Privacy Policy

Cobbly (“we”) is the free Minecraft hosting tier operated by RODRIGO SANTOS SOUSA (Empresário em Nome Individual) under the laws of Portugal, who also operates Spawnly. This policy explains how we handle your data under the General Data Protection Regulation (GDPR).

• Identity data: your email address and an encrypted password. We never store your password in a form we can read.
• Technical data: IP addresses, login timestamps, and server resource usage. IP addresses of players connecting to free servers are processed to apply rate limits and to block abuse.
• Your content: world files, server configuration and server logs stored on our infrastructure.
• Advertising data: handled by Google — see section 5. We do not receive or store advertising identifiers ourselves.

We take no payments on the free tier, so we hold no card numbers, billing addresses or transaction records for it.

We use the following providers to operate the Service, with Data Processing Agreements in place where applicable.

Game servers and world storage are located in the EU. Our database is self-hosted on Hetzner infrastructure.

• To create and run your servers, and to save and restore your worlds.
• To enforce the limits of the free tier, and to detect multiple accounts created to bypass them.
• To prevent abuse of shared hardware, including rate limiting and blocking abusive IP addresses.
• To email you about your account — including before an inactive world is deleted.
• To display advertising that funds the free tier.

Our lawful bases are performance of a contract (running the service you asked for), legitimate interests (security, abuse prevention, and funding a free service through advertising), and consent where required for advertising cookies.

Essential cookies. We use cookies to keep you signed in and to protect against cross-site request forgery. These are required for the site to work and cannot be switched off.

Advertising. The free tier is funded by advertisements served by Google AdSense in the dashboard and control panel. Google may set cookies or use similar technologies to measure and, where permitted, personalise those advertisements. Google acts as an independent controller for that processing; see how Google uses data from sites that use its services.

Where you are in the EU or UK, non-essential advertising cookies are set only with your consent, and you can withdraw it at any time. Certain paid Spawnly plans remove advertising from this Service entirely.

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 18 you may use the Service only with the consent of a parent or guardian.

Because our audience includes young people, advertising is configured as non-personalised by default in the EU and UK. Non-personalised advertisements still use limited data such as approximate location and page content in order to be served and to be counted, but are not based on a profile of past behaviour.

If you believe a child has provided us with personal data, contact us and we will delete it.

• Account data: kept while your account exists. Because the account is shared with Spawnly, deleting it affects both services.
• Worlds and server data: kept while the server exists. Deleting a server schedules its stored data for deletion.
• Inactive worlds: permanently deleted after 60 days without the server being started. We email a warning at least 30 days beforehand.
• Abuse and security logs: kept for a limited period to detect repeat abuse, then discarded.

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — request deletion of your account and associated data, where we have no legal obligation to keep it.
• Portability — receive your data in a structured, commonly used format.
• Object — object to processing based on our legitimate interests, including advertising.

To exercise any of these, contact [email protected]. You also have the right to complain to your national data protection authority; in Portugal this is the CNPD.

Cobbly and Spawnly share one account system, so registering on either service creates an account usable on both. Your identity data is common to the two. Data about your free servers is stored separately from data about paid servers.

See also our Terms of Service and Acceptable Use Policy.