Privacy policy
Last updated 9 October 2026
This policy explains how Bernat Relats Martinez ("we") handles personal data in PluginAnalytics. It has two parts: the data of developers who use the dashboard, where we are the controller; and the data the SDK sends from Minecraft servers, where the plugin's developer is the controller and we process it for them.
Who is responsible
Bernat Relats Martinez, NIF 49360587B, Carrer Rosella, 38, 08415 Bigues i Riells (Barcelona), Spain. Email: bernatrelats@gmail.com.
Developers using the dashboard
| Data | Why | Legal basis |
|---|---|---|
| Sign-in id, email, name and avatar from your sign-in provider | To create and identify your account and send account emails (welcome, billing, security) | Contract |
| Your plugins, settings, team, language and session | To provide the dashboard | Contract |
| Subscription state and billing events (plan, dates, amounts, cancellation reason) | To apply your plan and keep business and tax records | Contract and legal obligation |
| Technical logs (IP address, browser, errors) kept briefly | To keep the service secure and fix problems | Legitimate interest |
We don't sell personal data, show ads, or send marketing. The dashboard uses one essential session cookie and stores your theme in your browser; there are no analytics or advertising cookies.
Data from Minecraft servers
The SDK in a plugin sends usage data from each server that runs it: server software and versions, counts of what the plugin tracks, errors and logs with player names, IPs and UUIDs removed, and players as a salted hash that never leaves the server in clear. Exactly what is sent, what never is, and how a server owner turns it off are on Privacy for server owners. For this data, the plugin's developer is the controller and we are their processor under our terms; requests about it should go to the plugin's developer, and we'll help them.
Who we share data with
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database and network (all service data) | Global network; EU and US |
| Okta, Inc. (Auth0) | Sign-in | EU tenant |
| Paddle.com Market Ltd | Payments, invoices and taxes, as merchant of record and an independent controller of your payment data | UK and EU |
| Resend, Inc. | Sending account emails | US |
| Spiget and Modrinth | Public download counts of the listings you connect (no personal data is sent) | — |
Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Account data: while your account exists. Deleting your account (Profile) deletes it, together with your plugins and their data.
- Billing records: as long as tax law requires (in Spain, generally 4 to 6 years).
- Usage data from servers: 100 days on Free, 13 months on Pro and 25 months on Premium, then deleted.
- Technical logs: a few days.
Your rights
You can ask to access, correct, delete, restrict or port your data, or object to its processing, by writing to bernatrelats@gmail.com. You can delete your account yourself at any time. If you think we've handled your data wrongly, you can complain to the Spanish data protection authority, the AEPD, or to the authority where you live.
Security
Connections are encrypted, every request checks that you can access that exact resource, data is separated per plugin, and card details never reach us: Paddle handles them.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the dashboard before it applies.