Settings. Request account deletion in Privacy & account data. For anything else, email [email protected]. We answer within 30 days and may ask you to confirm the request from your signed-in account first.
8. Children
DonutSocial is for players aged 13 and over. If you are under 18, please make sure a parent or guardian is fine with you using it. If we learn that someone under 13 has an account, we will delete it. Parents can contact us at [email protected].
9. Security
Traffic to the site is encrypted, sensitive secrets are stored encrypted, staff powers need two-factor authentication, and only a small number of people can reach the servers. No system is perfect. If we discover a breach that affects you, we will tell you and the authorities as the law requires.
10. Changes
When this policy changes we update the date at the top. For important changes we will also tell you on the site before they take effect.