Privacy Policy

Last updated: October 15, 2026

We only ask for what we need to deliver your purchase and protect the store from fraud. This page explains what that data is, what we use it for and what we never do with it.

Who is responsible

MythoCraft is responsible for the personal data collected through this store (store.mythocraft.net). For any privacy question, email us at [email protected].

What we collect

When you buy, you give us or we record the following:

Your Minecraft username and platform (Java or Bedrock).
The recipient’s username, if you buy for another player.
Your email address, for your receipt and for support.
Your IP address at the time of purchase.
Your order’s contents, total and date, and the coupon or gift card you used, if any.
The date and version of the terms you accepted.

We don’t collect or store card details. Payments are handled directly by Stripe under its own privacy policy.

How we use it

To deliver your items to your Minecraft account.
To send your receipt and let you know if there’s a problem delivering your order.
To handle support questions and refund requests.
To prevent fraud and abuse of the store.
To defend the store if you open a dispute: through Stripe, we send your bank the delivery log, your acceptance of the terms (with date, version and IP) and your other purchases linked to the same email or username.
To meet our accounting and legal obligations.

We don’t sell your data, we don’t send marketing emails and we don’t use advertising trackers.

Legal basis

If a law such as the EU General Data Protection Regulation applies to you, we process your data on these grounds:

Performance of a contract: processing your payment and delivering what you bought.
Legitimate interest: preventing fraud, keeping the store secure and defending it against disputes.
Legal obligation: meeting accounting and tax requirements.

Who we share it with

We only share what’s needed with the providers that keep the store running:

Stripe processes payments and helps prevent fraud. It receives your email, the amount and the payment details you enter on its page. If a dispute is opened, we may add your email and card to its block lists.
Cloudflare serves and protects the website and uses Turnstile to check that you’re not a bot. It sees your IP address and technical data from your browser.
Mailtrap sends the store’s emails, such as receipts and delivery notices. It receives your email address and basic order details.
mc-heads.net draws your skin’s head in the store from your username. It receives that username and your IP address when your browser loads the image.

Your data may be processed outside your country, mainly in the United States. Beyond these providers, we would only disclose it if legally required by an authority.

What is shown publicly

The store’s home page shows recent purchases (username, platform and product) and the monthly top (username and platform). When a purchase is delivered, the server also announces it in the in-game chat with your username and the product. We never publish your email, your IP address or how much you paid.

How long we keep it

We keep order records for as long as we need them for accounting, legal obligations and defending against disputes, which banks can open months after a purchase.

Your rights

You can ask us for:

Access: a copy of the data we hold about you.
Correction: fixing inaccurate data, such as a misspelled username.
Deletion: erasing your data. We may keep records we need for legal obligations or to respond to a dispute.

Email us at [email protected], ideally from the address you used to buy, so we can confirm it’s you.

Cookies and browser storage

We only use what’s strictly necessary:

Your cart is saved in your browser’s storage so it isn’t lost when you reload the page.
Cloudflare Turnstile uses technical browser data to check that you’re a person.
A session cookie for the admin panel, used only by store staff.

We don’t use analytics, advertising or tracking cookies.

Security

All communication with the store is encrypted (HTTPS). Payment details never pass through our servers, and access to orders is limited to the staff who run the store.

Minors

If you are a minor where you live, you need permission from a parent or legal guardian to buy. We don’t knowingly collect data from children under 13. If you’re a parent or guardian and believe your child gave us data without your permission, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll publish the new version on this page with its update date.