Privacy policy
How the current MCMarket website handles account, login and support information.
Contact
Contact MCMarket on Discord about your account, an order or your personal data.
Visiting the website
The server processes connection information such as an IP address and requested URL to return pages and protect the service from abuse. The application uses short-lived, in-memory request limits. Hosting services may maintain separate access logs; contact MCMarket on Discord for information about those records. Fonts, images and background videos are served by MCMarket; the current browser code has no analytics or advertising tracker.
Account sign-in
Minecraft sign-in uses a temporary verification phrase, player name, selected server and match time. Google or Discord sign-in supplies an account identifier, display name and, when available, profile-picture address. Google also supplies an email address and verification status, which can identify an authorised admin. Provider identifiers are hashed; session records retain the profile fields used by sign-in. Passwords for those services are not collected by MCMarket. A separate registered-account identifier and creation time keep the registered-user count consistent across repeat logins.
Minecraft verification messages
The verification service observes public chat on supported servers. It stores eligible message text, sender name, server and observation time to choose verification phrases and avoid ambiguity. The message-history table is limited to 10,000 rows and older entries are pruned during ingestion after 30 days. A separate list of observed names and previously issued phrase records currently has no automatic expiry. Do not send sensitive personal information as a public verification message.
Server observations and orders
MCMarket stores observed player names, online-status and last-seen evidence, in-game order listings, and available balance and payment-setting evidence to price stock, verify delivery and avoid unsafe transfers. These observations can concern players who have not registered with MCMarket. Purchases and sales retain recipient details, agreed prices, delivery evidence, payment and refund records, and payout destinations. Unknown or incomplete observations are not proof that a player is offline.
Storage and retention
Login challenges and OAuth attempts expire after 10 minutes. Website sessions expire after 30 days of inactivity or are invalidated on logout; expired login records are cleaned during subsequent login-related activity. Registered accounts and server-observation records do not currently have an automatic deletion schedule. Order, payment and refund records remain after cancellation or expiry for reconciliation, support and accounting. Contact MCMarket on Discord about access or deletion; outstanding obligations and required records may need to be retained. The Cookies & storage page lists browser storage.
External services
Choosing Google or Discord login redirects you to that provider. Discord handles support and linked Purchase tickets. PayPal, Paysafecard and bank payments use the provider and recipient identified in the ticket; do not post private payment details in public channels. Cryptocurrency payments and refunds appear on their public blockchain. Minecraft skin heads are retrieved by MCMarket’s server from Mojang/Minecraft services or Geyser for Bedrock accounts, and provider profile pictures from approved Google or Discord hosts, then served locally. The player name or identifier is used in a skin lookup. These external services process information under their own policies.
Purposes and legal bases
Where the GDPR applies, account access and steps you request before a contract may rely on contractual necessity; proportionate security and abuse prevention may rely on legitimate interests, subject to assessment of your rights. Legal recordkeeping relies on the relevant legal obligation. Optional tracking would require a separate assessment and, where required, prior consent. Contact us about the purpose or retention of a particular record.
Your choices and rights
You may contact MCMarket on Discord to request access, correction, deletion, restriction or a portable copy of your personal data, and to object where the applicable law provides that right. Where processing relies on consent, you may withdraw it for the future. You may complain to the competent data-protection authority. We may need proportionate identity verification to protect another person’s data.