Privacy Policy

Last updated: February 9, 2026

Please read our privacy policy carefully before using Our Service.

1. Information We Collect

We collect the following information when you use our services:

Registration and Purchase Data: Includes your name, email address, billing address, and transaction details. This data is collected to fulfill purchases and link orders to products.
Plugin Licensing and Telemetry Data: When you use our licensed Minecraft server plugins, we collect the following technical data strictly necessary for license validation, abuse prevention, and service reliability:
- Server Identifiers: Server uuid/name and/or server domain to uniquely identify licensed installations.
- Network Information: IP address of the server machine for license session validation and abuse prevention.
- Server Usage Metrics: Aggregate player count only (total number of players online at validation time) to dynamically adjust license session limits and prevent unintended service disruption.
- Timestamps: Date and time of license validation requests for session management and support.
Important: We do NOT collect, store, or process:
- Individual player usernames, UUIDs, or identifiers
- Player IP addresses or location data
- Player behavior, gameplay data, or chat messages
- Any personally identifiable information about individual players
This telemetry is limited to the minimum data necessary for the licensed plugin to function and is processed automatically without human review except when investigating specific technical support requests or license abuse cases.
Website Usage and Analytics Data: Includes visit frequency, page views, and other metrics collected via Posthog to understand user behavior and improve website quality.

2. Legal Bases for Processing

We process your information under the following legal bases under GDPR Article 6:

Contractual Necessity (Article 6(1)(b)): Registration, purchase data, and plugin licensing/telemetry data are processed as strictly necessary for the performance of the license agreement to which you are a party. The licensed plugins cannot function, validate licenses, prevent abuse, or maintain service reliability without collecting the server identifiers, IP addresses, usage metrics, and timestamps described above. This processing is essential to deliver the contracted service.
Legal Obligations (Article 6(1)(c)): We process data to comply with tax, accounting, consumer protection, and other legal obligations imposed by applicable law.
Legitimate Interests (Article 6(1)(f)): We process website analytics data and certain security-related data for improving our services, preventing fraud, and protecting our legal rights and those of our customers, provided this does not override your fundamental rights and freedoms. Our legitimate interests include maintaining service quality, preventing license abuse, and ensuring platform security.

No Consent Required for Core Functions: Because plugin telemetry is strictly necessary for contract performance, no separate consent is required under GDPR. However, you may exercise your rights as outlined in Section 6 below, subject to our legal obligations to maintain service integrity.

3. Purpose of Collecting Information

The information we collect serves specific, limited purposes in accordance with data minimization principles:

Purchase and Account Management: Process transactions, provide customer support, and maintain your account.
License Validation and Security: Verify licensing compliance, authenticate licensed server installations, and prevent unauthorized use or license abuse.
Service Reliability and Optimization: Dynamically adjust license session limits based on server load (using aggregate player counts) to prevent false-positive license violations and service disruption. This ensures the plugin remains functional during legitimate high-traffic periods.
Technical Support: Diagnose and resolve technical issues, licensing problems, and service interruptions when you contact support.
Service Improvement: Analyze aggregated, non-personal usage patterns to improve plugin functionality, reliability, and website quality.

Data Minimization Commitment: We collect only the minimum data necessary for each purpose. Plugin telemetry is limited to technical server-level information and does not extend to individual player tracking, profiling, or behavioral analysis.

Prohibited Uses: We do NOT use collected data for:

Advertising, marketing, or promotional profiling (beyond aggregate analytics)
Sale or rental to third parties
Tracking or profiling individual players
Creating user profiles beyond what is necessary for service delivery

4. Use of Posthog

Our website uses Posthog to understand user behavior. Information collected includes visit frequency and page views, via IP addresses. This helps enhance the quality of our services.

5. Cookies

We use cookies to enhance website functionality and user experience. Necessary cookies are automatically set to allow basic functionality. Optional cookies, such as analytics cookies, require your explicit consent. You can manage cookies through your browser settings or our cookie banner.

6. Your Privacy Rights (GDPR, CCPA/CPRA, and Other Jurisdictions)

European Economic Area (EEA), UK, and Switzerland (GDPR):

You have the following rights regarding your personal data, subject to applicable law:

Access and receive a copy of your personal data.
Correct inaccurate or incomplete data.
Request deletion of personal data where legally permitted (right to be forgotten).
Request restriction of processing or object to processing based on legitimate interests.
Receive your data in a portable format (data portability).
Withdraw consent at any time for processing based on consent (does not affect lawfulness of prior processing).
Lodge a complaint with your local data protection authority if you believe your rights have been violated.

California, Virginia, Colorado, Connecticut, and Other U.S. States (CCPA/CPRA and Similar Laws):

If you are a resident of California or another state with comprehensive privacy legislation, you may have additional rights, including:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do NOT sell or share personal information for cross-context behavioral advertising. No opt-out action is necessary.
Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes requiring an opt-out under CCPA/CPRA.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Important Limitation: Deletion or restriction of plugin telemetry data may prevent the licensed plugin from functioning, as this data is necessary for contract performance. If you request deletion of licensing data, we may need to terminate the license agreement and revoke access to the plugin.

To exercise your rights, contact us at [email protected]. We will respond within the timeframes required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or destruction, including:

Encryption of data in transit using industry-standard protocols (TLS/SSL).
Access controls and authentication mechanisms to limit data access to authorized personnel only.
Regular security assessments and monitoring for vulnerabilities.
Secure data storage with reputable service providers that maintain SOC 2 or equivalent certifications.
Incident response procedures to address potential data breaches promptly.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected individuals and authorities in the event of a data breach as required by law.

8. Data Sharing and Disclosure

We share personal information only as necessary with service providers to deliver the Service or with legal authorities to comply with legal obligations.

9. Data Retention

We retain personal data only as long as necessary for processing purposes and to comply with legal obligations. We apply the following retention periods:

Purchase and Account Data: 7 years from the last transaction (to comply with tax, accounting, and consumer protection laws in applicable jurisdictions).
Plugin Licensing Data: Retained for the duration of the active license plus 90 days after expiration or termination (to support license renewals and resolve disputes). Server identifiers and IP addresses associated with inactive licenses are deleted after this period unless required for ongoing fraud investigation.
Plugin Telemetry Data: License validation timestamps and usage metrics are retained for up to 12 months for operational purposes, then aggregated and anonymized. Anonymized aggregate statistics may be retained indefinitely for service improvement.
Website Analytics Data: Up to 2 years unless anonymized, after which identifying information is removed.
Support Communications: Retained for 3 years to maintain support quality and resolve follow-up inquiries.

Upon expiration of the retention period, personal data is securely deleted or anonymized such that it can no longer identify individuals.

10. International Data Transfers

Our services are used globally, and personal data may be transferred to and processed in countries outside the European Economic Area (EEA), United Kingdom, or your country of residence, including the United States.

When we transfer personal data internationally, we implement appropriate safeguards to protect your data, including:

Standard Contractual Clauses (SCCs): EU Commission-approved contractual terms with data processors and service providers located outside the EEA.
Adequacy Decisions: Transfers to countries recognized by the EU Commission as providing adequate data protection (where applicable).
Additional Safeguards: Supplementary measures such as encryption, access controls, and data minimization to ensure data protection equivalent to EU standards.

For more information about the safeguards we use for international transfers, please contact us at [email protected].

11. Children’s Privacy

Our Service is not intended for individuals under 18. We do not knowingly collect personal data from children. If we learn that a child has provided personal data without parental consent, we will delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Please review this page regularly to stay informed.

13. Contact Us

Please send feedback, comments, or technical support requests by email at [email protected] or via our Discord link.