Last updated: 12/08/2025

1) Controller & contact

This Privacy Policy applies to MineFenixTeam.

2) Scope

  • Applies to the MineFenixPvP CraftingStore webstore and our Minecraft server (Minecraft Java 1.8.8).

  • Explains how we collect, use, share, retain, and protect personal data under the EU GDPR and Portuguese law.

3) Data we collect

  • Order & account data: Minecraft nickname/UUID, items purchased, order ID, date/time, price/currency, chosen payment method.

  • Contact data: e-mail address, Discord handle (if you contact support), and any info you include in your messages.

  • Technical data: IP address, device/browser info, approximate location (from IP), webstore logs, server logs (join/leave, command execution for delivery).

  • Payment information: processed by payment providers (PayPal). We receive transaction metadata only (status, payer ID) and do not store full card/bank details.

  • Cookies: strictly necessary cookies for security, session and checkout. We do not use analytics, advertising or marketing cookies.

  • Data necessity: providing your Minecraft nickname/UUID and payment confirmation is necessary to enter into and perform the purchase contract. Without this data we cannot process your order or deliver items.

4) Purposes & legal bases

  • Provide and deliver purchases (execute in-game commands, manage entitlements) — contract performance (GDPR Art. 6(1)(b)).

  • Customer support (respond, troubleshoot) — contract performance & legitimate interests (Art. 6(1)(b),(f)).

  • Security & fraud prevention (abuse detection, chargebacks, server integrity) — legitimate interests (Art. 6(1)(f)).

  • Compliance (tax/accounting, legal requests) — legal obligation (Art. 6(1)(c)).

5) How we share data

  • CraftingStore (storefront, checkout, automated delivery) — processor acting on our instructions.

  • Payment providers (PayPal) — independent controllers for payments; we receive metadata only.

  • Hosting/IT & security/anti-abuse services — processors.

  • Discord (if you contact us there) — independent controller for messages on its platform.

  • Authorities/law enforcement — when required by law or to defend legal claims.

  • We do not sell personal data.

6) International transfers

  • Some providers may process data outside the EEA. Where required, we use an adequacy decision or EU Standard Contractual Clauses with appropriate safeguards.

7) Retention

  • Orders & payment metadata: up to 10 years (tax/accounting & disputes).

  • Support tickets/messages: up to 2 years after closure.

  • Server/security logs: typically up to 180 days; anti-fraud logs up to 1 year.

  • After retention, data is deleted or irreversibly anonymised.

8) Your rights

  • Access, rectification, erasure (where applicable), restriction, portability, and objection (legitimate interests).

  • Right to object: where we process data based on legitimate interests (Art. 6(1)(f)), you may object at any time by contacting [email protected]. We will stop processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.

  • To exercise rights, contact [email protected] or discord.com/invite/dxtck67gv3. We reply within one day to one month (extendable by two months for complex requests).

  • You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD, www.cnpd.pt).

9) Cookies

  • Essential cookies only: used for security, session management and checkout.

  • No tracking: we do not set analytics, advertising or marketing cookies, and we do not use third-party trackers.

  • You can manage cookies via your browser settings.

10) Security

  • Technical and organisational measures (access controls, encrypted transport, logging, backups).

  • No automated decision-making: we do not use automated decision-making, including profiling, that produces legal or similarly significant effects (GDPR Art. 22).

  • No system is 100% secure — please keep your accounts/devices protected.

11) Children

  • Webstore/server intended for players 13+. Purchases by minors require parental/guardian authorisation where applicable.

  • We do not knowingly collect data from children under 13. If you believe we hold such data, contact us to delete it.

12) Third-party platforms & links

  • Minecraft, CraftingStore, Discord, and payment providers are separate services with their own terms and privacy policies. When you use them, their policies apply.

13) Changes to this Policy

  • We may update this Policy. The version that applies is the one published on the date shown above (“Last updated”).

14) How to contact us