This Privacy Policy explains how Ludixi ("we", "us", or "our") collects, uses, shares, and retains personal data when you use the website, community spaces, dashboard, purchases, uploads, linked-server features, and the Ludixi helper app. We aim to handle personal data transparently and in line with applicable privacy law, including the General Data Protection Regulation ("GDPR") where it applies.
1. Controller Role
For the platform-level processing described in this policy, Ludixi acts as the data controller. This includes core account management, platform security, billing, moderation at platform level, core infrastructure, and operation of the Ludixi service itself.
2. Community Owners and Community-Level Decisions
Community owners can decide what to publish in their communities, which users to approve or reject, what rules to enforce, which external servers to connect, what products or donations to offer, and what staff actions to take. In relation to those community-specific decisions, community owners may act as separate controllers of some personal data. Ludixi still remains controller for operation of the platform itself.
If your request concerns a community-specific decision, such as a community ban, a community product, a linked external game server, or content published by a community owner, you may need to contact that community owner as well as us.
3. Information We Collect
- Account information: username, email address, password hash, avatar, role, account status, and related account settings.
- Community and experience information: communities you join or manage, access requests, reports, moderation actions, community posts, experience participation, linked-server selections, and related activity records.
- Purchase and billing information: purchase history, subscriptions, billing status, payout-related status, and transaction records. Payment card processing is handled by Stripe; we do not store full card numbers.
- Uploaded content: files, modpack content, filenames, metadata, generated manifests, security scan results, and related records needed to host, distribute, secure, and moderate uploads.
- Linked service data: where a community owner links external systems such as CubeCoders AMP, Pterodactyl, Discord webhooks, or custom domains, we may process the identifiers, status data, verification data, and commands needed to operate those features.
- Ludixi helper app information: supported game installation details, Ludixi-managed experience files, launch and session events, helper runtime tokens, and related signals needed to run, secure, or synchronize experiences.
- Technical and security information: IP address, browser or device details, cookies, session data, logs, security events, and abuse-prevention records.
- Support and legal communications: messages you send to us, notices, complaints, and any information you provide when contacting support or reporting a problem.
4. How We Use Information
- To create and manage accounts, communities, experiences, and access rights.
- To authenticate users, secure sessions, prevent abuse, and investigate misuse.
- To process payments, subscriptions, donations, refunds, and payout-related workflows.
- To power community features such as approvals, moderation, reports, updates, digital products, and linked-server actions.
- To host, scan, validate, distribute, and secure user-uploaded content and modpack files.
- To operate the Ludixi helper app and keep supported experiences synchronized and accessible.
- To verify custom domains, maintain infrastructure, and monitor reliability and security.
- To comply with legal obligations and respond to lawful requests or rights claims.
5. Legal Bases for Processing
Where the GDPR applies, we rely on one or more of the following legal bases:
- Performance of a contract: to provide accounts, communities, purchases, experiences, helper-app functionality, and other core service features.
- Legitimate interests: to secure the platform, prevent abuse, moderate content, investigate problems, protect users and communities, and improve the service.
- Legal obligations: to comply with tax, accounting, consumer-law, intellectual-property, law-enforcement, or other legal requirements.
- Consent: where consent is required by law for a particular processing activity.
6. How Information Is Shared
We do not sell personal data. We share information only where needed to operate the platform or where law permits or requires it.
- Community owners and moderators: they may see usernames, requests, reports, moderation information, and experience-related activity needed to manage their communities.
- Linked external services: if a community owner connects AMP, Pterodactyl, Discord webhooks, or similar services, relevant usernames, game identities, access status, server actions, or event data may be sent to those external systems as part of the feature.
- Stripe: for payment processing, subscriptions, billing events, payouts, and fraud or compliance controls.
- Infrastructure and service providers: hosting, storage, email, security, DNS, diagnostics, and related providers acting on our instructions.
- Legal or safety reasons: where required by law, legal process, or to protect the platform, users, communities, our rights, or third-party rights holders.
- Business transfers: where permitted by law, in connection with a merger, acquisition, financing, restructuring, or asset transfer.
7. Cookies and Similar Technologies
We use cookies and similar technologies for sign-in, session continuity, security, and remembering preferences across the main platform and community subdomains. This includes session cookies and, if you choose, a remember-me cookie. These technologies are used for core platform operation rather than advertising.
8. International Transfers
Your personal data may be processed in countries outside the European Economic Area, depending on where infrastructure or service providers operate. Where applicable, we use measures intended to provide appropriate safeguards for those transfers.
9. Retention
We retain personal data for as long as reasonably necessary for the purposes described in this policy, including to run the service, maintain account and billing records, host community content, enforce rules, resolve disputes, meet legal obligations, and protect against abuse. Some operational records, security tokens, logs, and transient communication data may be retained for shorter periods.
10. Security
We use technical and organizational safeguards intended to protect personal data, including access controls, session protections, audit logging, secret handling, upload validation, malware scanning for modpack uploads, and other security hardening measures. No system is completely secure, but we work to reduce risk and respond when issues are identified.
11. Your Rights
Depending on your location and applicable law, you may have rights such as access, correction, deletion, restriction, objection, withdrawal of consent, and data portability. Where the GDPR applies, you may also have the right to lodge a complaint with a supervisory authority.
To request help with these rights, contact us at hello@ludixi.com. If your concern relates to a community-specific decision by a community owner, we may direct you to that community owner as well.
12. Automated Decision-Making
We do not currently describe the platform as relying on solely automated decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR. Platform and community access decisions may still involve rule enforcement, fraud checks, or security actions supported by automated systems.
13. Children
The service is not directed to children below the minimum age required by applicable law. If we learn that personal data was collected in violation of applicable law, we will take appropriate action.
14. Complaints
If you believe your data-protection rights have been infringed, you may complain to your local supervisory authority. If you are in Portugal, you may contact the CNPD (Comissão Nacional de Proteção de Dados) via www.cnpd.pt.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the latest version and update date will be posted on this page. Continued use of the service after changes are published means the updated version applies to the extent permitted by law.
16. Contact
Business Name: Ludixi
Email: hello@ludixi.com