YLG Privacy Policy
The YLG Server Administration Team (hereinafter “we”) understands the importance of your personal information and will do our utmost to protect its security. We process your personal information in accordance with the principles of lawfulness, legitimacy, necessity, good faith, transparency, and data minimization, and have formulated this Privacy Policy (hereinafter “this Policy”) with reference to the requirements of laws and regulations such as the European Union’s General Data Protection Regulation (GDPR) and the Personal Information Protection Law of the People’s Republic of China.
This Policy applies to all services we provide under the name YLG, including the official website, skin site, documentation site, web-based territory map, and game servers (collectively, “this Service”). Terms such as “this Service,” “account,” and “user content” used in this Policy have the same meanings as in the User Agreement.
Please read and fully understand this Policy before using this Service, especially the content highlighted in bold. By agreeing to this Policy, you consent to our processing of your personal information in accordance with this Policy, including the cross-border processing of personal information described herein.
- We collect only the personal information necessary to provide this Service and ensure security;
- We do not sell your personal information, display advertisements, or track you across websites;
- You may access, copy, correct, or delete your personal information, or close your account, at any time;
- For any questions, please contact contact@ylg.net.cn.
1. Definitions
- “Personal information” means any information recorded electronically or by other means that relates to an identified or identifiable natural person, excluding information that has been anonymized.
- “Sensitive personal information” means personal information that, if disclosed or illegally used, could easily infringe upon a natural person’s personal dignity or endanger their personal or property safety, including the personal information of minors under fourteen years of age.
- “Processing” means the collection, storage, use, handling, transmission, provision, disclosure, deletion, and other activities involving personal information.
- “De-identification” means processing personal information so that a specific natural person cannot be identified without the use of additional information.
- “Anonymization” means processing personal information so that a specific natural person cannot be identified and the information cannot be restored.
- “Child” means a minor under fourteen years of age.
2. Who We Are
This Service is operated by the YLG Server Administration Team. We are the processor (controller) of your personal information and are responsible for determining the purposes and means of processing it.
If you have any questions, comments, requests, or complaints about this Policy or your personal information, please contact us by email at contact@ylg.net.cn.
3. Personal Information We Collect
We collect and use your personal information in the following functional contexts. If you do not provide information necessary for basic functions, you may be unable to use the relevant functions. You may decide whether to provide optional information; not providing it will not affect your use of basic functions.
3.1 Account Registration and Login
When you register an account, we collect your username, email address, and password to create your account, verify your identity, recover your password, and send you necessary notices. Your password is stored after irreversible encryption, so no one, including us, can view it in plaintext.
You may choose to set an avatar and personal bio. We also record your account registration time, points, check-in records, notification settings, and privacy settings to provide the corresponding functions.
3.2 Security Verification
To prevent automated bulk registrations, malicious logins, and mass email abuse, we perform security verification when you log in, register, or recover your password. During verification, we check basic browser environment information, the network address (IP address) used for the current visit, request information, and whether you interact with the page normally (we do not record what you enter), and compare your IP address against publicly available lists of proxy servers, data centers, and anonymous networks.
The above information is used only to determine whether the current visit is from an automated program. To reduce repeated verification, after you log in successfully, we save a trusted device credential in your browser. If we detect a risk, we will ask you to complete additional verification, which may be provided by a third-party human verification service.
3.3 Login Devices and Account Security
When you log in, we collect the IP address used to log in and the approximate location inferred from it, the type and version of your browser and operating system, the login time, and a device identifier digest calculated from browser characteristics.
We use this information to show you logged-in devices under “Settings → Login Devices” and allow you to log out remotely; send an email alert when a login from a different location or a new device is detected; and identify account theft, impersonation, and attempts to evade penalties.
3.4 Third-Party Account Login
When you choose to sign in with a Microsoft, Google, or GitHub account, after you authorize us, we obtain the account's unique identifier, platform-verified email address, and display name from the relevant platform to create or identify your account. For GitHub accounts, we access the verified primary email address associated with your account.
We do not access your passwords, contacts, files, code repositories, or other content on these platforms, nor do we perform any actions on your behalf. You can unlink an account under “Settings → Login Methods.” After unlinking, we will delete the corresponding identifier we have stored.
3.5 Whitelist Applications
When you apply to join the game server, we collect:
- Required information: in-game name, account type (official or offline), preferred contact details (such as QQ, WeChat, or email address), and questionnaire answers (such as gaming experience, gameplay preferences, how you found us, and whether you agree to the rules);
- Optional information: personal introduction, invitation code, age, gender, location, education, occupation, and mobile phone number;
- Security information: IP address, timestamp, device identifier summary, and browser characteristics summary at the time the application is submitted.
Required information is used to review your application, contact you, and create a player profile. Optional information is used only to complete your player profile and improve the community, does not affect the review outcome, and may be left blank. Security information is used to prevent duplicate applications and automated abuse, and to handle appeals.
After your application is approved, we record the most recent time your game account entered the game server and whether you have set a game password, and display this information under “My Whitelist.” When you set or reset your game password on the official website, the password is transmitted in encrypted form to the game server and deleted from the website once transmission is complete. We retain only an irreversibly encrypted version of the password.
3.6 Game Server
When you play on the game server, we collect and record:
- In-game name, game account identifier, IP address at the time of connection, and login and logout times;
- Irreversibly encrypted game login password;
- Gameplay logs, including block placement and destruction, item and container operations, and trades;
- Messages in public channels and commands you enter;
- Records and related information about actions such as warnings, mutes, and bans.
This information is used to provide game services, maintain order and fairness, resolve player disputes, restore destroyed builds, and investigate violations of the Server Rules. In-game private messages are not recorded.
3.7 Community Features
When you use community features such as forums, private messages, follows, favorites, and reports, we store your posts, replies, attachments, likes, favorites, follows, sent and received private messages, submitted reports, and notifications you receive to provide these features to you and other users.
Content and profile information you publish publicly are displayed to other users or the public according to your privacy settings. Private messages are visible only to the sender and recipient.
3.8 Content Safety
To maintain community order and fulfill legal obligations, the usernames, signatures, posts, replies, private messages, and images you upload are subject to automated content safety checks. Some checks are performed by third-party content safety services. We also assess whether content requires further review based on account activity.
To handle reports, investigate violations of the User Agreement, or protect account and platform security, the moderation team may, when necessary, review related information on the site. We do not otherwise review your unpublished content.
3.9 Skin Site
When you use the skin site, we store skins and cape textures you upload, linked in-game names, texture visibility settings, and your likes, favorites, comments, and download records. Public textures are displayed in the skin library. Textures linked to an in-game name are made available for game clients to retrieve by that name.
3.10 Web-Based Land Map
The web-based land map is accessed through a one-time link obtained in-game. The identity associated with the link is temporarily valid only during the current visit and is not linked to your website account. Land, terrain, and member information displayed on the page comes from the game server.
3.11 Sponsorships and Redemptions
Sponsorships are completed on a third-party sponsorship platform, which processes payments. We cannot access your payment information and can only see public information, such as the nickname and avatar, and order details displayed to us by the platform. When you redeem a code on the game server, we record which game account redeemed it and when, to issue sponsorship rewards and resolve disputes.
3.12 Email
We use your email address to send registration verification codes, password recovery emails, alerts for logins from new locations, whitelist results, game password change notifications, and other necessary account-related notices. We retain email delivery records, including recipient address, send time, subject, content, and delivery status, to troubleshoot delivery issues and respond to your inquiries; one-time credentials in these records, such as verification codes and password reset links, are redacted.
Notice emails about server announcements, events, and similar matters are sent only to users who choose to receive them during registration or under “Settings → Email Notifications.” We record when and how you opt in or unsubscribe. Each notice email includes an unsubscribe link, which you can use to unsubscribe with one click at any time; you can also turn off these emails in Settings. Unsubscribing does not affect necessary account-related emails. We do not send commercial advertising emails or provide your email address to others for marketing purposes.
3.13 Visitor Analytics
We use a self-hosted analytics tool to understand overall website traffic, such as page views, referring pages, browser and device types, and approximate country or region. The tool does not use cookies or store your full IP address. Data is used only by us, is not shared with any third party, and is not used to track you across websites.
3.14 Contact, Appeals, and Feedback
When you submit a ban appeal or request a whitelist review, or contact us by email, we store the information and contact details you provide and our correspondence to handle your request and improve our services.
3.15 Service Logs
To ensure the proper operation and security of this service, our servers automatically record access logs, including IP addresses, access times, pages visited, browser types, and error information. These logs are used only for troubleshooting, defending against attacks, and security audits.
4. Legal Basis for Processing Personal Information
We process your personal information based on one or more of the following legal bases:
| Legal basis | Applicable situations |
|---|---|
| Necessary to enter into or perform a contract to which you are a party | Required information for account registration and login, whitelist applications, game services, community features, skin services, sponsor redemption, and account-related emails |
| Necessary for our legitimate interests, provided these do not override your fundamental rights | Security verification, login devices and account security, content security, gameplay logs, service logs, access statistics, and handling disputes and appeals |
| Based on your consent | Optional information for whitelist applications, third-party account login, notification emails, and cross-border processing of personal information |
| Necessary to fulfill legal obligations | Retaining logs as required by law and responding to lawful requests from competent authorities |
| Necessary to respond to emergencies or protect the life, health, and property of natural persons | Necessary processing in emergencies |
You may withdraw your consent at any time for personal information processed based on consent. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.
5. Automated Processing
5.1 To improve efficiency and promptly prevent abuse, we use automated methods to assist with security verification and content safety, such as determining whether an access request comes from an automated program or whether content requires further review.
5.2 Automated decisions are primarily used to determine whether further verification or review is necessary. Decisions with significant effects on you, such as account bans, are made manually by the administration team.
5.3 If you believe automated processing has adversely affected you, such as being unable to complete verification or your content not being displayed correctly, you may contact us by email to request an explanation and manual review.
6. Cookies and Similar Technologies
6.1 Cookies are small text files that websites store in your browser. This service uses only cookies necessary to provide the service and does not use advertising, analytics, or cross-site tracking cookies:
| Name | Purpose | Type | Retention period |
|---|---|---|---|
| PHPSESSID | Maintain your login session and store form security tokens | Necessary | Expires when you close your browser |
| remember | Keep you logged in when you select “Remember me” | Necessary | 30 days |
| ylg_gt | Remember browsers where login has succeeded to reduce security verification | Necessary | 30 days |
| ylg_wl_device | Device identifier for account security and preventing penalty evasion | Necessary | 1 year |
| site_lang | Remember your selected interface language | Functional | 1 year |
6.2 We also use your browser's local storage to save information on your device, such as post drafts, dismissed announcements, and display settings for the territory map. This information is stored only on your device and is not sent to us.
6.3 You can manage and clear cookies and local storage through your browser settings. Since the cookies listed above are all necessary to provide the service, disabling them may prevent you from logging in or using certain features properly.
8. Storage Location and Cross-Border Transfers
8.1 The website servers and main database for this service are located in Japan. Services such as game hosting, content delivery networks, content safety checks, object storage, and network acceleration may be provided by servers and service providers located in mainland China or other countries and regions. Members of the management team are located in different countries and regions and may remotely access your personal information from outside your country or region. As a result, your personal information may be transferred outside your country or region for storage and processing.
8.2 We will transfer only the personal information necessary to provide this service and will take the following safeguards:
- Japan has been recognized by the EU as providing an adequate level of personal information protection;
- For personal information transferred to other countries and regions, where necessary, we will rely on mechanisms recognized under applicable laws (such as standard contractual clauses), or transfer the information where necessary to provide the services you request;
- Data is encrypted throughout transmission, and access to data is subject to strict permission controls;
- We require our engaged service providers to provide a level of protection no lower than that described in this policy.
8.3 The overseas recipient is us, as described in Section 2 of this policy. You may exercise the rights described in this policy by contacting us at our contact email address. By agreeing to this policy, you consent to the cross-border processing described above.
9. Retention Period
We retain your personal information only for as long as necessary to achieve the purposes described in this policy, unless otherwise required by laws and regulations:
| Information Category | Retention Period |
|---|---|
| Account details, whitelist applications, published content, private messages, skin site data | For the duration of the account; deleted or anonymized within fifteen working days after account closure |
| Third-party account linking information | Deleted after unlinking or account closure |
| Login records, security verification records, email delivery records, service logs | Generally, one year |
| Gameplay logs, public chat records | Retained until no longer needed to handle disputes and investigations |
| Enforcement records and associated account, device, and network identifiers | Retained for an extended period as necessary to prevent evasion of penalties |
| Appeals, reviews, and correspondence | Retained for the necessary period after processing is complete |
| Data backups | Deleted along with the backup when the backup cycle ends |
After the retention period expires, we will delete or anonymize your personal information. If deletion is temporarily infeasible for technical reasons, we will cease processing it except for storage and necessary security measures.
10. Information Security
10.1 We implement industry-standard security measures to protect your personal information, including:
- Encrypted transmission is used throughout the website;
- Passwords and game passwords are stored after irreversible encryption; game passwords are additionally encrypted during transmission;
- Administrative permissions are controlled by levels. Only administrative team members with a legitimate need may access personal information, and administrative actions are logged;
- Security-related information, such as security verification and login devices, is stored in summarized or de-identified form;
- Data is backed up regularly to prevent data loss.
10.2 Please understand that the internet is not completely secure, and we cannot guarantee the absolute security of personal information. Please keep your account and password secure and do not log in on unsecured devices or networks.
10.3 In the event of a personal information breach or other security incident, we will immediately activate our emergency response plan and take remedial measures to prevent further harm. As required by applicable laws and regulations, we will promptly inform you of the incident, its possible effects, the measures we have taken, and precautions you can take, and report it to the relevant regulatory authorities.
11. Your Rights
Under applicable laws, you have the following rights regarding your personal information:
- Right to be informed and decide: to learn how we process your personal information and decide whether to consent;
- Right to access and copy: to access your personal information held by us and obtain a copy;
- Right to data portability: to obtain the personal information you provided in a structured, commonly used format;
- Right to rectification and completion: to correct inaccurate information or complete incomplete information;
- Right to erasure: to request deletion of your personal information in circumstances provided by law;
- Right to withdraw consent: to withdraw consent you previously gave;
- Right to object to and restrict processing: to object to our processing of your personal information based on legitimate interests or request that processing be restricted;
- Right to close your account;
- Right to an explanation: to request an explanation of personal information processing rules, including automated processing.
You can directly change your username, avatar, signature, email address, password, and privacy settings in “Settings”; log out of devices; and unlink third-party accounts. For other requests, email contact@ylg.net.cn from the email address you used to register.
To protect your account security, we may first need to verify your identity. We will respond within fifteen working days of receiving your request. We generally do not charge a fee, but may refuse clearly unreasonable, repetitive, or excessive requests, or charge a reasonable fee.
We may be unable to respond to your request in the following circumstances: it is directly related to fulfilling a legal obligation; it is directly related to criminal investigation, prosecution, trial, or enforcement of a judgment; there is sufficient evidence that you have acted in bad faith or abused your rights; responding would seriously harm your or another person's lawful rights and interests; or processing records must be retained to prevent evasion of penalties. We will explain the reasons to you.
If you believe that our handling of personal information violates applicable law, you have the right to file a complaint with the personal information protection regulator in your jurisdiction. We encourage you to contact us first so that we have an opportunity to address your concerns.
12. Protection of Children's Personal Information
12.1 This service is intended for players of all ages. We place particular importance on protecting children's personal information.
12.2 If you are a child (under 14 years of age), or have not reached the age at which you may consent to the processing of personal information independently under the laws of your country or region, please read this policy with your guardian. You may register an account, submit a whitelist application, or provide us with personal information only after obtaining your guardian's consent.
12.3 We will use children's personal information collected with a guardian's consent only where permitted by law, with the guardian's consent, or as necessary to protect the child. We will take stricter measures to protect such information and strictly limit who may access it. We recommend that guardians do not provide optional information about children.
12.4 Guardians may contact us by email to access, correct, or delete a child's personal information, withdraw consent, or close the child's account.
12.5 If we discover that we have collected a child's personal information without first obtaining a guardian's consent, we will delete the relevant information as soon as possible. If you are a guardian and believe that we may have collected your child's personal information without consent, please contact us promptly.
13. Third-Party Links and Services
This service may contain links to third-party websites or services, such as third-party login platforms, sponsorship platforms, and external resources. These third parties operate independently, and their handling of personal information is governed by their own privacy policies, not this policy. We recommend that you read the relevant third-party privacy policies before using their services.
14. Updates to This Policy
14.1 We may update this policy in response to changes in laws and regulations, changes to the service, or operational needs. The updated policy will be published on this page, and the “Last updated” date at the top of the page will be revised.
14.2 For material changes, such as significant changes to the purposes of processing, the types of personal information, or how it is used, we will notify you before they take effect by means such as website announcements, in-service notifications, or email. Where the law requires us to obtain your consent again, we will do so.
14.3 The Simplified Chinese version of this policy prevails. Other language versions are machine-translated and provided for reference only.
15. Contact Us
If you have any questions, comments, requests, or complaints about this policy or your personal information, please email contact@ylg.net.cn. We will respond within fifteen business days after verifying your identity.