Privacy Policy

This policy explains what personal data PixelCobble processes, why, and what rights you have under the GDPR (Regulation (EU) 2016/679).

1. Data controller

PixelCobble (contact: privacy@pixelcobble.com).

2. What we process and why

• Account data: name, email, password hash. Legal basis: contract performance (providing your account).
• Minecraft data: username and username history, UUID, account-link timestamps, gameplay statistics, achievements and reward-delivery state received from the game server. Legal basis: contract performance and legitimate interest (account security, player features and delivering purchases).
• Purchase data: order history and amounts. Card details are processed exclusively by Stripe (PCI-DSS certified) and never reach our servers. Legal basis: contract performance and legal obligations (accounting).
• Affiliate referral data: a referral cookie (30 days) and conversion events, set only after you accept cookies in our banner. Legal basis: your consent, which you can withdraw at any time.
• Technical logs: IP-derived security hashes, request audit logs, integration nonces and game event records for security, replay prevention and abuse investigation. Legal basis: legitimate interest.

3. Recipients

Stripe (payments, EU/US, with SCCs in place), our hosting provider (EU data center), and email delivery infrastructure. We do not sell personal data and we do not use third-party advertising trackers.

4. Retention

Account data is kept until account deletion, subject to legal obligations. Order records are retained as required by tax law (typically 10 years in Romania). Raw integration requests are retained for 7 days, heartbeats for 30 days and raw gameplay events for up to 90 days. Aggregated gameplay statistics are kept while the service operates or until deletion is legally required.

Public trainer profiles

Trainer profiles are private by default. If you opt in, only the display name, Minecraft username and the gameplay fields you selected can be public. Email, UUID, IP information, purchase details, moderation information and authentication data are never shown on public profiles.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Write to privacy@pixelcobble.com. You may also lodge a complaint with your supervisory authority (in Romania: ANSPDCP).

You can download a copy of your account data from the authenticated dashboard after confirming your password. To request account deletion, contact privacy@pixelcobble.com so we can verify your identity and remove or anonymize data that is no longer required by law. Financial records may be retained for the period required by applicable accounting law.

6. Children

The Service is intended for players aged 13+. If you are under 16, parental consent may be required in your country for account creation. We do not knowingly collect data from children under 13.

7. International transfers & security

Data is stored in the EU. Where a processor operates outside the EU (e.g. Stripe), transfers rely on adequacy decisions or Standard Contractual Clauses. We use TLS everywhere, hashed passwords and least-privilege access.