Privacy Policy
Last updated: June 14, 2026
Legal Basis for Processing
We process your personal data under the following lawful bases:
- Performance of a contract (Article 6(1)(b) GDPR) — Processing your IGN, Discord username, and email is necessary to fulfill your carry order, match you with a seller, and communicate order status.
- Legitimate interests (Article 6(1)(f) GDPR) — We retain anonymized order records for operational analytics, dispute resolution, and service improvement. Your data is anonymized after the retention period so it can no longer identify you.
- Legal obligation (Article 6(1)(c) GDPR) — Where retention is required by applicable tax or commercial law.
Data We Collect
When you place an order, we collect:
- Your Minecraft username (IGN)
- Your Discord username
- Your email address (optional)
- Any notes you provide
We do not use cookies or tracking technologies.
How We Use Your Data
Your data is used solely to fulfill your order and operate the service:
- Match you with a seller
- Share your IGN with our sellers in a private Discord channel so they can find you in-game and complete your carry
- Allow sellers to contact you via Discord
- Track order status and history
- Send you updates about your order
We do not use your data for marketing, profiling, or automated decision-making.
Data Retention
We retain personal data for the following periods:
- Active orders: Personal data is retained for the duration of the service plus 6 months after order completion to handle disputes and refunds.
- Completed orders: After 6 months, all personal data (IGN, Discord username, email, notes) may be anonymized upon request or during periodic cleanup. The order record (package, price, date) is preserved without any personally identifying information.
- Anonymized records: Retained indefinitely for operational analytics and service statistics. These records cannot be linked back to you.
- Audit logs: IP addresses are hashed and logs are retained for 12 months.
Data Storage & Security
Your data is stored securely on our server hosted in Oracle Cloud's London region (UK). We implement:
- Encrypted database storage with restricted file permissions
- IP address hashing in audit logs
- Rate limiting and input sanitization
- HTTPS encryption in transit
- API key authentication for administrative access
Data Processors
We use the following data processors who act on our instructions:
- Discord Inc. — Order notifications and private threads are sent via Discord. Your IGN appears in our private seller channel so available sellers can see what orders are open. Your Discord username is only shared with the specific seller who claims your order, via a private thread and direct message. Discord's privacy policy applies to data they process.
- Oracle Cloud — Our server is hosted in Oracle Cloud's London region. Oracle acts as a data processor under their DPA.
We do not share your data with any other third parties.
International Transfers
Our server is located in the United Kingdom (London), which the European Commission has deemed adequate under Article 45 GDPR. Data sent to Discord may be processed on servers in the United States under the EU-US Data Privacy Framework.
Your Rights
Under GDPR, you have the following rights:
- Right of access (Article 15) — Request a copy of all data we hold about you. Use the Order Status page to view your order, or use the export tool below.
- Right to rectification (Article 16) — Correct any inaccurate personal data.
- Right to erasure (Article 17) — Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing (Article 18) — Object to how we use your data.
- Right to data portability (Article 20) — Receive your personal data in a structured, machine-readable format.
- Right to object (Article 21) — Object to processing based on legitimate interests.
- Right to lodge a complaint — File a complaint with your local data protection authority (e.g., ICO in the UK).
Data Deletion
You can request erasure of your personal data by providing your Order ID below. This will:
- Anonymize all personal data in our database (IGN, Discord username, email, notes replaced with
[redacted]) - Delete any associated Discord threads and notifications
- Preserve the anonymized order record for operational purposes
Enter your Order ID (found on your order confirmation page) to request erasure:
Order Status Page — View your order or find your Order ID.
Data Export
You can request a copy of all data we hold linked to your Minecraft IGN or Discord username:
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
Contact
For privacy-related inquiries, data subject requests, or concerns, please contact us on Discord. We will respond to all legitimate requests within one month.