YOUR COMMUNITY. YOUR INFORMATION.
Privacy at Limburgia.
Draft — registration is closed while the operator's contact details, email service and hosting arrangements are being finalized. Last updated: 22 October 2026.
Who runs this community?
Limburgia is an independently managed Minecraft community. The operator's legal name and privacy contact will be published here before registration opens to the public. This draft does not certify GDPR compliance.
What the website stores
When you register, the community stores your email, a salted password hash, email-confirmation status, account creation date and email preferences. Your password is not stored in readable form. Signed-in sessions and email links use random tokens; sign-in and confirmation tokens are stored as hashes.
Your chosen profile name, handle, biography, posts, screenshots, comments and likes support the community features. These are shared with visitors who can access the website. Your email, password hash and session tokens are not shown on your profile. Website accounts are separate from Minecraft and Xbox accounts.
Optional Minecraft account linking
You can link your Minecraft account by entering a temporary website code while signed in on the Limburgia game server. Linking stores your Minecraft UUID, player name, linking date and a head-and-shoulders portrait rendered from your skin. Your Minecraft name and portrait are public on your community profile. Your Microsoft or Minecraft password is never requested. Linking codes are stored as hashes, expire after ten minutes and can be used only once. You can unlink from Account settings; this removes the link and portrait without changing your Minecraft progress. Skin portraits are served by this website rather than a third-party avatar service. The game server downloads the skin from Minecraft’s texture service when producing the portrait.
Why it is used
Account and profile data are used to provide the community service you request: signing in, publishing your content and managing your account. Basic abuse-prevention controls protect accounts and other members. Short-lived hashed email/network-address keys count sign-in attempts; the application does not save raw IP addresses in these rate-limit records. Reports are reviewed by the community moderator. Marketing is separate and optional and uses your consent, not a condition of membership.
News and promotional offers
The registration checkbox is off by default. Choosing it allows Limburgia to email you about server news, community events and Limburgia promotional offers. It does not permit selling your email to third parties or unrelated advertising. We record your choice, time and the wording version. You can withdraw consent in Account settings or through an unsubscribe link without deleting your account. Essential confirmation and recovery emails are separate.
Hosting and email
The website is hosted through OpenAI Sites using Cloudflare runtime, D1 storage for records and R2 storage for screenshots. The email provider is not connected yet. Hosting and email providers may process connection and delivery metadata to run their services. The operator must confirm the relevant processor terms, international-transfer safeguards, log retention and backup-deletion arrangements before public registration opens.
Storage and removal
Your profile and content remain while you use the service, unless you remove them or a moderator removes a post. You can remove your own posts and comments. Deleting your community account removes its profile, posts, screenshots, comments, likes, reports and email preferences from the application. Replies on your removed posts are also removed.
Unconfirmed registrations are removed during account activity after their 24-hour confirmation window. Sessions expire after seven days. Email confirmation links expire after 24 hours and password-reset links after 30 minutes. Failed sign-in rate-limit records expire after 15 minutes. Expired records are cleared during account activity. The operator is still confirming hosting-log and backup retention; an application deletion must also be handled correctly if a backup is restored.
Your choices and rights
In Account settings you can update your email preference, download your application data and delete your account using your password. You can edit your public profile from the community page. You may also ask the operator for access, correction, erasure, restriction, data portability or objection where applicable. Contact details will be added before public registration. You can complain to the Dutch data-protection authority, the Autoriteit Persoonsgegevens.
Cookies and other services
The community sets a Secure, HttpOnly, SameSite session cookie when you sign in. It is needed to keep you signed in and expires after seven days or when you sign out. The application does not add advertising pixels or third-party analytics. Fonts are served by this website. The hosting platform may have its own authentication and security cookies; its policies apply separately. External Discord and other links connect to those services only when you open them.
Age and safe sharing
Registration is currently limited to people aged 16 or older. Do not post other people's personal details, passwords, private messages or identifiable information without permission. Screenshots can contain private chat or personal details; review them before uploading.