Privacy Notice

Privacy Notice – Immersive Library

Last updated: 2026-02-10

This privacy notice explains how Immersive Library processes personal data when you use the service.

1. Contact

Email: [email protected]

2. What data we collect

We process the following categories of personal data:

Account and identification data

Google account identifier (used for login via Google Sign-In)
Internal authentication token
Chosen username (e.g. Minecraft username when logging in from within Minecraft)
Account status information (e.g. moderator or banned status)

User-generated content

Content you upload or submit to the service
Associated metadata (such as title, version, or tags)

Community interaction data

Information about interactions with content (e.g. likes or reports)

Technical data

The Service does not intentionally collect, store, or analyze technical usage data such as IP addresses, browser type, or device information. IP addresses and basic request information are processed only transiently as part of normal network communication (IP protocol) and request handling. This data may exist briefly in memory or short-lived server logs generated by the hosting infrastructure, but is not used for tracking, profiling, or analytics.

3. How we collect your data

We collect personal data when you:

Register or log in using Google Sign-In
Use the service while logged in
Upload content
Contact us by email

We also receive limited data indirectly from third-party providers, in particular Google Sign-In.

4. Purposes and legal bases

We process personal data for the following purposes:

Providing the service (account creation, authentication, content hosting)
- Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Security and abuse prevention (moderation, enforcement of rules, prevention of misuse)
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
Operation and stability of the website (technical logs, error handling)
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
Responding to inquiries sent by email
- Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR, depending on the context

5. Cookies and similar technologies

We use cookies or similar storage mechanisms that are necessary to operate the service, in particular to keep you signed in.

Third-party services used for authentication or infrastructure (such as Google Sign-In or CDN providers) may also set cookies under their own responsibility.

Where consent is required by law, non-essential cookies are only used after consent.

We do not sell personal data.

Personal data may be shared with:

Service providers (processors) such as hosting providers or CDN/security providers, solely for operating the service
Google, as an independent controller, for Google Sign-In authentication
Public authorities, if required by law

7. International data transfers

Some service providers (for example Google or global infrastructure providers) may process data outside the European Economic Area.

8. Data retention

We retain personal data only as long as necessary for the purposes described:

Account data and user-generated content are stored until you request account deletion
Technical logs are retained for a limited period for security and troubleshooting
Backups may retain deleted data for a short additional period until overwritten

9. Your rights

You have the following rights under the GDPR:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object to processing
Right to data portability (where applicable)

You may exercise these rights by contacting:

[email protected]

We will respond within one month, unless an extension is permitted by law.

10. Changes to this notice

This privacy notice may be updated from time to time. The current version is always published on this page.