DONUT2X

Privacy Policy

Last updated October 10, 2026

Donut2x asks for as little as it can. There is no email, no password and no real name. This page lists what we do keep.

What we keep

  • Your Minecraft name and UUID, checked with Mojang when you sign in.
  • Your bets, results, balances and the full history of coins in and out of your account.
  • Deposits and withdrawals, with the in-game transaction they match.
  • Your chat messages, tips and referrals.
  • If you link Discord, your Discord account ID and each Discord tag reward you claim.
  • If you open a ticket on our Discord, a transcript of it. We keep the last 100 closed tickets and delete older ones.
  • Moderation records: mutes, bans and the reason for each.
  • If you email us, your address and message, so we can answer.

What we do not keep

We do not store your IP address in our database. It is held in memory for a short time to limit repeated requests, then dropped.

Cookies and storage

  • d2x_session keeps you signed in for up to 14 days. We store only a hash of it.
  • d2x_ref remembers who invited you until you sign in.
  • d2x_discord_state lasts only while you link Discord, to make sure the link was started by you.
  • Your age confirmation and Crash sound settings stay in your browser.

We count visits with Umami, which sets no cookies and does not store your IP address. It records the page, the site or link that sent you, your browser, device type and country. No ads and no tracking cookies.

Who else sees it

  • Other players see the first letter of your name, your avatar, rank, chat messages, tips, big wins, your place in the daily race and your side of a 1v1 game. Staff see your full name.
  • If you link Discord, Discord sees that link: we check your server tag with it and give you the role that matches your rank on our Discord server.
  • Cloudflare carries all traffic to the site, so it sees your IP address and requests.
  • Umami Cloud receives the visit counts described above.
  • Mojang receives your name when we check it at sign-in.
  • If you play from Bedrock, the GeyserMC API receives your Xbox gamertag so we can find your account.
  • Avatars are fetched from mc-heads.net by our server, so your browser never contacts that site.
  • Deposits and withdrawals happen on DonutSMP, which sees them in game.
  • Email to [email protected] passes through Cloudflare and is stored by Microsoft (Outlook).

We do not sell your data.

Why we keep it

To run your account, games and balance, to keep results verifiable, to stop fraud and to moderate chat.

How long

Sign-in attempts expire after 15 minutes and sessions after 14 days. Your account and coin history are kept while the site runs, because they are the record of every balance.

Your choices

Ask on our Discord or email [email protected] for a copy of your data or to delete it. We delete what we can. Coin history needed to keep balances correct and to prevent fraud is kept.

Age

Donut2x is for players 18 and older.

Changes

We may update this policy. The date at the top shows the latest change.