What we know about you

Who holds it

The controller for everything on this page except payments is TheLilBigBoss (lectr1c), an individual based in Sweden rather than a registered company, who operates the CarbonNetwork servers at mc.carbonnet.work and this website.

For payments, the controller is Tebex — see below.

What we hold, and why

• Your Minecraft UUID, and the name attached to it

  The UUID is the key everything else hangs off, because it is the one thing that survives a name change. Your current and previous usernames are stored with it so staff and other players can find you.

• What you did in game

  Homes, claims, town membership, balance, shops, battle pass progress, ranks, cosmetics, vote streaks, duel results. This is the save file — without it there is no account to come back to.

• Chat and commands

  Public chat, private messages and the commands you run are logged so a report can be checked against what happened rather than against two people’s memories. Anything that looks like a password is redacted before the line is written.

• Connection records

  When you joined, from which IP address, and on which client version. These are what make a ban hold and what tells an alt account from a shared household.

• Your Discord ID, if you link one

  Only the numeric ID and the link to your UUID. Linking is optional; it is what lets your rank appear as a Discord role.

• Tickets and appeals

  Whatever you write to us, and our reply, kept with the moderation record it belongs to.

We do not ask for your real name, your address, your date of birth or your phone number, and there is nowhere to give them to us. If you type one into chat, it is in the chat log like anything else — which is a good reason not to.

Payments: Tebex is the merchant, and the controller

Every purchase on this site goes through Tebex. Tebex is the merchant of record and the data controller for the payment. They collect and hold your payment details, your billing information and whatever their fraud checks need, under their own privacy policy, and they are who your bank sees on the statement.

Card numbers never reach us, and there is no code on our side that could receive one. What comes back to us is the fact that a package was bought, a transaction reference, and which Minecraft account it was for — enough to give you the rank and to look the purchase up if you ask us about it.

Your basket lives in your browser as an identifier in localStorage so it survives a reload, and the checkout itself happens on Tebex’s own pages under their cookies. A refund or a billing question is therefore partly theirs and partly ours — refunds says which is which.

This website

There is no analytics, no advertising network and no tracking cookie on this site. Nothing here profiles you and nothing here follows you off it.

Two things are stored in your browser, both by us and neither sent anywhere:

• Your theme

  Light or dark, so the page does not flip back every time you open it.

• A basket identifier

  A random string Tebex gives us for your basket. It is what makes a basket survive a reload and a trip through sign-in; it holds nothing about you.

This website is hosted on GitHub Pages, which will see ordinary web-server request logs. The site itself is static: it sets no cookies, runs no analytics, and the only thing it stores in your browser is your theme choice and, if you have opened the store, the Tebex basket identifier.

Discord

Our Discord server is Discord’s platform, and Discord Inc. is its own controller for everything you post there. What we add is the link between your Discord ID and your Minecraft UUID — that is the whole of it, and it is what makes your in-game rank show up as a role, and a reward earned in Discord show up in game.

Unlinking removes the link. It does not remove your messages from Discord, which is Discord’s to delete, not ours.

Who else sees it

Nobody buys this data, because it is not for sale. It reaches other people only where the service needs it to:

• Tebex — payments, as above.
• Discord — anything in our Discord, and the account link.
• Vote sites — when you vote, the list you voted on tells our server the username you typed. We send them nothing; they send us one line.
• Staff — moderators can see chat logs, command logs and connection records for the accounts they are dealing with. Staff access is itself logged.

Why we are allowed to hold it

Running the servers you asked to play on needs your UUID, your progress and your purchase state — that is the contract between us. Moderation records, connection records and anti-cheat data are held on the basis of our legitimate interest in the servers being usable: without them a ban is a suggestion, and a griefer is anonymous.

Linking Discord is consent, and you can withdraw it by unlinking. Marketing is consent too — we do not send any, and there is nowhere to sign up for any.

We are established in Sweden, so the law that applies here is the EU GDPR, together with the Swedish Data Protection Act that supplements it.

How long

Gameplay data lives as long as your account does. A world reset at the end of a season takes the world with it, but not your rank, your player card or your ban history.

Chat and command logs are kept for two months, and connection records including IP addresses for two months. Ban and punishment history (warnings, mutes, bans and the reason for each) is kept for as long as your account exists, and a world reset doesn’t clear it.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, object to us holding it, or ask for a copy in a portable form. Ask through mc.carbonnet.work@gmail.com, or from the contact page.

We will check you are who you say you are before answering, which for a Minecraft account means from the linked Discord account or from in game — we have no other way to tell, and handing one player’s history to another because they knew a username would be worse than a slow reply.

Two honest caveats on deletion. Erasing your data takes your ranks, claims, homes, balance and progress with it, and it cannot be undone. And we keep your ban and punishment history even after a deletion, plus anything Tebex has to keep for tax and accounting, which is theirs to keep rather than ours to delete.

If you think we have got this wrong you can complain to us first and to a supervisory authority afterwards. Ours is the Swedish authority, Integritetsskyddsmyndigheten (IMY). If you live elsewhere in the EU or EEA you can also complain to the authority in your own country.

Children

Plenty of our players are young. We do not knowingly collect anything from a child beyond the account data described above, we do not profile anyone, and we do not advertise to anyone. A parent or guardian can ask us to delete a child’s data using the same route as anyone else.

CarbonNetwork is built to suit players aged 10 and over. That is a judgement about the content, not a legal threshold.

The legal threshold is separate. Because we are established in Sweden, Swedish law sets the age at which you can consent to an online service yourself at 13. Under 13, the parts of this notice that rely on your consent — linking Discord, essentially — need a parent or guardian to agree instead. Everything else we do rests on performing the service or on our legitimate interest in keeping it running, not on consent. If you are in another EU country your own national age applies, which is somewhere between 13 and 16.

Changes

When what we collect changes, this page changes with it and the change is noted on news. Last updated 17 September 2026.