Who We Are
LeoneMC is not a registered company. The data controller for the personal information described in this policy is the person or people who run LeoneMC.
You can contact us by emailing gaming@leonecali.com, by opening a ticket at leonemc.net/support, or on our Discord.
LeoneMC has not appointed a Data Protection Officer because it isn't legally required to.
1 Information We Collect
1.1 Account & Login Information
When you create an account or log in, we may collect:
- Your chosen display name and password (stored as a secure hash, never in plain text)
- Information from third-party login providers you choose to use, including your Google account email and avatar, or your Discord user ID, username, and avatar
- Your linked Minecraft account (username and UUID)
1.2 Gameplay & Server Data
When you play on our Minecraft servers, we collect:
- Your Minecraft username and UUID
- Your IP address, including a history of IP addresses used to connect, which we use to detect duplicate/alternate accounts and prevent abuse
- Approximate geographic region (country/region only, derived from your IP address) used to route you to the nearest server — this is not stored long-term
- Session data: first login date, last played date, last server joined, and total playtime
- In-game friends and ignored-player lists
- In-game currency/points balances and settings preferences
- Chat messages sent in-game, which may be retained as evidence if you are reported for a rule violation
1.3 Moderation Records
If you receive a warning, mute, ban, or other moderation action, we retain:
- Your username and UUID
- The reason, duration, and type of action, and the staff member who issued it
- The IP address associated with the account at the time of the action
- Supporting evidence, which may include recent chat messages, screenshots, or video links submitted by staff or other players
1.4 Discord Information
If you interact with our Discord server or bot, we may collect:
- Your Discord user ID and username
- Messages you send in support ticket channels, which are saved as transcripts for record-keeping
- Information you submit through staff applications or punishment appeal/report forms
- Your linked Minecraft account, if you use our account-linking feature
1.5 Website Usage
Our website uses a session cookie to keep you logged in. We do not use third-party advertising or analytics trackers. Your IP address is used briefly to rate-limit requests to our website (to prevent abuse) and is not permanently stored.
2 How We Use Your Information
We use the information above to:
- Authenticate you and maintain your account and session
- Operate core gameplay features (friends lists, cross-server messaging, currency, preferences)
- Detect and prevent cheating, abuse, and the use of duplicate/alternate accounts to bypass punishments
- Investigate and enforce our rules, including issuing and reviewing bans, mutes, and other moderation actions
- Route you to the server region nearest you
- Respond to support requests and applications submitted via Discord
- Communicate service updates (e.g., changelog announcements)
2.1 Our lawful basis
UK data protection law requires us to have a lawful basis for each way we use personal information.
- Accounts, gameplay data, IP address history, moderation, support tickets and staff applications: legitimate interests under Article 6(1)(f) UK GDPR, for the purposes described in Section 2.
- Screenshares: legitimate interests under Article 6(1)(f) UK GDPR, namely preventing cheating and keeping the server fair.
Before a screenshare, the player (or, for players under 13, their parent or guardian) is asked to authorise it. That authorisation is the permission for staff to access the computer remotely. It is separate from the lawful basis above: we do not rely on consent as our lawful basis for screenshares.
Where we rely on legitimate interests, you can object to the processing (see Section 6.1).
4 Data Storage & Retention
- Account, gameplay, and moderation data is stored in our databases for as long as your account is active or as needed to enforce our rules and resolve disputes.
- IP address history and moderation evidence are retained to prevent repeat rule violations, even after a ban expires. This does not apply to screenshare material, which follows the periods below.
- Discord ticket transcripts and applications are retained for record-keeping and staff accountability.
- You may request deletion of your account data by contacting us (see Section 7), subject to our need to retain moderation records for community safety.
4.1 Screenshare records
All screenshare material (the screen and voice recording, any files copied from the computer, RAM captures, and the record of each choice made) is stored for a maximum of six months from the date of the check and is then permanently deleted. It may be deleted sooner, as follows:
- No ban: deleted 14 days after the investigation ends.
- Temporary ban: deleted 14 days after the ban ends.
- Permanent ban: deleted six months after the investigation.
- Refusals, admissions and authorisation logs (the record of each choice made during a screenshare request, with the time it was made) follow the same periods, depending on the outcome.
- RAM captures are deleted as soon as analysis is finished.
- No exceptions apply to the six-month maximum, including during an appeal.
You have the right to stop a screenshare at any time. After a check, you (or, for a child, their parent or guardian) can request a copy of the recording at any point while it is stored by opening a ticket at leonemc.net/support or emailing gaming@leonecali.com.
5 Children's Privacy
LeoneMC is likely to be used by children and young people, and we recognise that they need additional protection and clear explanations about how their personal information is used. We take the ICO Children's Code into account when designing and operating our privacy processes. This includes using clear, age-appropriate information, considering children's best interests, collecting only information that is necessary, and providing practical ways for children and their representatives to exercise their rights.
Children have data protection rights of their own. A parent or guardian may sometimes act on behalf of a child, but whether they can exercise a particular right for a child depends on the child's age, understanding, capacity and circumstances. See Section 6 for how children can make a request.
5.1 Screenshare investigations
Before a screenshare begins, the player selects their age group (18 or over, 13 to 17, or under 13). Only staff aged 18 or over who are authorised to carry out screenshares can run a check.
- 13 to 17: the player may have a parent or carer present during the check if they wish. Staff will never ask for passwords or unrelated personal information.
- Under 13: a parent or legal guardian must authorise the screenshare before it can begin. We email them a secure approval or decline link, which expires after 20 minutes. Nothing is recorded and the check does not start until that authorisation has been received, and it will not go ahead if staff have reason to doubt the approval came from a parent or legal guardian.
This requirement concerns the screenshare procedure and does not remove the child's own data protection rights. Parents and guardians do not need Discord; they can contact us about a check or their child's information at gaming@leonecali.com.
The choices. In every age group, including under 13, the player can choose to start the screenshare (under 13, by asking a parent or guardian), refuse it, or admit to cheating instead, which gives a reduced ban. Refusing, or a parent or guardian declining or not responding in time, counts as a refusal under the server rules. We log each choice with the time it was made.
What staff may examine.
- Minecraft, launcher, mod and client files
- Running programs
- Windows records (Prefetch, BAM, NTFS journal)
- File and folder name searches, which may cover the whole computer
- Where necessary, a RAM capture (a copy of the computer's memory), which can contain unrelated data such as passwords, messages, browser pages or login session tokens
Staff only review relevant information and don't deliberately open or copy unrelated files.
Tools. AnyDesk, BAM Parser, PrefetchView, JournalTrace, CheckDeletedUSN, Everything, System Informer, KernelLiveDumpTool, and client-detection tools for specific known hidden cheat clients. Staff may use other tools only if the tool runs locally, sends no data to LeoneMC or anyone else, examines only the kinds of information listed above, and is removed when the check ends.
Where the data comes from.
- The player: their age group, their choices, and what they say on the call
- Their computer, during the check
- Their Discord and Minecraft accounts
- For players under 13, the parent or guardian: their email address, and whether they approved or declined
Decisions. No ban is ever made solely by automated means. Tools can flag things, but a staff member always reviews the evidence and decides.
Security.
- Only authorised staff aged 18 or over run checks.
- Access to evidence is limited to staff involved in the investigation, a review or an appeal.
- Staff are instructed not to open, copy or keep unrelated material.
- Checking tools and AnyDesk are removed afterwards.
- The investigation tools send no data outside LeoneMC.
- Data is deleted on schedule (see Section 4.1).
6 Your Data Protection Rights
You have rights over the personal information LeoneMC holds about you, including any screenshare investigation records. You do not need to be in a screenshare, under investigation, or banned to ask about your data.
6.1 What can I ask LeoneMC for?
- Access my information: You can ask whether we hold personal information about you and ask for a copy of it, plus information about how and why we use it and who it has been shared with. This is commonly called a Subject Access Request (SAR).
- Correct my information: You can ask us to correct inaccurate personal information or complete information that is incomplete.
- Delete my information: You can ask us to erase personal information where the law gives you a right to have it deleted. This right is not absolute; there may be circumstances in which LeoneMC is legally permitted or required to keep information.
- Restrict how my information is used: In certain circumstances, you can ask us to restrict how your information is processed while an issue is being considered.
- Object to processing: Where the legal conditions apply, you can object to LeoneMC processing your information. For processing based on legitimate interests, an objection can require LeoneMC to stop unless we can show the legal grounds required to continue.
6.2 How do I make a request?
- Website: open a ticket at leonemc.net/support
- Email: gaming@leonecali.com (you don't need Discord)
- Discord: open a ticket in the LeoneMC Discord
You can make a request in ordinary language. For example:
- “I would like a copy of the personal information LeoneMC holds about me, including any screenshare records.”
- “I want LeoneMC to delete my personal information where you are legally able to do so.”
6.3 How long will LeoneMC take?
We will normally respond without undue delay and within one month. In some circumstances the law allows extra time, for example where a request is unusually complex or someone makes multiple requests. We may ask for reasonable information to verify your identity or to clarify what you are asking for.
6.4 Can children use these rights?
Yes. A child may be able to exercise their rights personally, depending on their age, understanding and capacity. A parent, guardian or other authorised representative may sometimes act for a child, but LeoneMC may need to consider whether that is appropriate and in the child's best interests. Parents and guardians can contact us at gaming@leonecali.com.
6.5 Can LeoneMC refuse my request?
Some rights have legal exceptions or limits. For example, LeoneMC may need to keep information because it is necessary for an active ban, an appeal, a legal obligation, or another lawful purpose. If we refuse all or part of a request, we will explain why where the law allows.
6.6 Do I need a lawyer?
No. You can exercise your rights yourself, or have another person represent you where the law permits.
6.7 What if I am unhappy?
Contact LeoneMC first at gaming@leonecali.com. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113. If you live in the European Union, you may also have the right to complain to your local data protection authority.
6.8 Screenshares and your rights
Your data protection rights are separate from LeoneMC's server rules. Asking to see, correct, restrict or delete personal information does not itself mean a screenshare has been authorised, stopped, declined or overturned. Likewise, a screenshare refusal rule does not remove your statutory data protection rights.
To appeal a ban, use the appeals process at leonemc.net/support.
7 Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please open a ticket on our website, reach out via our Discord, or email gaming@leonecali.com.
8 Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new ‘Last updated’ date.
This policy was last updated on October 5, 2026.