Privacy Policy

Privacy Policy

1. Data Controller

MineShopify by Marsways Studios
Truchseßstr. 8, 74182 Obersulm, Germany
Email: privacy@mineshopify.com

We ("MineShopify", "we", "us", "our") are the data controller responsible for your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. Personal Data We Collect

We collect and process the following categories of personal data:

• Account Information: Email address, username, encrypted password hash
• Minecraft Integration: Minecraft username, Minecraft UUID (only when you link your account)
• Payment Data: PayPal transaction ID, payer email, subscription ID (we do NOT store credit card details)
• Technical Data: IP address, browser type, login timestamps, activity logs
• Communication Data: Support ticket messages, email correspondence

3. Purpose and Legal Basis (GDPR Art. 6)

Purpose	Legal Basis
Account creation and management	Contract performance (Art. 6(1)(b))
Payment processing (setup fee & subscriptions)	Contract performance (Art. 6(1)(b))
Customer support	Contract performance (Art. 6(1)(b))
Minecraft account linking	Consent (Art. 6(1)(a))
Security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Service improvement and analytics	Legitimate interest (Art. 6(1)(f))
Marketing communications	Consent (Art. 6(1)(a))

4. Data Retention

We retain your personal data for the following periods:

• Account data: Until account deletion + 30 days for backup recovery
• Transaction records: 10 years (German tax law requirement, § 147 AO)
• Support tickets: 3 years after resolution
• Activity logs: 90 days
• Minecraft linking data: Until unlinked or account deletion

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Obtain confirmation and a copy of your data
• Right to Rectification (Art. 16): Correct inaccurate personal data
• Right to Erasure (Art. 17): Request deletion ("right to be forgotten")
• Right to Restriction (Art. 18): Limit processing of your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interest
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@mineshopify.com. We will respond within 30 days.

6. Data Transfers

Your data may be transferred to the following third-party processors:

• PayPal (PayPal Europe S.à r.l.): Payment processing — EU-US Data Privacy Framework certified
• Hosting Provider: Server infrastructure located within the European Union
• Discord (Discord Inc.): If you contact us via Discord — processed under Discord's own privacy policy

We do not sell, rent, or trade your personal data to any third parties.

7. Cookies

We use the following cookies:

Cookie	Purpose	Type	Duration
PHPSESSID	Session management	Essential	Session
remember_me	Persistent login	Functional	30 days
cookies-choice	Cookie consent	Essential	1 year

Essential cookies cannot be disabled. You can control functional cookies through your browser settings or our cookie banner.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS 1.3)
• Password hashing (bcrypt with salt)
• Role-based access controls
• Regular security audits and updates
• Database backups with encryption at rest

9. Children's Privacy

MineShopify is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately at privacy@mineshopify.com.

10. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

11. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or a notice on our website. Continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact

For any questions regarding your data or this policy:
Data Protection Contact: privacy@mineshopify.com
General Contact: contact@mineshopify.com