UltimateTheme Park
Legal pages▾

Version française

Privacy policy

Last updated: 21 October 2026.

We collect as little as we can, and only to sell Ultimate Theme Park and keep it running.

Who is responsible#

Gaspard Delvaux, sole trader, trading as STALL Studio
Rue Bois du Corbeau 49, 6220 Lambusart, Belgium
[email protected]

What we collect#

  • Your e-mail address, when you buy a license or sign in. It identifies your account and receives the e-mails described below.
  • Payment details, handled entirely by Stripe. We only receive the amount, the last four digits of the card, your billing country, any VAT number you give, and the invoice; we never see your card number.
  • License activations: when your Minecraft server activates its license, we record an anonymous identifier of the installation, the plugin and Minecraft versions, the server's name if one is configured, the server's IP address, and the address of your UTP Connect instance. This lets us enforce the one-server rule, show you where your license is active, and find your park's page when we help you.
  • Ideas posted on our Discord server that we add to the roadmap: the message's text, your Discord username and identifier, and when you posted it. They let the roadmap say how often something was asked, and let us answer you there. A vote on the roadmap is recorded against the site account your Discord account is linked to.
  • Support tickets and their messages.
  • Technical logs (IP address, date, requested page), used for security and troubleshooting.

We do not use analytics, advertising or tracking tools.

We never receive your players' data. UTP Connect runs on your own machine, and what it processes stays there: for that data, you are the controller.

Why, and on what basis#

  • Delivering what you bought, running your account and your licenses, and answering your tickets — performance of the contract.
  • Issuing invoices and keeping accounting records — legal obligation.
  • Keeping the public roadmap — what was asked, how often, and who votes for it — legitimate interest.
  • Protecting the site and the license service against abuse, and telling you about new versions and the end of your updates period — legitimate interest. You can opt out of new-version announcements from your account or from any such e-mail.

Who processes it for us#

  • OVH SAS (France) hosts the site and its database, in its Gravelines data centre, in France.
  • Stripe Payments Europe Ltd (Ireland) processes payments and invoices. Stripe also acts as an independent controller for its own obligations, such as fraud prevention.
  • Resend (United States) sends our e-mails. This transfer outside the European Union relies on the European Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.
  • OpenAI (United States) writes the English title and description of a roadmap item from the message we add and our notes about it. It receives the text alone, never your username or Discord identifier. This transfer relies on the European Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

We sell or rent your data to no one.

How long we keep it#

  • Account, licenses and activations: as long as your account exists.
  • Invoices and payment records: for the period required by Belgian tax and accounting law, currently ten years.
  • Roadmap requests and votes: as long as the item stays on the roadmap.
  • Support tickets: three years after they are closed.
  • Technical logs: a few weeks at most; they are rotated automatically and erased when the site is redeployed.

Your rights#

You can ask to access, correct or erase your data, to receive a copy of it, to restrict its processing, or object to it, by writing to [email protected]. Erasing your account anonymises it and revokes its active licenses; invoices are kept as the law requires.

If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be) or with the authority of the country where you live.

Cookies#

The site uses a single, strictly necessary cookie to keep you signed in. No consent is needed for it, and there is nothing else. The payment form, provided by Stripe, may set its own cookies, needed for payment security.

STALL Studio · [email protected]