Privacy Policy

This Privacy Policy informs you, pursuant to Art. 13 and Art. 14 of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR / DSGVO) and applicable national rules (in particular the BDSG), about the processing of personal data in connection with Mantory (Website, customer Panel, Minecraft Java hosting, billing, and support).

Related documents: Terms of Service · Payments · Imprint

1. Controller

The controller responsible for data processing is:

Mantory, operated by Ali Rayan
Sole trader / Kleinunternehmen (§ 19 UStG)
Welserstraße 3
87463 Dietmannsried
Germany

VAT ID: DE462682632

Public contact for privacy and support: [email protected]
You may also use the Support page.

Mantory is a Templass product. Templass (templass.com) and Mantory (mantory.net) are brands operated by the same natural person, Ali Rayan. There is one controller; brand naming does not create a separate legal entity.

No data protection officer (DPO) has been appointed (Kleinunternehmen; the statutory appointment obligation under § 38 BDSG / Art. 37 GDPR does not, in our assessment, apply).

Provider statutory notices: Imprint.

2. General information on processing

2.1 Scope

We process personal data only as needed to run the Website and Panel, provision and host your Minecraft Java World, answer support tickets, prevent abuse, and meet German and EU bookkeeping and legal duties. The public Service is free; we do not bill or renew Free Plan Worlds.

2.2 Legal bases

Unless a section below says otherwise, we rely on:

• Art. 6(1)(b) GDPR – contract or pre-contractual steps (account, Panel, hosting);
• Art. 6(1)(c) GDPR – legal obligations (commercial and tax retention);
• Art. 6(1)(f) GDPR – legitimate interests (IT security, abuse prevention, stable hosting and Website/Panel operation, DDoS filtering), unless overridden by your interests or fundamental rights;
• Art. 6(1)(a) GDPR – consent, only where we actually obtain it.

2.3 Offerings covered

Hosting runs on Mantory nodes in Frankfurt, Germany. DDoS filtering sits on the Templass path in front of those nodes.

3. Website, Panel, hosting, and connection data

3.1 Server logs

When you use the Website or Panel, hosting and security layers process technically necessary connection data, typically:

• IP address;
• date and time of the request;
• requested URL / resource;
• HTTP status code;
• bytes transferred;
• referrer (if sent);
• user agent.

Purpose: delivery, stability, error analysis, abuse and security defence.
Legal basis: Art. 6(1)(f) GDPR.
Retention: access logs rotate on a short cycle (target: no later than 14 days), unless we need them longer for a concrete incident.

3.2 Hosting and Cloudflare

Website and Panel traffic is delivered via infrastructure in Germany (including Skrime-hosted capacity used for Mantory) and Cloudflare proxy / CDN protection in front of Mantory properties.

Cloudflare, Inc. may process IP address, request metadata, and security signals to provide proxy, CDN, and abuse protection.

• Purpose: secure, fast delivery and attack mitigation.
• Legal basis: Art. 6(1)(f) GDPR.
• Third country: Cloudflare is based in the USA; transfers are addressed in Section 11.

3.3 Cookies and similar

The Website may use a session cookie for basic navigation. The Panel uses a login / session cookie so you stay signed in.

You can refuse non-essential cookies in your browser; the shop still works, but you may need to sign in again. We do not run advertising pixels on the Panel.

4. Account and (future) billing

When you create an account we process:

• email address and password hash (we do not store plaintext passwords);
• username and security settings you choose (including two-factor if enabled);
• Plan selection for your World (today: the Free Plan);
• invoice or payment fields only if a paid Plan is used later.

Purpose: perform the hosting contract. Free Plan Worlds are not billed.
Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.
Retention: account records stay while the account is open and for the retention German tax and commercial law requires after that (typically up to 10 years for certain booking records, if any invoices exist).

4.1 Stripe and PayPal

The Panel can talk to Stripe and PayPal if a paid Plan is offered later. Free Plan Worlds do not use those processors. If you never pay, we do not send a checkout to them for that World.

Those providers would process payment data under their own terms and privacy notices. Mantory would receive confirmation of payment and identifiers needed for reconciliation. We do not store full card numbers (PANs).

Legal basis if used: Art. 6(1)(b) GDPR; Art. 6(1)(f) for fraud prevention where applicable.

5. Email and support

Transactional and support email is sent and received through our mail hosting at eu1.workspace.org (including the mailbox [email protected]).

We process ticket content, crash reports you upload, and correspondence needed to help you.

Purpose: support and service messages.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.
Retention: tickets and mail are kept as long as needed for the enquiry and a reasonable follow-up period, then deleted or archived under our retention practices, unless law requires longer.

6. Minecraft Worlds, Panel logs, and backups

To run your World we process files and telemetry you create or that the platform generates, including:

• world folders, plugins, mods, configs, and databases you enable;
• Panel console logs, crash reports, resource usage meters;
• SFTP access metadata for your account;
• backups and snapshots you create in the Panel.

Purpose: provide hosting, backups, abuse response, and technical support.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.

After you remove a World (or after we close it), files remain available for download for 14 days, then are deleted, unless we must retain data for an ongoing abuse or legal investigation, or law requires retention of invoices and account records.

We do not sell player lists or ticket contents.

7. Players on your server

You are the operator of the Minecraft World toward your players. Player skins, chat, whitelist data, and IPs that land in your server logs or plugins are your responsibility. Use a privacy note on your Discord or website if you run a public server. We only see that data as the host, for providing the Service and stopping abuse.

8. Children

The shop is for adults buying hosting. Minecraft servers often have younger players; that is your community, not an account we create for a child. Do not create a Mantory account for a child.

9. Recipients and processors (overview)

We pick EU-based processors when we can. If a tool sits outside the EU, we use a transfer mechanism that matches GDPR rules (see Section 11).

10. Your rights

If you are in the EU or EEA you can ask for:

• access (Art. 15 GDPR);
• rectification (Art. 16);
• erasure (Art. 17), where we are not required to keep invoices or other records;
• restriction (Art. 18);
• data portability (Art. 20);
• objection to processing based on Art. 6(1)(f) (Art. 21).

Contact [email protected]. You can complain to your local data protection authority. In Germany that is your state commissioner; for Frankfurt operations the Hessian commissioner is among the relevant authorities.

11. Transfers outside the EEA

Some processors (notably Cloudflare, Stripe, and PayPal) may process data in the United States or other third countries. Where required, transfers rely on an adequacy decision (including the EU–US Data Privacy Framework where the recipient is certified) and/or Standard Contractual Clauses, plus any supplementary measures the provider documents. Details are in each provider’s privacy documentation.

12. Security

We use industry-standard measures appropriate to game hosting (access controls on the Panel, TLS on public sites, network filtering). No method of transmission or storage is perfectly secure. Keep your Panel and SFTP credentials private.

13. Changes

We may update this Privacy Policy. The “Last updated” date will change. Material changes will be announced on the Website and/or by email where practicable.

14. Contact

Privacy and support: [email protected] · Support
Provider details: Imprint
Terms: Terms of Service · Payments: Payments