Legal

Privacy Policy

Last updated: 20 September 2026

1. What we collect

• Account: your email address, Minecraft username, and password. Your password is handled by our login provider and stored in a protected (hashed) form. We cannot see it.
• Orders: the item, quantity and amount, your Minecraft username, the UTR (transaction ID), and the payment screenshot you upload.
• Applications and forms: the answers you submit, together with your username and email.
• On your device: your login session and your light/dark theme choice are saved in your browser storage so the site works properly.

2. Why we use it

• to create and secure your account;
• to check payments, approve orders, and deliver items;
• to review applications and contact you about them;
• to send account emails such as confirmation and password reset;
• to prevent fraud and abuse.

3. Who can see your data

• Only our admin team can see orders, payment screenshots, and application answers. Your payment screenshot is stored privately and is visible only to you and our admins.
• When a new order is placed, a message with the item, amount, Minecraft username, UTR, and your username and email is posted to a private staff channel on Discord.
• We do not sell your personal data.

4. Services we use

We use Supabase to host our database, login, and file storage, and Discord for staff notifications. Our pages also load fonts and icons from Google Fonts and cdnjs, and the home page checks the server status (online players) through the mcsrvstat.us service. When your browser contacts these services, they can see your IP address, as with any website.

5. Payment screenshots

Please make sure your screenshot only shows the payment details. Crop or hide anything unrelated, such as your phone number, balance, or other transactions, before uploading.

6. How long we keep data

We keep orders and applications for as long as we need them for our records, to handle problems, and to prevent fraud. You can ask us to delete your account and data (see Contact below). We may need to keep some order records for a while.

7. Your choices

You can ask us to show, correct, or delete the data we hold about you. You can also log out at any time and clear your browser storage to remove the saved session from your device.

8. Children

This website is not meant for children under 13. If you are under 18, please ask a parent or guardian before making a purchase.

9. Security

We use reasonable measures to protect your data, such as restricted access and private storage. No website can promise perfect security.

10. Changes and contact

We may update this policy, and the date at the top shows the latest change. For any privacy question or request, contact our staff team on the HEROS SMP Discord server. See also our Terms of Service.