Last updated: 8 October 2026 · Applies to: Haven SMP Minecraft servers, our Discord server, our support/ticket systems and the havensmp.co.uk website (the "Services")
1. Who we are
Organization: Haven SMP ("we", "us"). Minecraft server: haven.smpserver.net. Discord: discord.gg/HQzQRNGcuD. Privacy & support contact: matthewhaff3@gmail.com.
Haven SMP is an 18+ community. Access to the Minecraft server is by whitelist application through our Discord server, where applicants are asked to state their age; applicants must be 18 or over. Our Services are not directed at children.
We do not knowingly collect personal data from anyone under 18. If we become aware that an under-18 is using the Services, we will remove their access and delete the associated data, other than any minimal record needed to prevent re-registration. Age is self-declared and we do not carry out formal age verification.
2. What we collect and store
Account identifiers: your Minecraft UUID and current username (historical usernames may appear in retained support/moderation records or be derivable through UUID linking).
Network & security logs: IP address history associated with logins and related timestamps.
Moderation records: ban and mute history, including status, reason label, timestamps and duration where applicable.
Support & reports: ticket transcripts and support history (including player reports), which may include attachments or links provided by users or staff. Tickets are opened through a bot on our Discord server, which creates a private channel visible to you and to Haven staff; we process your Discord username and ID together with whatever you send in that channel.
Whitelist applications: access to the Minecraft server is by application through our Discord server. We retain the application and the answers given in it, including your stated age and Discord identity, so we can verify eligibility for our 18+ community and check prior applications.
Voice chat: Haven uses Simple Voice Chat, a third-party proximity voice mod, running with its standard configuration. Voice audio is transmitted between players in real time (encrypted, over a dedicated UDP port) so it can be heard in game.
We do not record, store, monitor or listen back to voice chat. Simple Voice Chat does not save audio on the server, and we have not installed any recording add-on. No voice files exist on our systems, so there is nothing for us to disclose, retain or delete. If we ever introduce voice recording, we will update this policy and notify players before doing so.
Please note that Simple Voice Chat includes a recording feature that runs on a player's own computer. If another player records a conversation, that recording is held by them, not by us, and is outside our control.
Website analytics: our website uses Cloudflare Web Analytics to count page views and visits. It does not use cookies or local storage, does not fingerprint your device and does not track you across other websites. When a page loads, Cloudflare receives technical details of that page view (such as the page address, the referring page, browser type, country and page load timings) and turns them into aggregate statistics. We only ever see those totals, never individual visitors. We use it on the basis of our legitimate interests in understanding how the website is used and keeping it fast.
Live map: the live map on our website (havensmp.co.uk/map) publicly shows the Minecraft username, skin head and in-game position of every player online in the Overworld, updated every few seconds. Players in spectator mode or with the invisibility effect are not shown, and there is no other way to hide from the map. The map shows current positions only; it does not keep a history of where players have been. Skin heads come from mc-heads.net but are fetched through our website, so visitors’ browsers never contact mc-heads.net directly. The map page uses the same cookie-free Cloudflare Web Analytics as the rest of the website. We do this on the basis of our legitimate interests in letting the community see the shared world. If you have concerns, contact us using the details in section 1.
Client integrity checks (anti-cheat): performed in real time in memory to detect unauthorised modifications. No data from these checks is stored.
3. What we do not store
- Your Minecraft client version
- Anti-cheat check results, fingerprints, or mod lists
- A separate permanent archive of all Discord messages (Discord content follows Discord's own retention and our server configuration)
- In-game chat logs — we do not run a chat filter and do not capture or store in-game chat, except where you or another player quote it to us in a support ticket or report
- Any voice chat recordings — voice is transmitted live and is not captured, stored or reviewable by us
4. Why we collect it, and our lawful basis
To operate the Services, prevent abuse and ban evasion, investigate and enforce rule violations, respond to support requests and reports, and protect the security of our infrastructure and community.
We process this data on the basis of our legitimate interests (UK GDPR Article 6(1)(f)) in running a secure, well-moderated server, preventing abuse and ban evasion, resolving disputes, and protecting our players and infrastructure. We aim to collect only what is needed for those purposes and to keep it no longer than necessary — see sections 3 and 7. Where we are required to retain or disclose data to comply with a legal obligation, we rely on Article 6(1)(c).
5. Where the data is stored
In our game server databases and logs, our support/ticket systems, and Discord channels used for moderation and support records. Data may be processed and stored in different jurisdictions depending on our infrastructure and service providers, and may therefore be subject to the laws of those jurisdictions.
Some of the services we use — including Discord, where our support tickets and moderation discussions take place — are operated by providers based outside the UK, principally in the United States.
Discord Inc. is certified under the UK Extension to the EU–US Data Privacy Framework, which is a recognised transfer mechanism under Chapter V of the UK GDPR. Transfers to other providers are covered by the data processing terms they make available to customers, which incorporate recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses. If you would like to know which mechanism applies to a specific provider, contact us using the details in section 1.
6. Sharing and disclosure
We do not sell personal information. We may share data only with service providers who help us run the Services (hosting, DDoS protection, log storage, ticket tooling, website analytics) under appropriate safeguards, or where required by law or to protect the safety of our users and Services.
7. Retention
We keep data only as long as necessary for the purposes above. Current targets: IP/login security logs — up to 12 months; ticket transcripts — up to 36 months; whitelist applications — retained while your account remains whitelisted, and up to 12 months after removal; Discord-based moderation/support logs — per Discord's platform retention and our server configuration.
Where we need to keep a record for longer — for example during a security incident, a fraud or ban-evasion investigation, or an unresolved dispute or appeal — we retain it only for as long as that matter is active and for no more than 6 months after it is resolved or closed, after which it is deleted. Where this extended period is shorter than the standard period listed above, the standard period applies; where it is longer, this period applies. Data may also persist temporarily in backups, which are overwritten on a rolling basis.
8. Security
We use reasonable safeguards appropriate to the sensitivity of the information, including access controls limiting data access to authorised staff.
9. Your rights and requests
Depending on your jurisdiction, you may request access to, correction of, or deletion of the personal information we hold about you, where we are not required to keep it for security, dispute resolution, or legal compliance. To prevent unauthorised disclosure, we may require reasonable identity verification before providing account-linked information (especially IP history and support transcripts).
To submit a request, email matthewhaff3@gmail.com with your Minecraft username and UUID (if known), the categories of data requested, the relevant date range, and your Discord ID if linked (optional but helpful). Further identity proof may be required. We aim to respond within one month.
If you are unhappy with how we have handled your personal data or a request, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk — though we would appreciate the chance to resolve your concern directly first.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the latest version.