Privacy and consent
Newsletter Privacy Notice
Plain-language details about consent, retention, service providers, optional rewards, and the choices that remain yours.
Consent version: 16 August 2026; clarified 30 August 2026
How the newsletter handles your data
This notice explains the data used for consent, delivery, inactivity management, and optional one-time Minecraft rewards.
Who operates the newsletter
Peaceful Vanilla Network operates this newsletter in Italy. Privacy and rights requests can be sent to contact@peacefulvanilla.club.
What we use and why
We use your email address, double-opt-in evidence, delivery and suppression events, approximate opens, tracked link clicks, and explicit actions such as confirmation, unsubscribe, reactivation, or reward redemption to send the PVC updates you requested. Marketing is based on your consent. Necessary abuse prevention, security, and delivery records are processed only to protect and operate the service.
Short-lived Cloudflare diagnostics record a correlation ID, method, normalized route, response status, duration, and provider request metadata that can include an IP address and basic network or user-agent details. Our application does not add email addresses, claim values, Minecraft names, message bodies, authorization headers, signatures, or secrets to those logs.
Marketing HTML emails include Resend's standard open pixel and tracked links. Opens are approximate because some email clients block or preload images; clicks are the stronger activity signal. We use these signals to avoid repeatedly mailing inactive addresses, manage cooling and standby, and diagnose delivery. The plain-text marketing alternative contains the same tracked links but no open pixel. Confirmation and reactivation emails use a separate transactional sender with open and click tracking disabled. We do not use these signals for advertising profiles or significant automated decisions.
If you choose a reward, we also process an opaque entitlement, your authenticated server UUID, the safe Java/Bedrock identity information supplied by the server, and delivery receipts. We do not ask for a Minecraft nickname at signup. We do not use purchased lists or third-party article-reading profiles.
Processors and international transfers
Cloudflare provides the API, Turnstile abuse protection, encrypted D1 state, short-lived opaque delivery queues, and newsletter media storage. Resend provides email delivery and contact management. GitHub and Vercel host the static source and public website but are not used as the subscriber database. Where a provider processes data outside the EEA, Peaceful Vanilla Network relies on the provider's applicable data-processing terms and transfer safeguards.
How long we keep it
Active subscription data is kept while the subscription is used. Addresses with no recent qualified activity move through a limited cooling period before standby, where regular newsletters stop. A consented standby address is retained for no more than 24 months after the last qualified interaction, then re-consent is requested or the recoverable email is anonymized or deleted. Pending opt-in records expire after 30 days. A confirmation token and its encrypted delivery outbox expire after 48 hours, and the token ciphertext is cleared after a final delivery outcome. Short-lived abuse identifiers expire within 30 days. Reward and delivery records are kept only as long as needed to prevent duplicate claims, resolve disputes, and meet documented legal obligations. Native Cloudflare diagnostic logs expire automatically after three days on the current plan and are not copied into D1.
Unsubscribing stops marketing immediately. A minimal suppression record may be retained so the address is not accidentally added again and to demonstrate that the withdrawal was respected.
A tracked link clicked from an earlier email can return a standby subscription to active status. Submitting the signup form again uses double opt-in before reactivation. Delivery failures, complaints, and provider suppressions always take priority and prevent sending until they are resolved lawfully.
Your choices and rights
You may withdraw consent or object to direct marketing at any time using the unsubscribe link in every email. You may also request access, correction, deletion, restriction, or portability where applicable. You can complain to the Italian Data Protection Authority or the authority where you live or work. Withdrawing consent does not make earlier lawful processing unlawful.
The unsubscribe link in an email stops newsletter delivery, but it does not detach an authenticated Minecraft reward identity. This separation prevents an accidental click or a forwarded email from changing game-account state. While logged into the linked Minecraft account, you may run /pvcreward unlink and confirm the command in chat. That in-game action also unsubscribes the linked address, invalidates unused rewards from editions already issued, and keeps delivered reward history for duplicate prevention. To use another address, sign up again through the normal newsletter form. Only reward editions issued after the in-game unlink can create the new link.
Newsletter consent is optional and is never required to access the website or Minecraft server. No solely automated decision produces legal or similarly significant effects.
