Privacy Policy

Last updated: September 17, 2026

This Privacy Policy describes how the Ruinfall Minecraft mod (the “Application”) and its global leaderboard service at https://arcanium.info (together, the “Service”) collect, use and store your personal data, and explains the rights you have under the EU General Data Protection Regulation (GDPR).

In short: nothing is sent anywhere unless you explicitly opt in to the global leaderboard in-game. If you opt in, we receive your public Minecraft username, your Minecraft account UUID and two gameplay statistics. We never receive your password, session token, e-mail address or any other account credentials.

1. Data controller

The data controller responsible for the Service is:

We have not appointed a Data Protection Officer, as we are not required to do so. For any question or request regarding your personal data, contact us at the address above.

2. Definitions

3. What data we collect, why, and on what legal basis

3.1 Global leaderboard submissions (only after opt-in)

When you first join a world with the Application installed, you are shown a consent dialog asking whether that world may take part in the global leaderboard. No data is sent to us unless and until you accept. If you accept, the Application sends the following to the Leaderboard Server over an encrypted (HTTPS) connection:

DataPurpose
Your Minecraft usernameDisplayed publicly on the leaderboard so that your score can be attributed to you.
Your Minecraft account UUIDStable identifier used to keep one entry per player even if you change your username, and to enforce leaderboard bans for cheating.
Gameplay statistics: deepest descend and highest character levelThe values ranked on the leaderboard.

Legal basis: your consent (GDPR Art. 6(1)(a)), given through the in-game dialog. You may withdraw your consent at any time – see section 8.

3.2 Account ownership verification

To prevent players from submitting scores under someone else’s name, the Application proves ownership of your Minecraft account using Mojang’s standard session-server handshake – the same mechanism vanilla Minecraft uses every time you join a multiplayer server. Your Minecraft session access token is sent only to Mojang’s own servers, never to us. The Leaderboard Server only receives your username and a one-time challenge value and asks Mojang to confirm the match. This process gives us no ability to access, modify or take over your Minecraft account.

Legal basis: our legitimate interest in keeping the leaderboard fair and preventing impersonation (GDPR Art. 6(1)(f)). This only takes place after you have opted in under 3.1.

3.3 Server logs

When the Application contacts the Leaderboard Server – whether to submit a score or simply to view the leaderboard – your IP address is technically visible to the server for the duration of the request, as with any internet connection. We do not keep access logs; IP addresses are not stored. Error diagnostics may transiently appear in the server’s system journal and are not used to identify players.

Legal basis: our legitimate interest in operating the Service securely (GDPR Art. 6(1)(f)).

3.4 Cheating exclusions

If a save file is detected as tampered with, or a player is found to be cheating, we may record the affected Minecraft UUID in an exclusion list so that further submissions from that account are rejected.

Legal basis: our legitimate interest in the integrity of the leaderboard (GDPR Art. 6(1)(f)).

3.5 What we do not collect

We do not collect your e-mail address, real name, password, Minecraft session token, chat messages, world contents, hardware or system information, or any usage analytics. We do not use cookies or any tracking technologies. We do not use advertising, remarketing or analytics services of any kind.

4. Public display

The leaderboard is public. Your Minecraft username, your rank and your submitted statistics are visible to anyone using the Application. Your UUID and IP address are never displayed.

5. Who we share your data with

We do not sell, rent or otherwise share your personal data with anyone else.

6. International transfers

Your data is stored and processed within the European Economic Area (EEA) and is not transferred to third countries.

7. How long we keep your data

DataRetention
Leaderboard entries (username, UUID, statistics)Until you withdraw consent or request deletion, or until the leaderboard service is discontinued.
IP addressesNot stored.
Cheating exclusion list (UUID only)For as long as the leaderboard service operates, as it is required to enforce the exclusion.

Residual copies may remain in backups for a short period after deletion and are not restored except for disaster recovery.

8. Your rights under the GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, e-mail us at arcaniumserver@gmail.com, stating your Minecraft username and UUID. We may ask you to verify account ownership before acting on the request. We will respond within one month.

To withdraw consent or have your entry deleted, simply e-mail us; we will remove it promptly.

9. Security

All communication between the Application and the Leaderboard Server is encrypted using HTTPS. Leaderboard submissions require a short-lived, per-session token that can only be used to submit scores for the verified account. No method of transmission or storage is completely secure, but we take reasonable technical measures to protect your data.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child has opted in to the leaderboard, contact us and we will delete the entry.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes are posted on this page with an updated “Last updated” date. Material changes affecting how your data is used will also be announced on the Application’s Modrinth page.

12. Contact

Questions about this policy or your personal data: arcaniumserver@gmail.com