This Privacy Policy explains how LanWarp processes personal data when you use the LanWarp app, the relays, the website lanwarp.com and its account area, and the LanWarp bot for Discord, and when you join a Minecraft server hosted with LanWarp. It applies under the EU General Data Protection Regulation (GDPR) and Italian data protection law.
1. Who is responsible
The data controller is Riccardo Barberini (LanWarp), an individual based in Italy. For any question about your data or to exercise your rights, write to [email protected].
2. Data we process, why and for how long
2.1 Your account
- Your email address or, if you sign in with Discord or Google, the account ID and email address they give us.
- The date you confirmed you are at least 14 years old, the date you accepted the Terms and their version.
- Your plan, its end date and how you got it (assigned by us or paid), and, if it happens, a suspension, its reason and its end date.
- The language of the app.
- Sign-in records kept by our sign-in provider for security, such as the time and IP address of a sign-in.
Why: to create and run your account and give you the Service you asked for (performance of a contract, Art. 6(1)(b) GDPR). The age confirmation and the acceptance of the Terms are also kept to show that you accepted them (legitimate interest in proving it, Art. 6(1)(f)).
How long: until you delete your account. Sign-in records are kept for a short period by the sign-in provider.
You need an email address, or a Discord or Google account, to use LanWarp: without it we can’t create an account.
2.2 Your servers
- Server names and addresses, the zone, the second line shown in the server list, the dates the server was created and last used.
- Technical data the relay needs to connect the server, such as a token and the player limit of your plan.
- Events the app sends to our backend: when a server starts and when a player joins it for the first time. These events don’t include players’ names.
Why: to run the Service (contract). How long: until you delete the server or the account. A chosen name you release is kept, without your account, for 30 days so that nobody else can take it immediately.
2.3 IP addresses of hosts
We record the IP address you use when the app or the website talks to our backend and when the app connects to a relay, with the first and last time we saw it.
Why: to protect the Service and prevent abuse, for example to recognize attacks or accounts created to get around a ban (legitimate interest, Art. 6(1)(f)). How long: deleted 60 days after we last saw that address.
2.4 Players who join a server
When someone joins a server hosted with LanWarp, the relay that passes the connection keeps a technical log: the player’s IP address, the Minecraft name the game sends, the server joined, the times of the connection and the amount of data transferred.
Why: to protect the Service and its users and to handle reports of abuse (legitimate interest). How long: 60 days, then deleted.
The relays also count joins by country, worked out from the IP address with a local database, and estimate the number of distinct players with a counter that can’t be turned back into names. Only these totals reach our backend, never the IP addresses or the names.
The host decides who can join their server and is responsible for what happens on it. The worlds, the player lists and the logs of the Minecraft server stay on the host’s PC: we don’t receive them, except for cloud backups (2.5).
2.5 Cloud backups
On Plus and Pro, the backups the app uploads: the world, the player lists of the server (names of players on the whitelist, operators and bans), the server settings and LanWarp’s settings for that server. They are stored in the European Union.
Why: the Service you asked for (contract). How long: until you replace or remove the copy, delete the server or delete the account; if your plan no longer includes cloud backups, 30 days after it ends.
2.6 Payments
Paid plans are sold by Creem (Armitage Labs OÜ, Estonia), which acts as reseller and Merchant of Record. Creem collects your payment details, name, billing address and email directly and processes them as an independent controller under its own privacy policy. We don’t receive your card details.
From Creem we receive: an ID for you as a customer and for your subscription, the plan and period, the status of the subscription, the end of the paid period, and notices of payments, refunds and disputes.
Why: to give you the plan you paid for and handle changes, refunds and disputes (contract), and to keep records of payments (legal obligation, Art. 6(1)(c)). How long: subscription details until you delete your account; records of payment notices, without your account, for as long as tax and accounting law requires (up to 10 years).
2.7 The Discord bot
If you connect the LanWarp bot to a Discord server, we process the data described in the bot’s privacy policy: the Discord server, channel and role you chose, your Discord ID, and the Discord IDs and names of members who use the bot’s buttons. While a connected server is on, the app sends us the Minecraft names of the players online, which are shown in the status message; we keep them only in memory, never in our database.
Why: to run the bot you asked for (contract). How long: until you disconnect the bot or delete your account; requests of members expire earlier, as explained in the bot’s privacy policy.
“Playing LanWarp” on your Discord profile goes from the app directly to the Discord app on your PC and doesn’t pass through our servers. You can turn it off in the app.
2.8 Crash reports
Only if you allow it in the app, technical reports of app errors are sent to our error monitoring provider in the European Union. Before sending, the app removes your Windows user name and the paths of folders on your PC and doesn’t attach any user, device or network details. The logs of your Minecraft server are never included.
Why: your consent (Art. 6(1)(a)). You can withdraw it at any time in the app settings. How long: up to 90 days.
2.9 Emails
We send sign-in codes and messages about your account, your plan and your cloud copy, such as the notice before a cloud copy is deleted. We don’t send marketing emails.
Why: to run your account (contract). When you write to [email protected], we keep the conversation for as long as needed to answer and handle any follow-up, and no longer than 2 years.
2.10 Reports
When you report a server at lanwarp.com/report, we receive the server address, your message and, if you give it, your email address. Your IP address is used, without being stored, to limit repeated reports and by the anti-bot check of the form.
Why: to handle reports and meet our obligations as a hosting service under the EU Digital Services Act (legal obligation and legitimate interest). How long: 12 months after the report is closed.
2.11 Moderation and security records
When we take a measure on an account or a server, such as a ban or a change of plan, we keep a record of the measure, its reason and its date, linked to the account ID.
Why: to apply the measure, answer complaints and defend legal claims (legitimate interest). How long: as long as needed for these purposes, considering the time limits for complaints and legal claims.
3. The website and cookies
3.1 Statistics without cookies
When you visit lanwarp.com, each page tells our backend which page you opened, the site you came from (only its domain), the code of the link or campaign in the address if there is one, how long the page was visible, and clicks on the download button and on links to other sites. Your country comes from the network, and the type of device, browser and operating system come from what your browser sends with every request.
We don’t store your IP address. Without your consent, nothing is stored on your device: to count unique visitors we combine your IP address and browser details with a key that changes every day and keep only the result, so we can’t recognize you on another day.
Why: to understand how the website is used and improve it (legitimate interest). How long: single visits and clicks are deleted after 90 days; daily totals are kept.
3.2 Cookies, only with your consent
The banner asks if you accept our cookies. If you accept, we set these first-party cookies on lanwarp.com (we don’t use advertising or third-party cookies):
| Cookie | What it does | Duration |
|---|---|---|
lw_consent |
Remembers your choice, also if you reject | 6 months |
lw_vid |
A random ID of your browser, to recognize returning visits in our statistics | 6 months |
lw_ref |
The code of the creator’s or server’s link you arrived from (lanwarp.com/?da=…) | 30 days |
With your consent we also use these cookies to attribute a new LanWarp account to the creator or server whose link you followed:
- if you create your account on the website, the website sends the code in
lw_refwith your sign-up; - if you click the download button, we keep, for 30 days, an encrypted fingerprint of your network (made from your IP address, or from the first half of an IPv6 address, with a key that changes every 30 days; the IP address itself is not stored) together with the code. If an account is created in the app from the same network within 7 days, it’s attributed to that code. If several browsers downloaded from that network in those days, for example on a mobile or office network, we don’t attribute anything.
The attribution is stored on the account (the code, how it was attributed and when) and is used to measure campaigns and, where agreed, to reward creators. It never includes your name or email in what we share with a creator: creators see only totals.
Why: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). You can change your choice at any time from “Cookie settings” at the bottom of every page: if you reject, lw_vid and lw_ref are deleted. Rejecting doesn’t change how the website works.
3.3 Storage needed for the website to work
If you sign in at lanwarp.com/account, your browser stores your sign-in session until you sign out, and, while you buy a plan, the plan you chose for the duration of the browser tab. This storage is needed for the service you request and doesn’t require consent.
4. Software downloaded from other publishers
When you create a server, the app on your PC downloads files directly from their publishers: the Minecraft server software, Java, and the plugins, mods and modpacks you choose. These publishers receive your IP address and process it under their own privacy policies. We don’t receive this data.
5. Who receives data
We share personal data only as needed to run the Service, with:
- providers that process data on our behalf, under a data processing agreement: hosting of our backend, database and sign-in, network and relay servers, content delivery and security for the website and backend, storage for cloud backups, email delivery, error monitoring (only with your consent), and our email inbox;
- Creem, as seller of paid plans and independent controller (2.6);
- Discord and Google, only if you sign in with them or use the bot, as independent controllers under their own policies;
- authorities, when the law requires it.
We don’t sell personal data and we don’t use it for advertising.
6. Transfers outside the European Economic Area
Our backend, database and cloud backups are in the European Union. Players’ connections pass through the relay of the server’s zone, and zones also exist outside the European Economic Area (in Europe, North America and Oceania): the relay of such a zone processes the IP address and Minecraft name of the players who join servers in that zone. Some of our providers are also part of groups based outside the EEA.
These transfers rely on an adequacy decision of the European Commission where one exists for the country (for example the United Kingdom, Switzerland and Canada) and otherwise on the standard contractual clauses approved by the European Commission, with additional measures where needed. You can ask us for information about the safeguards at [email protected].
7. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting what was done before. To exercise them, write to [email protected] from the email of your account; we answer within one month.
- Export: “Download my data” at lanwarp.com/account gives you your account data as a file.
- Deletion: “Delete account” at lanwarp.com/account or in the app deletes your account and its data. Copies may remain in our encrypted backups for up to 30 days, and the records described in 2.6 and 2.11 are kept as stated there.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where an alleged infringement took place. In Italy it is the Garante per la protezione dei dati personali (www.garanteprivacy.it).
We don’t make decisions about you based only on automated processing that have legal or similarly significant effects.
8. Security
We protect personal data with technical and organizational measures appropriate to the risk, such as encryption of connections and backups, access limited to what is necessary, and limits against abuse. No system is perfectly secure: if a breach puts your rights at risk, we inform you and the authority as the law requires.
9. Children
LanWarp is for people aged 14 and over, or older where the law of their country requires a higher age to use online services without a parent’s consent. If you think a younger child has an account, write to [email protected] and we will delete it.
10. Changes
We may update this Privacy Policy when we change the Service or when the law changes. We tell you about important changes by email or in the app. The version and date at the top of this page show the current version.