Privacy Policy | MonkeyServers

Effective date: 30 September 2026

The short version

We are Daniel Milanesi, trading as MonkeyServers, a sole trader in the UK.
To buy VIP you sign in with Steam. We keep your SteamID, your Steam name and picture, and your orders, so we can deliver what you bought.
Linking Discord is optional. After you buy, your Steam picture and what you bought appear in the "Recent supporters" list; you can turn that off at any time in your account.
If you play on our servers, your Steam name, Steam picture and this wipe's kills, K/D and playtime can appear on the public leaderboards on the Stats page. You can hide yourself with /stats hide in game or in your account.
We do not ask for, collect or store your email address.
We do not use analytics, adverts or tracking cookies, and we never sell your data.
Everything we hold is stored on our own server in the United Kingdom.
You can ask to see, fix or delete your data at any time. We reply within one month.

1. Who we are

Data controller: Daniel Milanesi, trading as MonkeyServers, a sole trader in the United Kingdom.

Postal address: 53 Wickham Rd, Beckenham BR3 6QJ, UK
Email: [email protected]

2. What data we collect

SteamID, Steam name and Steam profile picture. Collected when you sign in to the store with Steam, and your SteamID when you join a game server. We look up your current Steam name and profile picture with the Steam Web API each time you sign in. Used to identify your account, deliver purchases to the right player and prevent cheating.
Order and payment records. What you bought, when, the price, the order status, and when you agreed to delivery starting straight away. Card details never reach us: payment is taken by PayNow on its own page.
Skin trade records. If you pay by skin trade: the order, the items traded, the value our staff confirmed and any notes they made about the trade.
Discord ID (optional). Collected if you link Discord or use Discord tickets. Used for support and to give you your VIP role.
No email address. We do not ask for, collect or store your email address. PayNow asks for one on its own payment page to send your receipt; that goes to PayNow, not to us. If you email us, we use your address only to reply to you and never add it to your account.
Game stats and in-game name. Your kills, deaths and playtime on each wipe of our game servers, and the name you play under (your Steam name), linked to your SteamID. Collected by our game server plugin for everyone who plays, whether or not you sign in to this website. Your full history is shown only to you, on your account page; the current wipe can appear on the public leaderboards (section 4). Kept as long as your account data.
Your "Recent supporters" setting. Whether you appear in the public list on the home page, and when you turned it off.
Your leaderboard setting. Whether you hid yourself from the public leaderboards, and when you last changed it.
Store ban records. If a payment is reversed or we find fraud, we keep a note that the account may not buy from the store, and why.
IP addresses. Our web server and game servers record IP addresses in their logs, and the website uses them briefly in memory to limit repeated sign-in and checkout attempts. They are not stored in our database.
Staff records. For admins only: an email, a password hash, a two-factor secret and an audit log of what each admin changed.

You must sign in with Steam to buy from the store. Everything else is optional.

3. Why we use it, and our lawful basis (UK GDPR)

Contract: your SteamID, Steam name, orders and deliveries, and a linked Discord account you asked us to use, so we can supply the VIP you bought.
Legal obligation: keeping order and payment records for UK tax.
Legitimate interests: IP addresses in logs and rate limits, store ban records and the admin audit log, for security, fraud prevention, anti-cheat and accountability; and the "Recent supporters" list, to show that real players support the servers. It uses only your public Steam picture, never your name or the amount, and you can turn it off at any time; and the public leaderboards, to give players on our servers a friendly competition. They show your Steam name, your Steam picture if we have it, and this wipe's kills, K/D and playtime, and you can hide yourself at any time. We have weighed these against your rights.

4. The "Recent supporters" list and the leaderboards

When you buy, the home page shows your Steam profile picture, what you bought and when. It never shows your Steam name, your SteamID or the amount you paid. We tell you at checkout, it only shows real paid orders, and you can turn it off at any time in your account (Hide me from the list). Once you turn it off, later purchases do not switch it back on. Your picture is loaded from Steam's image servers.

The Stats page shows network totals for the current wipe and top 10 leaderboards for most kills, best K/D (at least 10 kills) and most playtime. Each entry shows your Steam name, your Steam profile picture if you have signed in to this website, your number and which server it was on. It never shows your SteamID. To hide yourself from every leaderboard on every server, type /stats hide in game (/stats show to come back) or switch off Show me on the leaderboards in your account. Whichever you changed last applies. Hidden players still count, without their name, in the network totals such as total kills and hours played.

5. Who we share it with

Valve (Steam): you sign in through Steam, and we ask the Steam Web API for your public Steam name and profile picture.
PayNow (PayNow Services, Inc., a Pennsylvania corporation, 1442 Pottstown Pike #421, West Chester, PA 19380-1271, USA): takes your card payment as merchant of record. It receives your SteamID and order, and holds your payment details under its own privacy policy as a separate controller.
Discord (Discord Inc., USA): if you link your account, Discord receives the role changes we make.
Hosting: we run our own server in the UK. No hosting company stores your data for us.
Cloudflare (Cloudflare, Inc., USA): our main address, monkeyservers.site, reaches our server through Cloudflare, which passes your visit on to us and so sees your IP address and the pages you request, as our processor. Our backup address uses DuckDNS, which only points the name at our server and receives no personal data from us.
Nobody else, unless the law requires it. We never sell your data.

6. Where your data is stored, and transfers outside the UK

We store your data, including the data we get from Steam, on our own server in the United Kingdom.

PayNow, Discord and Cloudflare are in the United States. When you pay through PayNow or link Discord, much of that is you dealing with them directly under their own terms. Where we send them data:

Discord Inc. and Cloudflare, Inc. are certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), so UK law treats the transfer as adequately protected.
For PayNow, we send only what is needed to take the payment you asked for (your SteamID and your order). Where PayNow is not certified under the UK-US data bridge, we rely on the ICO's International Data Transfer Agreement, or on the transfer being necessary to perform the contract you asked for (UK GDPR Article 49(1)(b)).

7. How long we keep it

Web and game server logs, including IP addresses: 90 days, unless we need them longer for a specific legal or security matter.
Order and payment records, including skin trade records: 5 years after the 31 January Self Assessment deadline for the tax year they belong to, as HMRC requires.
Account data (SteamID, Steam name, picture, Discord ID): while you have active VIP (including Lifetime), and for 2 years after your VIP ends or you last sign in, whichever is later. If you ask us to delete your account, we delete these but keep the order records the law requires, without your name. Deleting your account also ends any VIP you still have.
Store ban records: for as long as the ban applies.

8. Your rights

You have the right to:

access a copy of the personal data we hold about you;
rectification of inaccurate or incomplete data;
erasure of your data, subject to the records the law makes us keep;
restriction of how we use your data;
object to our use of your data based on legitimate interests;
portability of your data in a structured, machine-readable format;
withdraw consent at any time, for anything based on consent.

To use any of them, email [email protected] or open a ticket in our Discord. We reply within one month. We do not make automated decisions about you, and we do not profile you.

9. Children

Steam accounts are for people aged 13 and over, so everyone signing in should be at least 13. To buy from the store you must be 18, or have a parent or guardian's permission (see our terms). We keep privacy-protective defaults for everyone: there are no adverts, analytics or public profiles, the supporters list never shows a name and can be turned off in one click, and anyone can hide from the leaderboards with /stats hide or one click in their account.

10. Cookies and storage

We only store what the site needs to work. These are "strictly necessary" under the Privacy and Electronic Communications Regulations, so they do not need your consent, but you should know what they are.

ms_customer (cookie, 30 days): keeps you signed in to your account.
ms_steam_login (cookie, 15 minutes): protects Steam sign-in against forged requests.
ms_discord_oauth (cookie, 10 minutes): protects Discord linking against forged requests.
ms_admin (cookie, staff only, 8 hours) and ms_admin_pending (10 minutes): admin sign-in and the two-factor step.
ms_admin_flash (cookie, staff only, one page view): a one-time notice in the admin area.
ms_basket_v1 (browser storage, until you check out or clear it): the items in your basket.
ms_consent (cookie, 12 months): remembers your cookie choice, so we do not ask on every page.

We do not use analytics or marketing cookies today. If we ever add them, they stay off until you say yes, and you can change your mind at any time from Cookie settings at the bottom of every page. PayNow sets its own cookies on its payment page, under its own policy.

11. Complaints

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy. The updated version will be posted on this site with a new effective date, and we will tell you about important changes on the site or on Discord.