Privacy Policy
Last updated: November 10, 2026
1. Controller
CraftPay ApS is the controller for personal data about CraftPay account holders. For purchases made in a store, the Store Owner is the controller of Buyer data and CraftPay processes that data on the Store Owner’s behalf.
2. Data we collect
- Account data: name, email address and a securely hashed password.
- Store data: store settings, packages, server names and connection keys.
- Purchase data: Minecraft username, optional email for receipts, items purchased, amount, currency and order status.
- Payment data: card and PayPal details are entered directly with Stripe or PayPal. We never see or store full card numbers; we only store payment references.
- Technical data: IP address, browser information and server logs needed for security and debugging.
3. Why we use it (legal bases)
- To provide the service and process orders – performance of a contract.
- To prevent fraud and abuse and keep the service secure – legitimate interests.
- To meet accounting and legal obligations – legal obligation.
We do not sell personal data and do not use it for advertising.
4. Who we share it with
- Store Owners – they receive the order data for purchases in their store.
- Stripe and PayPal – to process payments, under their own privacy policies.
- Hosting and database providers – to run the service.
- Google Fonts – store pages may load fonts from Google, which receives your IP address.
- Authorities – where required by law.
5. International transfers
Some providers process data outside the EU/EEA. Where they do, we rely on adequacy decisions or the EU Standard Contractual Clauses.
6. How long we keep it
Account and store data are kept while your account is active and deleted when you delete it. Order records are kept as long as required by bookkeeping law (typically 5 years). Logs are kept for up to 90 days.
7. Your rights
You can request access, correction, deletion, restriction, portability or object to processing. For purchase data, contact the Store Owner first; we will help them respond. You may also complain to your local data-protection authority.
8. Cookies
See our Cookie Policy.
Questions? Contact CraftPay ApS at mail@craftpay.net.