RESILIX
Privacy notice
First what this website does, then what the Resilix API stores for the client, the Discord bot and the public profiles.
1. This website
- No tracking. The website sets no cookies and uses no analytics, advertising or social media services.
- No external resources. The fonts (Mojangles, Space Grotesk), the 3D skin viewer, the logo and images come from our own server. No fonts, scripts or stylesheets are loaded from third-party servers or CDNs.
- Two exceptions. Links to Discord only connect to Discord when you click them. Skin and cape images of a profile are loaded by your browser directly from the Resilix API.
- Profile pages. When someone opens
/profiles/<XUID>, the website server requests the public profile data from the Resilix API. It does not pass on cookies or login data. Profile data is publicly available via the XUID link (see section 2). - Logs. The website application itself keeps no access logs. [Add the logs of the host or reverse proxy after publication.]
2. What the API stores, why, and who can see it
Player data (rows with XUID and gamertag) only exists after you link your Discord account to your Xbox account (/link). Exception, clan membership: the bot syncs the roles on clan servers and for this stores the Discord ID, the clan, the join date and the rank of every role holder, even without a link (see the table, row "Clan membership from Discord roles").
| Data | Purpose | Visible to | Retention |
|---|---|---|---|
| Xbox XUID, gamertag | Matching clan tag, cape and profile to your game | public (anyone who knows the XUID can retrieve tag, color, icon, cape and the profile) | until /unlink |
| Discord ID (in the link) | Link, roles | internal only, never in an API response | until /unlink |
| Clan membership from Discord roles (Discord ID, clan, joined "since", rank owner/mod/member) | Main clan and clan display, permissions in clan wars | internal only, never in an API response | as long as the role exists, independent of /link and /unlink: /unlink does not delete it; the next role sync (every 15 minutes) does, once you no longer have the role or leave the server |
| Client rank (user, plus, beta, …) from your Discord roles on the Resilix server | Showing your rank in the client | other Resilix users see your rank in the player list (only six display values) | until /unlink |
| Last online: time of your last client login, stored exactly (every time your launcher connects to the API, even if you are invisible in the player list) | Profile display, cleaning up inactive tokens | public in the profile only as a date, on by default; the exact time stays internal. Hiding it via a setting later [not built yet; until then only via /unlink] | until /unlink |
| Playtime (total minutes; later per day and server) | Profile display, clan XP | public in the profile as total time; the breakdown by server and day stays internal (366 days) | until /unlink; daily values 366 days |
| Client token (hash only) | Signing in your launcher to the API | internal only | 90 days without use, or until /launcher disconnect or /unlink |
| Clan history (tag at the time of joining, joined, left), only for linked players | Profile | public in the profile | until /unlink |
| Clan war lineup and your reports (result, replay ID) | Scoring and Elo of the clan | record public (wins/losses); lineups and reports internal only | lineup until /unlink; replay IDs 30 days after the decision |
| Screenshot evidence for disputed wars (if submitted) | Decision by staff | staff in the evidence channel only | 30 days after the decision (at the latest 90 days after submission) |
| Online presence in the client (online/offline, visible to other Resilix users in your lobby) | Player list in the client | other paired Resilix users in the same lobby | in memory only, not stored |
Not stored: passwords, payment data (there is no shop yet), IP addresses (only briefly in memory for the rate limit), chat content, names of visited servers linked to a person in logs. The server logs contain no XUID, Discord ID, tokens or replay IDs.
After /unlink, the clan (not you) keeps its Elo, XP and war history because they belong to the clan; your name and your lineups are removed.
3. Legal basis, recipients, rights
- Legal basis: consent by linking (
/link, revocable at any time with/unlink) [Art. 6(1)(a) GDPR, to be reviewed]; legitimate interest for technical operation (tokens, rate limit, security) [Art. 6(1)(f), to be reviewed]. - Recipients: Discord (linking via Discord OAuth, bot), Microsoft/Xbox (gamertag and XUID confirmation when linking), [API host]. [Review data processing agreements and transfers to third countries.]
- Your rights: access, rectification, erasure (
/unlink), objection, complaint to a supervisory authority. [Add a contact.] - Minors: [Review age limit and parental consent; many Minecraft players are young.]
- No telemetry: the client sends no usage statistics. "Last online" and playtime are a feature for you and your profile, not an analysis by Resilix [keep in mind when wording this that the login time is stored].
Source from section 2 on: draft "Terms of use and privacy" in the client repository (docs/rechtliches/nutzungsbedingungen-datenschutz-entwurf.md, as of 13 October 2026), translated from German. Open questions for the legal review are listed there.