Last updated: October 13, 2026
PT Kaizen Network Indonesia operates Kaizen Network, including kaizenmc.id, related Minecraft game servers, and linked services. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal data when you use our services. Please read this Policy carefully.
PT Kaizen Network Indonesia (an Indonesian single-person limited liability company, classified as a micro enterprise) is the data controller for personal data collected through this website and our Minecraft servers.
For inquiries about this Policy or your personal data, please contact our Data Protection Officer using the address above.
We collect different categories of data depending on how you interact with our services:
When you log in to the website via Discord OAuth2 (e.g., for the Staff Evaluation portal), we receive your Discord user ID, username, avatar, and email address. This data is stored in MongoDB Atlas and is used to authenticate you and associate your submissions.
You can also log in with your Minecraft account: you type a code from the website on one of our lobby servers, and the server sends us your Minecraft UUID and username. If your Minecraft account is linked to Discord (Section 2.2), we also look up that Discord account's ID, username, and avatar. Login-code records are deleted within about an hour.
If you choose to link your Discord account to your Minecraft account in-game (via /discord link), the association between your Discord ID and Minecraft username/UUID is stored on our self-hosted Minecraft server infrastructure. This enables features such as Booster bonuses and Referral IP creation.
When you connect to our Minecraft servers, we process your Minecraft username, UUID, IP address, the hostname you used to connect (see Hostname Tracking below), and in-game activity data such as playtime and game statistics. Primary game-server data is stored on infrastructure we manage in Singapore; use by website services and related processors is described in this Policy (including Sections 2.9 and 4).
For in-game accounts that use passwords, we store passwords as hashes, not plain text.
We record which hostname a player first uses to join our server. This is used for referral attribution and analytics purposes. Hostnames we track include:
Player IP addresses are logged on our Minecraft servers for security purposes, anti-cheat enforcement, and aggregate analytics. We may publish anonymized, aggregated statistics derived from IP data (e.g., "Top 5 Most Popular ISPs on Kaizen Network"). We do not publicly disclose players’ raw IP addresses. Processing by service providers and legally required disclosures follow Section 4.
When you make a purchase through our store, we collect your Minecraft username, chosen payment method, and transaction history. Payment processing is handled by Midtrans and/or Tripay. Transaction records are stored in MongoDB Atlas. We do not store your full payment card details.
Images uploaded to the website (e.g., gamemode featured screenshots) are stored in Cloudflare R2 and may be displayed publicly on the website.
When you submit a staff evaluation, we store your Discord ID alongside your ratings and optional text feedback for the duration of the evaluation month. Evaluations are anonymous to staff: only administrators (management) can see which Discord ID submitted which evaluations during the active month. At the end of each month, your evaluations are de-linked from your Discord ID and retained as anonymized historical data.
Minecraft usernames and in-game statistics displayed on our public leaderboard are sourced from our game servers and cached in MongoDB Atlas. This data is publicly visible by design.
We use Google Analytics 4 to count page views and see how the website is used, and Google Ads to measure whether our ads bring visitors to the website. Each one sets cookies only if you allow it in the cookie banner (see Section 2.15). Until you allow it, Google may still receive basic signals without cookies (such as the time, your browser type, the page visited, and your cookie choice), which it uses to estimate traffic without recognizing you across visits. Google Analytics 4 automatically anonymizes IP addresses.
We use Cloudflare to proxy and secure this website and to power our URL shortener (kzn.li). Cloudflare may process your IP address and request metadata as part of its routing, security, and DDoS protection services. See Cloudflare's Privacy Policy for more information.
When you chat with Sparky, our on-site AI assistant, your messages and Sparky's replies are stored in MongoDB Atlas so you can keep and resume multiple conversations, and so we can operate and improve the assistant. No login is required: conversations are tied to a random identifier generated in your browser, not to your name, Discord, or Minecraft account. You can delete any individual conversation, or all of them, at any time from the chat window, and conversations are automatically deleted after 90 days of inactivity. Because this identifier is not automatically linked to your account, manage conversations through those deletion controls; the identity-based request process in Section 6 cannot match them automatically. Clearing browser storage alone does not delete the server-side copy of a conversation.
To generate replies, the contents of your questions and relevant conversation context are sent through OpenRouter, a third-party provider in the United States, to third-party AI model providers. This processing takes place outside Indonesia and is separate from our game servers in Singapore. Please do not include personal data, passwords, or sensitive information in your questions. Messages may still contain personal data if you enter it yourself.
If you attach an image (for example a screenshot), it is sent with your question in the same way to generate the reply. We do not store the image: the saved conversation only notes that an image was attached. Images are resized in your browser before sending, which also removes photo metadata such as location. Do not attach images that show personal data or passwords.
When you open a support ticket from our Contact page, we store the email address you enter, your form answers, the conversation and any files you attach, and the IP address the ticket was opened from (to prevent abuse). The conversation is mirrored into a dedicated channel on our Discord server so staff can answer it, which means the staff handling your ticket see your email and everything in the conversation. We use your email for that ticket itself: the link to it, staff replies, its closure, the warning before it closes automatically, and a password reset link if you request one through the ticket. The address is also used to limit how many tickets can be open per address, as abuse prevention.
These tickets need no account. Access is a secret link, which we email to you and store in your browser: anyone holding that link can read and answer the ticket, so do not share it. Because website tickets are not connected to a Discord or Minecraft account, the requests in Section 6 cannot match them automatically; email [email protected] with the ticket number if you want that data deleted.
Our website has a small Minecraft-style "advancements" easter egg that notes which parts of the site you have looked at. This progress is stored only in your own browser, is never sent to us or to anyone else, and is not linked to any account. You can erase it at any time with the Reset progress button on the Advancements page, or by clearing your browser storage.
Cookies are small files a website stores in your browser. We sort ours into three groups:
On your first visit, a banner asks which optional groups you allow. You can change your choice at any time in Cookie Settings, also found at the bottom of every page. When you turn a group off, we delete the cookies it set on our domain. We ask again after 12 months, or sooner if we add a new optional cookie.
| Cookie | Group | Purpose | Lasts |
|---|---|---|---|
kaizen_session |
Necessary | Keeps you logged in with Discord | 15 minutes, renewed while you use the website |
kaizen_refresh |
Necessary | Renews your login session | 30 days |
__Host-kaizen_mc_session |
Necessary | Keeps you logged in with your Minecraft account | 24 hours |
__Host-kaizen_mc_binding |
Necessary | Ties a Minecraft login code to the browser that asked for it | 10 minutes |
oauth_state |
Necessary | Protects the Discord login from forged requests | 10 minutes |
turnstile_pass |
Necessary | Remembers that your browser passed the bot check for Sparky | 12 hours |
__cf_bm |
Necessary | Set by Cloudflare to detect bots | 30 minutes |
cf_clearance |
Necessary | Set by Cloudflare when your browser passes a security check | Set by our Cloudflare security settings |
_ga, _ga_* |
Analytics | Google Analytics: tells visits apart | 2 years |
_gcl_* |
Advertising | Google Ads: connects ad clicks to visits | 90 days |
Restricted staff and event-judge portals use additional necessary cookies for authorized access. Details are available in the Cookie notice inside each portal.
Google Ads may also set cookies on Google's own domains (such as doubleclick.net), which Google's Privacy Policy covers.
We also keep a few things in your browser's local storage: your cookie choice (12 months), Sparky conversation history and identifiers (Section 2.12), support ticket links (Section 2.13), advancement progress (Section 2.14), and preferences such as your preferred payment method. These are needed for those features and are not used for analytics or advertising.
We process your personal data on the following legal bases:
We share data only with the following processors as necessary to operate our services:
We may also disclose your personal data to law enforcement authorities or other government agencies where required by applicable law, legal process, or to protect our rights, safety, and property.
We do not sell your personal data to any third party.
Cross-border processing must meet applicable data protection requirements. The location of our game servers does not mean that all website and third-party service processing takes place in Singapore.
We retain your personal data for the following periods:
You have the right to access, correct, or request deletion of your personal data held by us. To exercise these rights, please contact us at [email protected]. Please note that certain data (e.g., anonymized evaluation history) cannot be re-linked to you after de-linking has occurred.
You can view and download account data, review or withdraw Privacy consent, and request erasure through My Data. Erasure requests enter a queue for staff review and processing; certain data may be retained where a valid legal basis applies, which we will explain to you. Withdrawing consent does not automatically delete data. For corrections, data not linked to an account, or help exercising your rights, contact [email protected].
We implement reasonable technical and organizational measures to protect your personal data, including database access controls, encrypted connections, and infrastructure security practices. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
If a personal data protection failure affects you, we will notify you in writing, including by email where available, in accordance with applicable requirements. The notice will describe the data exposed, when and how the incident occurred, and the containment and recovery measures taken. We also notify the competent authority as required by law.
Our services are not directed at children under the age of 13. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete such data promptly.
We reserve the right to update this Privacy Policy from time to time. We will notify users of significant changes via our Discord server. Where a change requires your consent, we will request it through the applicable consent process. Continued use of the services does not replace consent that is required. Please review this Policy periodically.
For privacy-related questions, data access requests, or deletion requests, please contact us through the following channels:
This Privacy Policy is effective as of the date stated above and applies to all users of Kaizen Network services.