🔒 Privacy Policy

Data Controller & Contact

The Data Controller for personal data processed via this site is the operator of MC Seed View (Satoru, sole proprietor; primary jurisdiction: Japan). Contact for data protection matters and data subject requests: please use our Contact form. We respond to verified requests within the statutory deadlines disclosed under "Your Rights" below.

1. Information We Collect

MC Seed View does not directly collect personally identifiable information such as your name, email, or physical address. Map calculations run entirely in your browser; your seed values are never transmitted to our servers.

However, the third-party services we integrate (Google AdSense, Google Analytics, Cloudflare, Supabase) automatically process technical identifiers — including your IP address, cookie identifiers, browser fingerprint signals, and device/locale metadata — when you visit the site. Under GDPR Art. 4(1) and CPRA §1798.140(v), these technical identifiers qualify as personal data even when not tied to your real-world identity. The remainder of this policy describes those processors and your rights regarding the data they handle on our behalf.

We additionally use your browser's localStorage to remember site preferences (language, map features, display options) and consent state. This local storage stays on your device and is never transmitted.

2. Cookies and Tracking Technologies

Our site uses cookies through third-party services such as Google AdSense. These cookies may be used to:

• Serve personalized ads based on your browsing history
• Measure ad performance and frequency
• Prevent the same ad from being shown repeatedly

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies.

3. Google AdSense & Personalized Advertising

This site uses Google AdSense (publisher ID: ca-pub-2556516387311475), a web advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdSense displays advertisements on our pages and may use cookies, web beacons, and similar tracking technologies to serve ads.

Google and its advertising partners use cookies — including the DoubleClick cookie — to serve interest-based ads based on your prior visits to this website and other sites on the Internet. Interest-based advertising (also called personalized or behavioral advertising) uses information about your browsing history across multiple sites to predict which ads are most relevant to you. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing patterns.

We use Google Consent Mode v2: if you decline advertising cookies via our cookie consent banner, Google AdSense will serve non-personalized ads only — ads that are not based on your browsing history and do not use the DoubleClick cookie for targeting.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of third-party vendor cookies for interest-based advertising at aboutads.info or youronlinechoices.com (EU). For more information on how Google uses data, see How Google uses data when you use our partners' sites or apps.

4. Google Analytics

We use Google Analytics (GA4) to understand how visitors interact with our site. This service collects anonymous usage data such as page views, session duration, and device type. No personally identifiable information is collected through Google Analytics.

5. Third-Party Services

This site uses the following third-party services:

• Google AdSense — advertising (see Google's Privacy Policy)
• Google Analytics — anonymous usage analytics
• Supabase — seed gallery and feedback storage (anonymous, no personal data)
• Cloudflare — hosting and CDN

6. Data Retention

We do not directly store personal data, but the third-party services we use have their own retention periods:

• Google AdSense cookies: up to 13 months (Google's published default for advertising identifiers under EU/EEA regulation)
• Google Analytics 4 events: 2 months default for user-identifier data; up to 14 months for aggregated event data (configurable, retention configured to default)
• Cloudflare logs: typically 7 days for HTTP request logs, longer for security event logs (per Cloudflare's Privacy Policy)
• Feedback & gallery posts (Supabase): retained indefinitely while the site is active; deleted within 30 days of a verified deletion request
• Browser localStorage: stays on your device until you clear it via browser settings

7. Children's Privacy

Minecraft is played by a wide age range, so we take child privacy seriously. MC Seed View does not knowingly collect personal data from children. Specifically:

• United States (COPPA, 15 U.S.C. §6501): We do not knowingly collect personal information from children under 13 without verifiable parental consent.
• European Union (GDPR Art. 8 / "GDPR-K"): We do not knowingly process personal data from children under 16 (or the lower age set by the relevant member state, minimum 13) without parental authorization.
• United Kingdom (Age Appropriate Design Code): We apply ICO-recommended defaults including no personalized advertising for users likely to be under 18.

For visitors who self-identify as a minor (or whose access patterns suggest a minor), we instruct Google AdSense to disable personalized advertising via the tag_for_child_directed_treatment mechanism where applicable. If you are a parent or guardian and believe a child has provided personal information through this site, please contact us and we will delete the data and any associated identifiers within 30 days.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have specific data protection rights. MC Seed View aims to honor all of them, even though we collect minimal personal data.

For visitors in the European Economic Area (GDPR)

Under the General Data Protection Regulation (EU 2016/679), you have the following rights:

• Right of access (Article 15) — request a copy of any personal data we hold (typically: none, since we do not collect identifiers)
• Right to rectification (Article 16) — correct inaccurate data
• Right to erasure / "right to be forgotten" (Article 17) — request deletion of any feedback or gallery posts you submitted
• Right to restrict processing (Article 18) — limit how we process your data
• Right to data portability (Article 20) — receive your data in a portable format
• Right to object (Article 21) — object to our processing, including for direct marketing
• Right to withdraw consent — for any processing based on consent (e.g., personalized ads via the cookie banner)

Lawful basis for processing under GDPR Article 6: consent (cookie banner acceptance) for advertising cookies; legitimate interests for non-personalized analytics; no processing of special categories of data.

For visitors in California (CCPA / CPRA)

Under the California Consumer Privacy Act and the California Privacy Rights Act, California residents have:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held about them
• Right to correct inaccurate personal information
• Right to opt-out of "sale" or "sharing" of personal information for cross-context behavioral advertising
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising privacy rights

Do Not Sell or Share My Personal Information: MC Seed View does not "sell" personal information for monetary consideration. However, our use of Google AdSense for personalized advertising may constitute "sharing" under the CPRA's expanded definition. To opt out of cross-context behavioral advertising, you can:

• Click "Decline" on our cookie consent banner (the in-site opt-out)
• Send a Global Privacy Control (GPC) signal from your browser — we honor GPC as a valid opt-out request for California, Colorado, Connecticut, Utah, and Virginia residents
• Use Google Ads Settings to disable personalized ads at the Google account level
• Use the DAA WebChoices tool for industry-wide opt-out

Universal Rights (All Visitors)

• Opt out of personalized advertising via the cookie consent banner or Google Ads Settings
• Clear cookies and localStorage through your browser settings at any time
• Request deletion of any feedback or gallery posts you have submitted via the Contact form
• Submit any data subject request through the Contact form

Statutory Response Deadlines

• GDPR (EU/EEA/UK): 1 month from receipt; extendable by an additional 2 months for complex requests (Article 12(3))
• CCPA / CPRA (California): 45 days from receipt; extendable by an additional 45 days with notice (total up to 90 days)
• Other jurisdictions: we follow the shortest applicable statutory deadline, defaulting to 30 days where no specific period is mandated

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. EU/EEA residents can contact their national Data Protection Authority (a list is maintained at the European Data Protection Board website). UK residents may contact the Information Commissioner's Office (ICO). California residents may contact the California Privacy Protection Agency (CPPA).

9. International Data Transfers

Our infrastructure (Cloudflare CDN edge nodes, Supabase database, Google services) may process traffic across multiple jurisdictions including the United States. Where data transfers leave the EEA/UK, we rely on the following safeguards:

• EU-US Data Privacy Framework (DPF, 2023): Google LLC and Cloudflare Inc. are certified under the EU-US Data Privacy Framework, providing an adequacy decision basis for transfers from the EEA to their US operations. You can verify their certification at the official DPF list.
• Standard Contractual Clauses (SCCs): For processors not covered by an adequacy decision, transfers are conducted under the European Commission's Standard Contractual Clauses (Decision 2021/914/EU).
• Supplementary measures: where required by Schrems II, we rely on the processor's published Transfer Impact Assessment (TIA) and use of encryption in transit and at rest.

We do not export personal data on our own initiative because we do not collect identifiable personal data directly. All cross-border processing is performed by named third-party processors under their own legal bases.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, third-party services, or operational practices. Material changes will be highlighted on this page with the updated revision date below. Minor clarifications may be applied without notice.