Privacy Policy for Oasis World
Last Updated: September 23, 2026
1. Who We Are
Oasis World acts as the "Data Controller" for the information you share with us. This means we are responsible for deciding how and why your personal information is used.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us through our official Discord server, accessible via the link on the Oasis World website (oasisworld.net).
2. What Information We Collect and Why
To provide a seamless and secure multiplayer experience, we need to process certain technical and account data. We only collect what is strictly necessary.
Account and Connection Data
IP Addresses: We log your IP address (including registration, historical, and current session IPs) to protect against DDoS attacks, detect VPNs or Tor networks, and prevent fraud. We also use it to approximate your region for security alerts, currency detection in our store, and to spot alternate accounts used for rule-breaking or ban evasion.
Minecraft Profile Details: We collect your Microsoft Minecraft UUID and username to verify your identity and connect you to the server.
Client Information: We log your client version, client brand (such as Vanilla, Lunar, or Badlion), the hostname you used to join, and your connection ping. This helps us ensure server compatibility, troubleshoot network issues, and apply the correct server behavior for your specific game version.
Session Data: We track when you registered on Oasis World, the date of your last login, and the last sub-server you visited to keep your sessions active and improve analytics.
Security and Authentication Data
Passwords: All in-game passwords are strictly hashed and saved securely. We never store plain-text passwords.
Session Persistence: We keep your session active securely so you do not have to re-enter your password every time you join.
Two-Factor Authentication (2FA): If you enable 2FA, we store the necessary TOTP configuration and secret data to secure your account.
Optional Information You Provide
Email Address: If you choose to link an email via the
/email addcommand, we use it strictly for password resets, purchase identification, and account security alerts.Discord User ID: If you link your account using
/link, we collect your Discord User ID. We use this to notify you through Discord of unusual login attempts or security risks.
Moderation and Safety Data
Chat and Commands: We log chat history, private messages, and executed commands. This is necessary for message delivery, abuse investigation, and enforcing server rules.
Voice Chat: Because we use the Simple Voice Chat mod, we temporarily record voice audio in a short 1-minute rolling buffer to protect players against harassment and insults. If an incident is reported, the relevant audio is saved as evidence.
Punishment Records: We record all warnings, kicks, bans, mutes, IP-bans, and unbans to maintain an audit trail of rule enforcement.
Voting Data
If you support us by voting, we collect your username, UUID, the voting website used, the timestamp, and the IP address supplied by the voting service. We use this to calculate leaderboards, display your vote history, and prevent duplicate reward exploits.
3. Our Legal Basis for Processing Your Data (GDPR)
Under European data protection laws, we must have a valid legal reason to process your information. We rely on the following bases:
Legitimate Interests: Most of our data collection (such as IP logging, client detection, and moderation logs) is necessary to protect our infrastructure from attacks, prevent cheating, ensure child safety, and keep the community environment friendly.
Performance of a Contract: We need your Minecraft UUID and authentication data to provide the game services and deliver items you purchase.
Consent: We rely on your explicit consent when you voluntarily provide your email address or link your Discord account for security alerts.
4. How Long We Keep Your Data
We do not hold onto your data forever. We adhere to the following retention periods:
Chat and Command Logs: Retained for 7 days, then automatically deleted.
Voice Chat Audio: Standard gameplay voice is overwritten after 1 minute. However, if a report is made, voice evidence is retained for approximately 30 days to allow staff to investigate.
Punishment Records: Records of bans, mutes, and severe warnings are stored permanently. This is required to prevent repeat offenders from evading server bans.
Account Data: Your UUID, hashed passwords, and IPs remain in our system for as long as your account is active on our network.
5. How We Protect Your Information
We take security seriously. All passwords are encrypted using modern hashing algorithms. We restrict backend database access strictly to authorized server administration. Furthermore, we evaluate risk scores and network indicators to block malicious actors before they can harm our infrastructure or access player data.
6. Sharing Data with Third Parties
We do not sell your personal data to anyone. We only share information with trusted third-party services that help us run the network. This includes our dedicated server hosts, DDoS protection proxies, and payment gateways (if you use our web store). These partners only process the data required to perform their specific tasks.
7. Your Privacy Rights
Under the GDPR, you have powerful rights regarding your personal data:
The Right to Access: You can request a copy of the personal data we hold about you.
The Right to Rectification: You can ask us to correct any inaccurate data (for example, updating a linked email address).
The Right to Erasure: You can ask us to delete your personal data. Please note that for security and server integrity, we reserve the right to retain permanent punishment records and hashed IP bans to prevent ban evasion.
The Right to Withdraw Consent: If you provided an email or Discord link, you can unlink them at any time in-game.
To exercise any of these rights, please open a support ticket on our Discord or contact us at [email protected]. We will respond to all requests within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect new server features or legal requirements. We will notify the community in our Discord announcements channel whenever significant changes are made.