Privacy Policy
Last updated: August 27, 2026
This Privacy Policy explains how Crafty Servers ("we", "us") collects, uses, and protects your information when you use Crafty Servers (the "Service"). Contact us about privacy at help@craftyservers.com.
1. Information we collect
- Account data: your email address and a securely hashed password (we never store your password in plain text).
- Optional Google sign-in: if you choose to sign in with Google, we receive your Google account identifier, email address and its verification status to create or authenticate your account. We store the identifier linked to your account, and do not store Google access tokens, your profile photo or your Google password. The sign-in interface is provided by Google.
- Server & usage data: the servers you create and their configuration, and basic logs needed to run and secure the Service.
- IP addresses and approximate location: your IP when you use the website and the country or coarse location supplied by our network edge, used for security, regional server placement, and presenting location-appropriate privacy controls. Depending on configuration, we may also process the IP addresses of players who connect to your game servers to operate, secure, and moderate the Service.
- Network security records: connection timestamps, source and destination IP addresses and ports, protocol, traffic counts, network address translations, and available links to hosted servers and accounts. We use these records to investigate abuse and secure the Service. This collection does not capture packet contents or chat messages.
- Payment data: paid server subscriptions are processed by Stripe. We do not store your full card details; Stripe handles payment data under its own privacy policy. We keep a customer/subscription reference and billing status.
- Cookies and similar storage: we use service cookies for login, form security (CSRF), checkout and server workflows, plus user-requested preferences such as language, appearance, and remembering that you dismissed a privacy notice. We use anti-abuse tools (e.g. reCAPTCHA) on sign-up/login/demo forms, which are subject to their providers' policies. For visitors identified as being in the EU, we do not load our Google advertising or analytics tag and we do not set referral attribution or A/B-testing cookies. Outside the EU, the Google tag may measure visits and conversions and may use cookies under Google's policies.
2. How we use your information
- To provide, maintain, and improve the Service.
- To process payments and manage subscriptions.
- To secure the Service, prevent abuse, and enforce our terms.
- To communicate with you about your account (verification, resets, important notices).
3. Legal bases (where applicable, e.g. GDPR)
We process data to perform our contract with you (providing the Service), for our legitimate interests (security, abuse prevention, improving the Service), to comply with legal obligations, and with your consent where required.
4. Sharing
We do not sell your personal data. We share data only with service providers that help us run the Service, under appropriate safeguards, including: our payment processor (Stripe), our DNS/hosting/infrastructure providers, and email delivery. We may disclose data if required by law or to protect our rights and users.
5. Retention
We keep account and server data for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer period is required by law (e.g. billing records).
Network security records are retained for 30 days after receipt, followed by routine deletion processing. Worker nodes may buffer records for up to 23 hours while delivery is unavailable. Records relevant to an active abuse investigation may be preserved separately for the duration of that investigation.
6. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact help@craftyservers.com. You can delete your account from your account settings (where available) or by contacting us.
7. Security
We use technical and organizational measures to protect your data (encryption in transit, hashed passwords, access controls). No system is perfectly secure, so we cannot guarantee absolute security.
8. International transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.
9. Children
The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data; contact us if you believe a child has provided us data and we will delete it.
10. Changes
We may update this policy; material changes will be posted here and, where appropriate, notified by email.
11. Contact
Crafty Servers - help@craftyservers.com. Governing law: the State of Delaware, USA.