🌸 Privacy Policy

🌸

1. What we collect

SplitCraft is a Minecraft server, operated by SplitFlux LLC (Nevada, USA) plus a small web dashboard. Here's the data we handle:

Category	Data	Why
Minecraft account	Username, UUID, platform (Java / Bedrock)	Identifying you in-game and on the dashboard.
Connection	IP address (temporarily, for anti-cheat + geolocation of bans)	Ban evasion prevention, DDoS protection.
In-game activity	Playtime, deaths, blocks placed/broken, chat, coordinates of claims and homes, in-game currency balance	Server operation, leaderboards, statistics, economy.
Dashboard session	Session cookie (sc_dash_sid), one-time login tokens	Keeping you logged in after the magic-link auth.
glow.moe link (optional)	glow user ID, glow username, verified status, Glow+ subscription status	Presence sync + Glow+ perks in-game. Only if you link.
Voting	Confirmed votes from public vote sites, vote streak counter	Delivering vote rewards.

We do not collect real names, email addresses, phone numbers, or payment details. If you buy a rank in-game, payment is processed by the store handler and we only see the delivery record (which UUID got what rank).

2. Cookies

The dashboard uses a small number of essential cookies:

• sc_dash_sid — your logged-in session. Expires when you log out.
• sc_glow_oauth — CSRF state during a "Login with glow" flow. Expires as soon as the login completes.

We don't use tracking pixels or third-party advertising cookies. Cloudflare places its own __cf_bm anti-bot cookie (which is essential for their DDoS protection).

3. Third parties

Some parts of the site depend on external services. When you interact with them, they see your IP address and request headers under their own policies:

• Cloudflare — proxies all splitcraft.net traffic for DDoS protection and caching. Cloudflare Privacy Policy.
• glow.moe — only if you link your account via /glowmoe <code> or "Login with glow". We share your MC UUID + username; they may share glow user ID + subscription status back. glow.moe Privacy Policy.
• Mineskin.eu — renders 3D player heads on the dashboard. They receive your MC username to fetch the skin.
• Discord widget — the "Join Discord" widget on the landing page is loaded from Discord's servers, per their Privacy Policy.
• Vote sites — when you click a vote link, that site's own policies apply. We only receive vote confirmation callbacks (username + which site).
• Google Fonts / Font Awesome / cdnjs — CSS and font assets are self-hosted where possible. Font Awesome loads from cdnjs.cloudflare.com.

4. Where data lives

Server and dashboard data is stored on Hetzner Cloud servers in Germany. Cloudflare edges may cache static assets globally. If you're in the EU/UK/EEA, your data doesn't leave the EU except in transit through Cloudflare's global network.

5. How long we keep it

• Account data (UUID, username, in-game state): kept while your account exists on the server. If you ask us to delete it (see below), we remove it and anonymize any statistics.
• IP addresses: logged for up to 30 days in server access logs, then rotated out. Ban-list IP records are kept as long as the ban is active.
• Chat logs: kept 90 days for moderation, then purged.
• Backups: world backups kept up to 14 days. Deleted data may persist in backups until the retention window ends.
• glow.moe link: removed within 5 minutes of unlink.

6. Your rights (GDPR / CCPA)

Wherever you're playing from, you can ask us to:

• See what data we have about you (data access request).
• Correct anything that's wrong.
• Delete your data. This removes your dashboard account, unlinks glow.moe, and anonymizes your in-game statistics. Some anonymized aggregates (leaderboard totals) may remain.
• Export your data in a machine-readable format.
• Object to specific processing.

To exercise any of these, email [email protected] from an address you can verify or ping staff on Discord from your linked account. We aim to respond within 30 days.

7. Security

We use HTTPS everywhere on the site, HMAC-signed API calls between the server and glow.moe, secure httpOnly cookies for sessions, and hashed one-time tokens for the magic-link login. No system is 100% secure — if you notice a security issue, please email [email protected] before making it public.

8. Children

SplitCraft is a public Minecraft server open to all ages, but if you are under the age of digital consent in your country (usually 13–16), you must have permission from a parent or guardian before using the dashboard. We do not knowingly collect personal information from children under those ages — if we learn we have, we delete it.

9. Changes to this Policy

We may update this Privacy Policy. Material changes will be announced on Discord and marked with a new "Last updated" date at the top.

10. Contact

Privacy questions or data requests: [email protected]. Security concerns: [email protected]. Or ping staff on Discord.