★ Privacy Policy

★

1. What we collect

SplitCraft is a Minecraft server, operated by SplitFlux LLC (Nevada, USA) plus a small web dashboard. Here's the data we handle:

Category	Data	Why
Minecraft account	Username, UUID, platform (Java / Bedrock)	Identifying you in-game and on the dashboard.
Connection	IP address (temporarily, for anti-cheat + geolocation of bans)	Ban evasion prevention, DDoS protection.
In-game activity	Playtime, deaths, blocks placed/broken, chat, coordinates of claims and homes, in-game currency balance	Server operation, leaderboards, statistics, economy.
Dashboard session	Session cookie (sc_dash_sid), one-time login tokens	Keeping you logged in after the magic-link auth.
glow.moe link (optional)	glow user ID, glow username, verified status, Glow+ subscription status	Presence sync + Glow+ perks in-game. Only if you link.
Purchases (only if you buy a rank)	The Minecraft name and UUID the rank is for, the email address you give Stripe at checkout, the rank, length, amount and Stripe payment IDs	Delivering the rank, receipts, refunds and disputes, and our tax records.
Voting	Confirmed votes from public vote sites, vote streak counter	Delivering vote rewards.

We don't collect real names or phone numbers. If you buy a rank, the payment goes through Stripe: your card details go to Stripe and never reach us. Stripe tells us your email address, the amount and whether the payment went through, so we can deliver the rank and help with receipts or refunds.

2. Cookies

The dashboard uses a small number of essential cookies:

• sc_dash_sid: your logged-in session. Expires when you log out.
• sc_glow_oauth: security state during a "Login with glow" flow. Expires as soon as the login completes.
• PHPSESSID: a short-lived session on the rank store page, so the checkout form can't be forged.
• sc_store_player: the Minecraft name you typed on the store page, so you don't have to type it again. Kept 30 days; the ✕ next to the name deletes it.

We don't use tracking pixels or third-party advertising cookies. Cloudflare places its own __cf_bm anti-bot cookie (which is essential for their DDoS protection).

3. Third parties

Some parts of the site depend on external services. When you interact with them, they see your IP address and request headers under their own policies:

• Cloudflare proxies all splitcraft.net traffic for DDoS protection and caching. Cloudflare Privacy Policy.
• Stripe handles rank payments. When you check out, you're on Stripe's page and their policy applies. Stripe Privacy Policy.
• DeepL translates chat. When someone whose game is set to another language can see your chat message, its text (not your name or account) is sent to DeepL to translate it for them. Turn the translated lines off for yourself with /translate off. DeepL's privacy policy.
• glow.moe, only if you link your account via /glowmoe <code> or "Login with glow". We share your MC UUID + username; they may share glow user ID + subscription status back. glow.moe Privacy Policy.
• Mineskin.eu renders 3D player heads on the dashboard. They receive your MC username to fetch the skin.
• Discord links take you to Discord, where their Privacy Policy applies.
• Vote sites: when you click a vote link, that site's own policies apply. We only receive vote confirmation callbacks (username + which site).
• Google Fonts, Font Awesome, cdnjs: CSS and font assets are self-hosted where possible. Font Awesome loads from cdnjs.cloudflare.com.

4. Where data lives

Server and dashboard data is stored on Hetzner Cloud servers in Germany. Cloudflare edges may cache static assets globally. If you're in the EU/UK/EEA, your data doesn't leave the EU except in transit through Cloudflare's global network.

5. How long we keep it

• Account data (UUID, username, in-game state): kept while your account exists on the server. If you ask us to delete it (see below), we remove it and anonymize any statistics.
• IP addresses: logged for up to 30 days in server access logs, then rotated out. Ban-list IP records are kept as long as the ban is active.
• Chat logs: kept 90 days for moderation, then purged.
• Backups: world backups kept up to 14 days. Deleted data may persist in backups until the retention window ends.
• glow.moe link: removed within 5 minutes of unlink.
• Purchase records: kept as long as tax and accounting law requires, even if you delete your account.

6. Your rights (GDPR / CCPA)

Wherever you're playing from, you can ask us to:

• See what data we have about you (data access request).
• Correct anything that's wrong.
• Delete your data. This removes your dashboard account, unlinks glow.moe, and anonymizes your in-game statistics. Some anonymized aggregates (leaderboard totals) may remain.
• Export your data in a machine-readable format.
• Object to specific processing.

To exercise any of these, email [email protected] from an address you can verify or ping staff on Discord from your linked account. We aim to respond within 30 days.

7. Security

We use HTTPS everywhere on the site, HMAC-signed API calls between the server and glow.moe, secure httpOnly cookies for sessions, and hashed one-time tokens for the magic-link login. No system is 100% secure. If you notice a security issue, please email [email protected] before making it public.

8. Children

SplitCraft is a public Minecraft server open to all ages, but if you are under the age of digital consent in your country (usually 13 to 16), you must have permission from a parent or guardian before using the dashboard. We do not knowingly collect personal information from children under those ages. If we learn we have, we delete it.

9. Changes to this Policy

We may update this Privacy Policy. Material changes will be announced on Discord and marked with a new "Last updated" date at the top.

10. Contact

Privacy questions or data requests: [email protected]. Security concerns: [email protected]. Or ping staff on Discord.