Privacy policy
Last updated 12 September 2026
What we collect
- The username you type. We send it to Mojang’s public profile API to get the matching account UUID and canonical spelling.
- Your Minecraft UUID. This is what the rank is granted to, so it is stored with the order.
- Order records. An order ID we generate, the rank bought, the amount, the currency, the Stripe price identifier and the time.
- Technical request data. Our host and our rate limiting see your IP address and browser user agent so we can stop abuse of the checkout and username lookup endpoints.
We do not ask for your real name, address, email address or date of birth, and we do not set advertising or analytics cookies.
What we never see
Card numbers, bank details and the billing address you give to Stripe never reach this site or the Minecraft server. Payment happens on Stripe’s own checkout page. We receive only the payment status, the amount, the currency and the order reference. Staff purchase notifications sent to our Discord deliberately exclude card and customer email details.
Why we use it, and our lawful basis
- Delivering the rank you bought. Performance of a contract. We cannot grant a rank without a username and UUID.
- Preventing duplicate deliveries, fraud and abuse. Our legitimate interest in running the store correctly and not charging or delivering twice.
- Keeping records of sales. A legal obligation, for tax and accounting.
Who else handles it
- Stripe processes the payment and is a controller of the payment data you give it directly. See Stripe’s own privacy policy.
- Mojang Studios receives the username you enter, because that is how a Java Edition account is looked up.
- Discord receives a staff notification containing the order ID, rank and Minecraft username so staff can confirm a sale.
- Our hosting and database providers store the site and the order queue on our behalf.
We do not sell personal data and we do not share it for advertising. Some of these providers operate outside the United Kingdom, in which case transfers rely on the UK international data transfer agreement or equivalent safeguards.
How long we keep it
- Orders that were started but never paid are deleted automatically after 30 days.
- Records that a given payment was processed and a given delivery completed are kept indefinitely. These are what stop a repeated payment notification from granting the same rank twice, so we cannot delete them without risking incorrect deliveries.
- Sales records are kept for as long as tax law requires, currently six years.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for a portable copy. Ask in the Discord and include the Minecraft username and, if you have it, the order ID.
Some requests have limits. We will not delete the deduplication and accounting records described above while we still need them, and we will explain why if that applies to your request.
If you are unhappy with how we handled a request you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
The store is not intended for children under 13. If you believe a child has bought a rank or given us data, tell us in the Discord and we will remove what we can.
Changes
If this policy changes we will update the date at the top and announce anything significant in the Discord.
