Privacy Policy

Who we are

• Craft Down Under (ABN 97 225 241 491) is a small business based in New South Wales, Australia.
• We operate craftdownunder.co, playcdu.co, their subdomains, and related Minecraft/community services (the "Services").
• Contact us at [email protected].

What we collect

We collect only what we reasonably need to run the Services:

Account

• Email, username, and password (stored securely).
• Verification and account status.
• Basic timestamps (for example when the account was created or last used).

Sign-in & security

• Sessions.
• IP address.
• Browser and device type.
• Technical signals we use to protect accounts and detect abuse.

Linked accounts

Minecraft identifiers and Discord identifiers (and related profile details we receive from those services) when you choose to link them.

Payments / donations

• Donations are processed by PayPal when you use that flow.
• We also keep a donation history on our side (for example linked to your account where applicable), including transaction references, amounts, timestamps, status (for example completed/failed), and limited technical or account identifiers needed to match a payment to you or your perks.
• PayPal may collect additional payment and identity details under their privacy policy when you check out with them.

The only context in which we connect Minecraft or other in-game profile data to other identifying information in our systems is when you make a payment or donation, so we can match the transaction to the correct account and any perks. We do not use that payment-to-account link for advertising. We do not sell personal information. Payment processors (such as PayPal) receive only what they need to process the payment when you use their checkout, under their terms.

Community & gameplay

• Content and identifiers you submit through our features (for example group-finding posts).
• Data our game systems generate or store in the ordinary course of gameplay.

Support and operations

Records needed for moderation, staff permissions, referrals, rewards, training where applicable, and to answer you when you contact us.

Staff tools / player records (ARGUS)

In our staff moderation systems we may store:

• Minecraft UUID.
• Discord ID.
• Staff notes and warnings (text, metadata, who created or updated them, status, and expiry where applicable).
• Bans (reason, issuer, timing, scope).
• Uploaded evidence (files and metadata, linked to records).
• Incidents (descriptions, comments, links to players or items).
• Audit logs of staff actions.
• Links to ticket identifiers where we use ticketing systems.
• Calendar assignment associated with player UUIDs where we use that feature.

These systems are for moderation, safety, and running the network.

Game servers and linked integrations (additional detail)

On our game services we also process:

• Minecraft-related identifiers (for example UUID and last known in-game name).
• Last known connection IP where we store it for security or moderation.
• In-game progress or configuration we persist for gameplay (including, depending on the feature, data such as balances, homes, warps, ranks, guild or group membership as returned by linked services).
• Moderation records (for example mutes).
• Information we receive from linked APIs or partner services you interact with through the Services.

We use service providers (for example hosting, payments, linked platforms) only as needed; they process data on our instructions or their own terms where you interact with them directly.

Sources of information

• Information you give us directly.
• Information collected automatically when you use the Services (for example logs, device/network data, cookies as described below).
• Information from linked platforms or payment providers when you connect accounts or pay, subject to their policies.

Access controls

Not all staff can see everything. Access follows roles and permissions in the app; some data and actions are limited to admin or other restricted roles only.

Cookies and similar technologies

We use cookies and similar technologies for:

• Sign-in.
• Preferences.
• Security.
• Basic site function.
• Analytics and understanding how the Services are used.
• Advertising, where we show ads on the website (see Advertising below).

You can control cookies in your browser; blocking some cookies may limit features. Where advertising cookies are used, you can also manage ad personalisation through your browser settings or Google's ad settings at adssettings.google.com.

Advertising

We may display advertisements on the website to help support the Services. Ads are served by third-party advertising partners, including Google AdSense (Google Ireland Limited / Google LLC and their affiliates).

When ads are shown, those partners may use cookies, device identifiers, and similar technologies to:

• Serve and measure ads.
• Limit how often you see an ad.
• Personalise ads based on your activity on this site and other sites (where permitted).

We do not provide Google or other ad partners with your account email, password, donation history, or linked Minecraft/Discord identifiers for ad targeting. However, when you visit pages where ads appear, those partners may collect information automatically (such as IP address, browser type, and pages viewed) under their own privacy policies.

Logged-in community members may see fewer ads in some areas of the site. If an ad is inappropriate or misleading, please report it to [email protected].

Learn how Google uses data from partner sites and apps: Google Partner Sites policy. Google's privacy policy: policies.google.com/privacy.

Why we use data

We handle personal information to run the Services:

• Provide and secure accounts and game/community features.
• Process and record donations.
• Confirm perks or recognition tied to support where we offer them.
• Link external accounts.
• Comply with law.
• Pursue reasonable business purposes such as fraud and abuse prevention.
• Display advertising to help fund and sustain the Services, where we choose to show ads.

We only use or disclose personal information in ways that are allowed under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) (where they apply to us), or as otherwise required or permitted by law.

How we share information

We may share personal information with:

• Service providers who assist us (for example hosting, email, security, payments) under arrangements that require them to protect the information appropriately;
• PayPal when you donate through PayPal, so they can process the payment as described in PayPal's terms and privacy policy;
• Linked platforms (for example Minecraft, Discord) and other payment-related partners, according to your use of those features and their terms;
• Advertising partners (such as Google AdSense) when ads are displayed on the website. They receive information collected through their own cookies and technologies on our pages, not your account credentials or donation records;
• Professional advisers (for example lawyers, accountants) where reasonably needed; and
• Authorities or others when we believe in good faith that disclosure is required by law, legal process, or to protect rights, safety, or security.

Personal information may be processed or stored using Cloudflare and other cloud providers, which may involve processing or storage outside Australia.

We do not sell your personal information. We do not share account, payment, or moderation records with advertisers for their own marketing purposes.

Serious harm, child safety, and law enforcement

We take violence, threats, harassment, and harm to others seriously. That includes conduct that endangers or targets children, such as grooming or sexual exploitation, and other serious illegal activity on or through the Services.

If we reasonably believe that such conduct has occurred, is occurring, or may occur, we may preserve relevant records, report the matter to the appropriate authorities ourselves, and cooperate fully with law enforcement and regulators. We do not need your consent to do this where the law allows or requires it.

We may disclose personal information and other records we hold that we consider relevant to the matter. That can include, for example:

• Account and contact details.
• Linked Minecraft or Discord identifiers.
• Sign-in, security, and technical logs.
• Moderation, ban, and staff tool records (including notes, evidence, incidents, and audit logs).
• Donation or payment matching records where they help establish identity or account linkage.
• Content or communications we have stored in the ordinary course of operating the Services.

Retention

We keep personal information only as long as needed for these purposes or as required by law, then delete or de-identify it where it is reasonable to do so.

Examples:

• Account and security information for operating the Service and handling disputes.
• Donation history and related records for supporting the Service, reconciling payments with PayPal, tax or accounting obligations, and dispute handling.
• Moderation and safety records where retention is justified.
• Gameplay or community content tied to identifiers where deletion would be impractical or restricted by law.

Staff and player safety records may be retained for a long period or indefinitely where the law allows.

Security

We take reasonable steps to protect personal information from:

• Misuse, interference, and loss.
• Unauthorised access, modification, or disclosure.

No online service can be guaranteed fully secure.

Automated processing

• We may use automated checks (for example rules or risk signals) to help detect abuse, enforce rules, or protect accounts.
• If something materially affects you in a way that requires extra transparency under law, we will explain how to contact us about it.

Your rights

• Where the Privacy Act and APPs apply, you generally have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete, or misleading.
• Contact us at [email protected]; we may need reasonable information to confirm your identity before we respond.
• If you are unhappy with how we handle a privacy request or concern, you may complain to us first.
• You may also contact the Office of the Australian Information Commissioner (OAIC) (https://www.oaic.gov.au/).
• We will respond to privacy requests within a reasonable period.

Requesting deletion

• You may ask us to delete personal information we hold.
• Deletion may be irreversible for account-linked history we are allowed to erase.
• For moderation, bans, evidence, incidents, audit, and investigation-type records: we do not delete these on request where the law allows us to retain them; we may still handle access or correction requests where the law requires.
• If you ask us to delete information while an investigation, legal process, or mandatory reporting obligation applies, we may refuse or delay deletion to the extent the law allows. Where we do that, we will tell the appropriate point of contact (for example the authority or agency we are dealing with on the matter) that you asked for your data to be destroyed.
• If you continue to use the Services (for example create a new account, sign in, play on our servers, or link Discord/Minecraft again), new records may be created automatically.
• Some information may persist where tied to gameplay or community content under your Minecraft identity, or where we must retain it for legal, security, or payment reasons (including donation records where the law or proper administration requires).
• Address requests to [email protected]; we will respond as required by law.

Third-party sites and services

The Services may link to or embed third-party sites, bots, or clients, including:

• Minecraft.
• Discord.
• Payment pages such as PayPal.
• Google AdSense and related Google advertising services.

Their collection and use of information is governed by their privacy policies, not this one.

Changes

We may update this policy; we'll post changes here and adjust the date above.

Contact

Craft Down Under (ABN 97 225 241 491), NSW, Australia. [email protected]

See also our Terms of Service.