Privacy Policy

1. General Provisions

The data controller responsible for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as "GDPR") is:

Name / Project Name: Crystalfbft
Contact / E-mail: info@crystalfbft.org
Website URL: https://crystalfbft.org

Personal data means any information relating to an identified or identifiable natural person (such as name, e-mail, IP address, or gaming nickname).

2. What Personal Data Do We Collect?

We only process personal data that you voluntarily provide to us while using our website, webstore, or gaming server. This includes:

When purchasing from our webstore: First name, last name, e-mail address, billing details, Minecraft username (In-Game Name), IP address, and transaction history.
When browsing our website or playing on our server: IP address, server connection logs, and cookie files.

3. Lawful Basis and Purpose of Data Processing

The lawful basis for processing your personal data is:

Performance of a contract between you and the controller (to deliver the purchased in-game ranks, perks, or items from the webstore).
Legitimate interest of the controller (ensuring the security and stability of the Minecraft server and website, preventing fraud, resolving chargebacks, and providing technical support).

The primary purpose of processing is to fulfill your orders, manage your in-game accounts, and maintain a secure gaming environment.

4. Data Retention Period

The controller retains personal data:

For the duration necessary to exercise the rights and obligations arising from the contractual relationship (e.g., as long as your purchased perk or rank is active).
For the period required by applicable laws (especially tax and accounting regulations for transaction histories – usually up to 10 years).
Server connection logs and IP addresses collected for security purposes are kept for [insert duration, e.g., 30 days / 3 months].

5. Recipients of Personal Data (Subprocessors)

We do not sell or rent your personal data to third parties. However, we utilize trusted third-party services to operate our project, which may have access to your data:

Webstore Platform Provider: [Insert e.g., Tebex / CraftingStore / Webnode]
Payment Gateways: [Insert e.g., PayPal / Paysafecard / Stripe / GoPay]
Hosting / Server Provider: [Insert e.g., Amazon Web Services (AWS) / Hicoria / Wedos]

6. Your Rights

Under the conditions set out in the GDPR, you have the following rights:

The right to access your personal data.
The right to rectification (correction) or erasure (right to be forgotten) of your personal data, provided it does not conflict with legal obligations to retain transaction data.
The right to object to the processing of your data.
The right to lodge a complaint with a data protection authority if you believe your data protection rights have been violated.

7. Data Security

The controller declares that all appropriate technical and organizational measures have been taken to secure personal data. This includes encrypted communication (SSL/HTTPS protocols) on the webstore and restricted access to database files and server consoles. Only authorized team members (administrators) have access to personal data.

8. Final Provisions

By using this website, purchasing from our webstore, or connecting to our Minecraft server, you acknowledge that you have read and agree to the terms of this Privacy Policy. The controller reserves the right to update these terms at any time.

This policy is effective as of June 16, 2026.