If somebody sells a Minecraft server, what has to happen to the user data (because of privacy)? Do you need to be deleted once the server has been sold to me?
That would be the simplest.
In general, it also depends on whether any personal data worth protecting is on the server.
User data in Minecraft is not personal information. Whether someone named xXKevinXx is on WhiteList and has twelve melons in their inventory is not covered by the privacy policy.
If I understand correctly, the server changes only the owner. Thus, from the point of view of the player everything stays the same.
However, if you open a new server and just get the files and configurations of the old server, you should at least delete the log files to no longer have the old IP addresses.
Game time, name etc. Are included.
Are online time etc. No personal data? IPs are also saved.
If the server stays where it is and the players connect as usual, everything can stay as it is.
I'm confused now; how sold?!
Someone has had a server (online) and you continue to use it?
Or has someone sent you the data or the server content and you want to build on it now?
The first would not change, because only the owner changes. The system remains unchanged for the player. You just have to change according to the imprint etc. And what still legally belongs to it.
The second, you should at least delete the logs with iP addresses. If you delete the player data (Stats, UUID, achievements etc. Pp.) That equates to a server reset, because everything from the players is then gone and one finds if necessary no GS / country against if one has not stored anything via SQL. That would be the dead for an existing well-running project.
Depending on how good the server / website is one has anyway a reference to the privacy agreement or order and there's what data from the game are collected. And that's just UUIDS and iP addresses no more, so nothing related to personal data.
And on an iP gets the normal mortal anyway nothing except a rough location and possibly provider.
Everything else like online times, stats, ontime, achievements, MCMMo etc. Are irrelevant that says nothing to the person behind the account.
If clear names and / or inferences of the names are possible on the person behind it and the seasons are values attributable to a date (aka played on sounso much from to o'clock), then the personal data must be either deleted or anonymized.
Or there's a way in which users can be informed about the disclosure of the data and they can agree.