Privacy Policy

Scope and Operator

MystiCraft ("we", "us") is jointly operated from India and Canada. This policy applies when you visit mysticraft.xyz, play on the MystiCraft Minecraft network, use an official MystiCraft Discord bot or server, or obtain MystiCraft products and entitlements through our store.

Different providers may operate parts of these services under their own privacy terms. This policy describes MystiCraft's practices and our role when we receive or control information.

Information We Process

• Website and security data: IP addresses used for daily visitor deduplication, rate limiting, abuse prevention, and security; aggregate visitor totals; and ordinary request details such as time, requested page, browser headers, and referring page when available to our infrastructure.
• Minecraft data: Minecraft username, account UUID, connection IP address, and operational, moderation, or support records generated when you use the network.
• Discord data: Discord user ID, Minecraft UUID links, temporary verification codes, and server-member events needed to assign linked roles.
• Store data: Minecraft username, selected product, entitlement, and transaction or fulfilment status that MystiCraft receives from Tebex or related providers.
• Information you provide: content and details you choose to send in support tickets, appeals, reports, or other communications.

The website's persisted visitor analytics contain aggregate totals. Raw IP addresses used to avoid duplicate daily counts are held in server memory for the active day rather than written to the analytics file. Other security, Minecraft, Discord, store, or support systems may retain identifiers as described below.

How We Use Information

We use information to deliver and operate the services, link accounts, assign roles and entitlements, process and fulfil purchases, provide support, enforce rules, moderate abuse, protect accounts and infrastructure, prevent fraud, understand aggregate service use, comply with legal obligations, and establish or defend legal claims.

Depending on the applicable law and context, processing may be based on providing the service you requested, our legitimate interests in operating and securing MystiCraft, consent, or compliance with law. We do not sell personal information or use it for third-party targeted advertising.

Cookies and Local Storage

• mc_session: an admin-only authentication cookie lasting up to 24 hours.
• refresh_token: an optional admin-only "remember me" cookie lasting up to 7 days.
• Session storage: remembers that the homepage preloader was shown until the browser tab or session ends.
• Local storage: remembers announcement and wiki items already viewed to avoid duplicate view counts, plus admin interface preferences, until cleared or overwritten by application limits.

The main website uses local storage only for the functions described above and does not currently use advertising cookies or cross-site behavioural tracking. Cloudflare, Tebex, and similar providers may use necessary security, checkout, or preference storage under their own policies. If MystiCraft later adds non-essential analytics pixels or advertising trackers, we will reassess consent requirements and request opt-in consent before loading them where required by law.

Discord Bots and Account Linking

When you request an in-game link, a temporary verification code is associated with your Minecraft UUID. Submitting that code to the linking bot records the association between your Minecraft UUID and Discord user ID; the temporary code is then discarded.

The bot uses Discord's Server Members Intent to detect membership events. When you join an official MystiCraft Discord server, the bot checks for an existing link and may assign the appropriate linked role. Discord independently processes your use of its platform under Discord's privacy terms.

Store and Payments

The MystiCraft store and checkout are operated with Tebex. Tebex and its payment providers handle checkout, billing, payment information, billing support, and refunds under their own terms and privacy policies. MystiCraft does not receive full payment-card details through this website.

MystiCraft may receive a Minecraft username, purchased product, entitlement, and transaction or fulfilment status so we can deliver and support the purchase. The store may publicly display recent-purchase activity, including a Minecraft username or avatar and the product purchased. Review the store display before purchasing and contact staff through official Discord if you need help.

Service Providers and International Processing

We disclose or make information available only as needed to operate MystiCraft, complete transactions, protect the services, comply with law, or respond to valid legal requests. Relevant providers may include hosting and database services, Cloudflare where deployed, Discord, Tebex and payment providers, Google Fonts, cdnjs, Minecraft avatar services such as mc-heads.net or Crafatar, and Minecraft server-status providers.

Loading a third-party font, icon, avatar, security service, or store page sends that provider your IP address and ordinary browser/request metadata. Providers may process information in countries outside your own, including India, Canada, the United States, the United Kingdom, or other locations where they operate, subject to applicable safeguards and their own policies.

Retention and Security

We keep information only while reasonably needed for the purposes described above, including active account links, service operation, moderation history, transaction records, security, dispute handling, and legal obligations. Temporary verification codes are discarded after successful linking or expiry. Browser storage remains until its stated expiry, application replacement, or manual clearing. Requests for deletion may be limited where retention is required for security, fraud prevention, legal compliance, or legal claims.

We use reasonable administrative and technical safeguards, including restricted administrative access, password hashing, secure cookies in production, rate limits, and access controls. No online system can guarantee absolute security.

Children and Parental Involvement

MystiCraft is a gaming community that may be used by younger players. If you are below the age at which you can legally consent to data processing or enter these arrangements in your location, use the services only with the involvement and permission of a parent or legal guardian.

Parents or guardians who believe a child provided information without required permission may contact staff through official Discord to request review or deletion. We may ask for enough information to verify the request and locate the relevant Minecraft or Discord account.

Your Choices, Rights, and Contact

Depending on applicable law, you may have rights to access, correct, or delete personal information, withdraw consent, object to certain processing, or complain to a privacy regulator. We may need to verify that you control the relevant Minecraft or Discord account before acting. Some rights have legal exceptions.

To ask a privacy question or exercise a right, open a support ticket with the MystiCraft staff team through our official Discord server. This is MystiCraft's current public contact route.

We may update this policy as services or legal requirements change. Material changes will be posted here and the "Last Updated" date will be revised. Changes apply from the stated update date, subject to any additional notice or consent required by law.