Privacy policy

In short

• Looking around takes no account. An account takes an email address, nothing more.
• No ads, no tracking and no selling of data. Visits are counted without cookies.
• Only the cookies the site needs to work, so there is no cookie banner.
• Your card details never reach us: payments go through Link, a service of Stripe.

Who is responsible

Knapen Shops, which runs Kablonk, decides what happens with your data. Questions or requests go to [email protected]. Its address and registration numbers are on the contact page.

What we keep, and why

Your account

Your email address. You log in with a code we mail to it. A password is optional; if you set one, it is stored scrambled, so nobody can read it, us included. We need the address to log you in and to give you what you bought: that is our agreement with you.

An account is made the first time you log in, or when you buy something without one. In that case we take the email address you typed on the payment page and make the account for it.

What you bought

Which builds you bought, when, for how much and in which currency, the reference of the payment at Stripe, and whether Pro runs and until when. We need this to open what you paid for, and the law makes us keep records of sales.

Payments

You pay on a page of Link, a service of Stripe. Link sells to you as the merchant of record and is itself responsible for what it asks there: your name, your card or other payment details and your billing address. We never see or store your card details. See Link's privacy policy.

While you use the site

To know you from one page to the next, the server keeps a session for every visitor, with the IP address and the type of browser. A session runs out after 2 hours without use.

Like every web server, ours writes down each request: the IP address, the time, the page asked for and the type of browser. We use these logs to keep the site safe and to find faults, and the server deletes them after about two months.

Email

When you write to us, by email or with the contact form, we keep your message and your address to answer you. The form sends your message to us as an email; the site itself keeps no copy. When the site sends you an email, such as a code to log in or a note about what you bought, it goes out through an email service.

Visitor numbers

We count visits to know which pages are read: which page, where the visitor came from (another site or a search engine), the country, and the kind of device and browser. Cloudflare does the counting for us with a small script. It sets no cookies, keeps nothing on your device and does not follow you from one visit to the next or to other sites, so the numbers cannot be traced back to you.

The 3D view

A build is shown in the textures of the game itself. Your browser fetches those straight from Mojang, the maker of Minecraft and part of Microsoft, not from us. Mojang's server then sees your IP address, as every site you visit does. It happens once: after that your browser keeps the textures.

Your progress in a guide

Where you are in a guide and how you set it up is stored in your own browser. It is not sent to us.

Cookies

Kablonk sets only cookies it cannot work without:

• kablonk-session keeps you logged in while you go from page to page.
• XSRF-TOKEN makes sure a form was really sent from our site.
• A "remember me" cookie keeps you logged in on your own device after you close the browser. Logging out removes it.
• Cloudflare, which stands in front of the site, can set a cookie to tell people from bots.

There are no cookies for statistics or ads: the visitor numbers are counted without them. The checkout page is Link's and sets its own cookies.

Who else handles your data

We work with a few companies that handle data for us, each only for its own job:

• DigitalOcean: the server the site and its database run on, in the United States.
• Laravel Forge: the tool we manage that server with.
• Cloudflare: passes on the traffic to the site, keeps attacks out, counts the visits, delivers email sent to us and stores the backups of the database.
• Stripe and Link: payments, receipts, tax and refunds.
• Resend: sends the site's email.
• Google: the mailbox where email to us arrives.

Nobody else gets your data, unless the law makes us hand it over. Mojang is not on this list because it does nothing for us: your browser asks it for the game's textures directly, as described above.

Data outside Europe

These companies are in the United States or work from there, and the server is there too. Where data leaves the European Economic Area, it does so under the EU-US Data Privacy Framework or under the standard contracts the European Commission wrote for it.

How long we keep it

• Your account: until you have it deleted.
• Records of what you bought: seven years, which Dutch tax law asks for.
• Sessions: 2 hours after you last used the site.
• Server logs: about two months.
• Backups: the database is copied every night, so nothing is lost when a server breaks. A copy is kept for five nights, so what you have deleted is gone from the backups after that.
• Email you sent us: as long as we need it to help you and to know what was agreed.

Your rights

You can ask us what we keep about you, to correct it, to delete it, to hand it to you in a file, or to stop using it. Write to [email protected] from the address of your account; we answer within a month. For what Link keeps about your payments you can turn to Link itself.

Not happy with how we handle your data? Tell us first. You can also complain to the privacy authority of your country; in the Netherlands that is the Autoriteit Persoonsgegevens.

Children

An account takes an age of 16 or older, or the permission of a parent or guardian. We ask for no more than an email address. Are you a parent and did your child make an account without you? Write to us and we delete it.

Changes

When Kablonk changes what it keeps, this page changes with it, and the date at the top shows when. If a change is a big one, we tell account holders by email.