Data processing agreement

This agreement explains how we process your players' data for you. It is part of our terms of service and applies as soon as you connect a server or a store. It meets the requirements of Article 28 of the GDPR.

The parties

• You, the account holder who owns a brand in DataWiser, are the controller of the personal data of the players on your servers and the buyers in your store.
• NPS Services, KVK 86386034, which runs DataWiser, is the processor. Our details are on the company details page.

What we process, and why

Purpose. To give you player, revenue and server statistics and alerts in the DataWiser panel, for the servers and stores you connect, and nothing else.

Whose data. The players who join your servers, and the people who buy in your connected store.

Which data.

• From the plugin: each player's Minecraft UUID and name, their client platform (Java or Bedrock) and version, the hostname they connected through, when they joined and left, and a random ID for each visit. Their country, which we look up from a cut-down IP address prefix that the plugin sends and that we discard before anything is stored.
• From your store: each purchase's amount, currency, packages, coupon or creator code, status and time, the buyer's Minecraft name and UUID, and the buyer's country as your store reports it. We drop the buyer's email address, IP address, postal address and real name before we process anything.
• Server data (player counts and server health) is not personal data.

How long. As long as your account exists, within the retention periods in the annex below.

What we promise you

1. Your instructions. We process the data only on your documented instructions: these terms and what you set up in the panel. If we think an instruction breaks data protection law, we'll tell you.
2. Confidentiality. Everyone who can access the data is bound to keep it confidential.
3. Security. We protect the data with the measures in the annex below.
4. Subprocessors. You allow us to use the subprocessors listed below. We'll tell you, on this page and by email, at least 14 days before we add or replace one. If you object and we can't resolve it, you can stop using DataWiser and delete your account. Each subprocessor is bound by data protection obligations at least as strict as these.
5. Your players' requests. A player's profile in the panel shows everything we hold about them. If a player asks you to have their data erased, or you need other help with a request, email [email protected] and we'll do it, or help you do it, within 30 days. If a player contacts us directly, we pass the request on to you and don't answer it ourselves.
6. Breaches. If a personal data breach affects your data, we'll tell you without undue delay, and no later than 48 hours after we become aware of it, with the information you need to meet your own obligations.
7. Other help. We'll give you the information you reasonably need for a data protection impact assessment or for a question from a supervisory authority.
8. Deletion. When you delete your account, we delete the data 30 days later, and it's gone from our backups 28 days after that. We return or delete data earlier if you ask, unless the law requires us to keep it.
9. Proof and audits. We'll give you the information you need to show that we meet these obligations. You may also have us audited, at your own cost, with reasonable notice, no more than once a year unless there has been a breach.

Subprocessors

Resend and Cloudflare are US companies, so for any data that could reach the United States we rely on the EU-US Data Privacy Framework.

These are not subprocessors: Paddle, which handles subscriptions as an independent controller and never receives player data; DB-IP, whose country database is a file on our own server; and Tebex and Discord, which are your own accounts and receive data only where you point us.

Annex: retention

Annex: security measures

• All traffic between the plugin, your browser, Cloudflare and the panel is encrypted with HTTPS.
• The panel, its database and its backups are hosted in Germany.
• Player IP addresses are cut down on your server before they're sent, and the prefix is discarded after the country lookup. No IP address is stored.
• Buyer email, IP address, postal address and real name are dropped from store data before processing.
• Store secret keys are encrypted and can't be read back once saved.
• Passwords are stored as hashes, and two-factor authentication is available to every account.
• Access to a brand's data is limited to its owner and the team members they invite, per section.
• Backups are overwritten after 28 days.