Vexor Core StudiosPrivacy notice
Last updated 23 October 2026
This notice explains what personal data Vexor Core Studios collects when you use our websites and services, why, and what you can do about it. It covers:
- VexGuard and the plugin shop (vexguard.the-best.uk), including the licence system built into our paid plugins
- Studio (vps.the-best.uk/studio), for custom plugin, website and script commissions
- Stormwall resource pack host (packs.the-best.uk) and our status page (vps.the-best.uk/status)
- Vexor Support, our Discord support bot and its staff dashboard (vexorsupport.the-best.uk)
- Email to and from @the-best.uk addresses, and our Discord server
Keystone (keystone.the-best.uk) has its own privacy policy.
Who we are
The controller of your personal data is Harrison, a sole trader trading as Vexor Core Studios, United Kingdom. Email: support@the-best.uk.
We are a one-person business, so there is no data protection officer. Email us about anything in this notice.
What we collect, why, and our lawful basis
| Data | Why we use it | Lawful basis (UK GDPR art. 6) |
|---|---|---|
| Your Discord account: user ID, username and avatar, received when you log in with Discord. We also store when your account was created and last used. We never see your Discord password, and we don't keep Discord access tokens. | To give you an account, link licences and projects to it, and show who you are. | Contract |
| Email address you give at checkout or in Studio. | To send licence keys, order confirmations, invoices, renewal and expiry reminders, and service messages. | Contract; legal obligation for order confirmations |
| Orders and payments: what you bought, price, one-off or monthly, promo code, order and Stripe references (checkout session, customer, subscription, invoice), payment status and dates, and your confirmation at checkout that you wanted immediate access (with the time and the terms version). We never see or store your card details; Stripe handles them. | To sell and deliver plugins, run subscriptions, keep accounting records, and handle refunds and disputes. | Contract; legal obligation (tax and accounting records); legitimate interests (handling disputes and defending legal claims) |
| Licences: licence key, product, status, expiry, server limit. | To issue and manage licences. | Contract |
| Shop messages on Discord: if you hold a licence, we may occasionally send you a Discord direct message from the VexGuard bot about our products. We record whether each message was delivered and whether you unsubscribed. | To tell customers about new or updated plugins. Every message has an Unsubscribe from shop DMs button, and we stop as soon as you press it (or email us). | Legitimate interests (telling existing customers about similar products) |
| Licence checks from your Minecraft server: when a licensed plugin starts and checks its licence, it sends the licence key, plugin and version, a hardware identifier generated for that server, and we see the server's IP address and port. We store the servers each licence is activated on (IP, port, hardware ID, first and last seen) and a log of licence events. | To make licences work (including IP and port locking and server limits), let you see and reset your servers, and detect licence sharing and abuse. | Contract; legitimate interests (protecting our software from unlicensed use) |
| Server analytics and usage data from our plugins: with each licence check (at start-up and periodically while running), paid plugins also send a snapshot of the Minecraft server they run on: server software and Minecraft version, plugin version, message of the day (MOTD), online-mode and whitelist settings, number of players online and the player limit, the names and UUIDs of players online and of server operators, world names, and the names of other installed plugins. Our server may also query the server's public server-list status (version, MOTD, player count and sample). We keep the latest snapshot per server and anonymous daily totals (number of servers and players). | To run and support your licence (showing you your servers and their status in your panel), to detect licence sharing, leaked copies and abuse, to understand which versions, platforms and features are used so we can fix bugs and decide what to support, and for anonymous usage statistics. | Contract (it is part of how the licensed plugin works, as set out in our Terms of sale and Plugin licence); legitimate interests (protecting our software, improving our products and keeping usage statistics) |
| Download watermarks: each plugin download is a unique build linked to your licence, with its ID and file hash recorded, plus the IP address the download came from. | To trace leaked copies back to the licence they came from. | Legitimate interests (protecting our software and our customers' paid licences) |
| Security and abuse records: flags such as IP mismatches, account bans, administrator actions, rate-limit counters (kept in memory only). | To protect accounts and the service. | Legitimate interests |
| Studio projects: your request, project details, chat messages, files and screenshots you upload, quotes, invoices and payment status, and files we deliver. | To quote, build, deliver and get paid for your commission. | Contract; legal obligation (accounting) |
| Support: messages and tickets you send to Vexor Support on Discord, the bot's answers, and any feedback you give. | To answer your question and improve answers. | Legitimate interests |
| Emails and Discord messages you send us. | To reply and help you. | Legitimate interests |
| Technical logs: web server logs on some of our sites (IP address, time, page requested, browser). | Security, fixing faults. | Legitimate interests |
| Resource pack downloads: when your game downloads the Stormwall pack, our server sees your IP address and game client details. | To deliver the pack. | Legitimate interests (providing the pack the server owner asked for) |
We don't sell personal data, use it for advertising, or use tracking or advertising cookies. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Licence checks automatically refuse a licence that is used outside its limits; you can ask us to review any refusal.
Plugin analytics: what you agree to when you buy
By buying, downloading, installing or using our paid plugins you agree that they will send the licence and server analytics data described above to our servers. This data collection is a built-in part of how the licensed plugins work; there is no setting to switch it off, and the plugins will not work without it. If you don't want this data to be sent, please don't buy or install the plugins (see our Refunds page if you have already bought one).
Our lawful basis for this is contract and our legitimate interests, as set out in the table above, not consent. You can still object to processing based on legitimate interests (see "Your rights" below); if you do, the practical way to stop it is to remove the plugin from your server.
Your players: the analytics include the in-game names and UUIDs of players and operators on your server. If you run a server that other people play on, you are responsible for telling your players that the server uses third-party plugins which share this information with us, for example in your server rules or privacy notice. Players can contact us directly at support@the-best.uk to exercise their rights.
We use analytics data only for the purposes listed above. We don't sell it, use it for advertising, or share it with anyone other than our hosting provider.
AI in support
Vexor Support answers some questions with an AI language model. The model runs on our own server: your messages are not sent to an outside AI company. Answers marked as AI-generated can be wrong; ask for a human (or email us) if you need one. Support messages are not used to train any third-party model.
Who we share it with
We only share personal data with these service providers, who act for us:
| Provider | What for | Where |
|---|---|---|
| Stripe Payments Europe Ltd / Stripe, Inc. | Card payments, subscriptions, invoices and receipts. Stripe is also an independent controller for fraud prevention and its legal duties. | UK/EU, USA |
| Discord Inc. | Log in with Discord, the support bot, and direct messages about your licences. | USA |
| Contabo GmbH | Hosts the server that runs VexGuard, Studio, the pack host, status page, support bot and email. | Germany/EU (or as set by the hosting plan) |
| Vercel Inc. | Hosts our main website, the-best.uk. | USA |
Our email server (mailcow) runs on our own Contabo server. We may also disclose data if the law requires it, or to establish or defend legal claims (for example sending order and delivery records to Stripe and your card issuer if you dispute a payment).
International transfers
Some providers process data in the United States. Where that happens we rely on the UK's adequacy regulations for the UK Extension to the EU-US Data Privacy Framework (for certified providers) or on the ICO's International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses in the provider's terms.
How long we keep it
| Data | How long |
|---|---|
| Account (Discord ID, username, avatar, email) | While you have an account or a licence, then up to 12 months after your last licence ends or your last login, whichever is later. You can ask us to delete it sooner. |
| Orders, payments, invoices, consent records | 6 years after the end of the tax year they relate to (HMRC record-keeping), then deleted. |
| Unfinished or failed checkouts | 2 days |
| Licences and their activations | While the licence exists. Removing a server deletes its activation. |
| Licence event logs | Successful routine checks: 30 days. Other events: IP address and hardware ID removed after 12 months; the rest kept while the licence exists. |
| Server analytics snapshots (server details, player and operator names and UUIDs, worlds, plugins) | Only the latest snapshot per server is kept; each licence check replaces the previous one, so player and operator lists are only as old as the last check. We delete the snapshot for a server on request. |
| Anonymous daily usage totals (servers and players) | Kept indefinitely; they contain no personal data. |
| Licence violation and abuse records | 90 days |
| Download watermark records | While the licence exists, and up to 6 years after, to trace leaks. |
| Studio projects, chat and uploads | Delivered files are deleted when the download window ends. Project chat and uploads: 2 years after the project ends, unless needed for a dispute. |
| Support tickets and answers | 12 months |
| Web server logs | 14 days |
Your rights
Under UK data protection law you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it (including anything we do on the basis of legitimate interests); give you your data in a portable format; and withdraw consent where we rely on it. Email support@the-best.uk. We reply within one month. We may need to check it's really you, for example by asking you to message us from the same Discord account.
Some data we must keep (for example tax records) even if you ask us to delete it, and deleting your account ends any licences on it.
Complaints
If you're unhappy with how we've handled your data, please tell us first at support@the-best.uk with "Data protection complaint" in the subject. We'll acknowledge it within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office at any time: ico.org.uk/make-a-complaint, 0303 123 1113. If you live in the EU you can also complain to your local data protection authority.
Children
You must be at least 13 (Discord's minimum age, or higher where you live) to log in, and 18 or over, or have permission from a parent or guardian, to buy. If you think a child under 13 has given us personal data, contact us and we'll delete it.
Cookies
See our cookie policy. We only use cookies that are strictly necessary.
Changes
If we change this notice we'll update the date at the top, and tell you by email or on Discord if the change is significant.