[ PRIVACY & DATA TRANSPARENCY ]

Privacy Policy

Last updated: October 11, 2026 • Governed by the Laws of India

1. Who I Am

I am Vonzo, an independent developer, Minecraft system architect, and creator based in India. You can reach me directly at vonzo.official@gmail.com or via my official Discord community at dsc.gg/vonzo-hub.

This website (vonzo.online) serves as my public portfolio and provides machine-to-machine licensing verification for my Minecraft plugins.

2. Zero Website Visitor Tracking

The website itself collects no personal data from visitors. When you browse vonzo.online:

There are no trackers, tracking pixels, or fingerprinting scripts.
There are no analytics tools (no Google Analytics, no session recorders, no heatmaps).
There are no third-party advertising cookies or marketing beacons.
There are no external third-party scripts or fonts loaded. All stylesheets, scripts, and font assets are served locally from our own domain.

3. Plugin License Verification (DRM Heartbeat)

When my Minecraft plugin runs on a server and validates its license against vonzo.online/api/heartbeat, it sends only the minimal technical data required to verify authorization:

1. license_key: The license string configured by the buyer in config.yml.

2. server_id: A random UUID generated locally by the plugin on first startup and stored in server-id.txt.

3. plugin_version: The current semantic version of the installed plugin.

4. nonce: A cryptographically random one-time cryptographic value generated per request to prevent replay attacks.

What is NOT collected: The plugin does not inspect, read, or transmit player names, UUIDs, server hardware details, world names, file systems, or other plugin names.

IP Addresses & Rate Limiting: Like any web service on the Internet, vonzo.online receives the connecting IP address of the server making the HTTP request at the transport level. Raw IP addresses are NEVER stored in our database tables or logs. To protect against DDoS and brute-force abuse across distributed edge instances, an ephemeral, irreversible salted SHA-256 hash of connection identifiers is temporarily maintained for rate-limiting counters (expiring automatically after 60 seconds for heartbeat pings, and after 15 minutes for failed admin login attempts). These temporary counter hashes contain no reversible IP data and are purged automatically.

4. Data Retention & Automatic Deletion

Technical server identification records are maintained only while a license is actively running.

To prevent stale database growth and respect privacy, records of servers that have not connected for 30 consecutive days are automatically and permanently deleted from our database via a daily scheduled Cloudflare Cron cleanup query.

5. Cookies & Authentication

The website uses one single cookie (vonzo_session), which is an encrypted, HTTP-only, SameSite=Strict administrative authentication token.

This cookie is used exclusively for my own administrative login to manage licenses. It is never set for ordinary website visitors or customers. Ordinary visitors receive zero cookies.

6. Zero Data Sharing or Sale

I never sell, rent, monetize, barter, or share any data with third parties, advertisers, or data brokers. All data handling is purely technical and strictly scoped to delivering the software license.

7. Inquiries & Data Deletion Requests

Anyone can email me at vonzo.official@gmail.com at any time to ask what records are associated with their license key, or to request the complete deletion of their license and server records. Deletion requests are processed promptly within 24 hours.

8. Governing Law

This Privacy Policy and all data handling activities are governed by and construed in accordance with the laws of India.