Privacy Policy

Who we are

GalaxyBoxZ is a Minecraft server run by Hiramachi ("we", "us"), who is responsible for the personal data described here. You can reach us at contact@galaxyboxz.com or through a ticket in our Discord.

When you play

When you join the Minecraft server, we process:

• Your Minecraft username and UUID, to run your account and save your progress.
• We do not see your IP address. Our hosting provider, currently Minehut, receives it to connect you to the server and handles it under its own privacy policy. It is not passed on to the server or to our staff.
• Bedrock players: your Xbox gamertag and Xbox user ID, which Bedrock support (Geyser and Floodgate) uses to create your account.
• Gameplay data such as levels, items, balances, Credits and statistics.
• Chat messages and commands, which other players can see and staff can review.

Moderation records

When staff warn, mute, jail, kick or ban a player, we record the username, UUID, reason, duration and the staff member involved. These records are posted to a private staff channel and kept in the player's history.

Discord and account linking

Linking your accounts with /link is optional. If you do, we store your Discord user ID next to your Minecraft UUID, set your nickname on our Discord to your Minecraft name, give you roles that match your rank, and post the link to a private staff channel. You can undo it at any time with /unlink.

Global chat is relayed both ways: messages sent in-game appear in a channel on our Discord, and messages sent there appear in-game. Anything you post on Discord is also covered by Discord's privacy policy.

Purchases

Payments are handled by Tebex, the merchant of record. Tebex collects your payment and billing details, email address and IP address under its own privacy policy. We never see your card or bank details.

From Tebex we receive the Minecraft username the purchase is for, the name of the buyer when it is a gift, what was bought and the transaction details. Each purchase is posted to a private staff channel so staff can help with orders.

This website

The website has no accounts, sets no cookies of its own and uses no advertising or tracking tools. Still, some services see your visit:

• Cloudflare hosts the site. It processes your IP address and request details to deliver the pages and protect them from attacks. See Cloudflare's privacy policy.
• Tebex loads its checkout on the store page when you buy, and may set cookies needed for the payment.

Server statistics

Some server plugins send anonymous technical statistics to their developers through bStats and FancyAnalytics: things like plugin versions, player counts and error reports. This data describes the server, not you.

Why we are allowed to use it

Where data protection laws such as the GDPR or Brazil's LGPD apply, we rely on:

• providing the service you asked for: running your account and delivering purchases;
• legitimate interests: keeping the server secure, moderating it and preventing fraud and ban evasion;
• legal obligations: keeping records of transactions;
• your consent: linking your Discord account, which you can withdraw with /unlink.

Who we share it with

We do not sell your data. It is only shared with the services that run the server: our Minecraft hosting provider (currently Minehut), Cloudflare, Tebex and Discord. Our staff see what they need to moderate and help players. We may disclose data if the law requires it.

Some of these services are based outside your country, including in the United States, and protect transfers under their own safeguards.

How long we keep it

• Account and gameplay data: while you play and while the server runs. Ask us and we will delete it.
• Server logs (usernames, chat and commands): only as long as needed to fix problems and handle reports.
• Moderation records: for as long as they matter for enforcing the rules, which can be permanent for bans.
• Purchase records: as long as needed for accounting, disputes and chargebacks.
• Discord link: until you unlink.

Your rights

Depending on where you live, you can ask to access, correct, delete or get a copy of your data, object to how we use it, and withdraw consent. Email us or open a Discord ticket. We will ask you to prove the account is yours, usually with a code in-game, and we reply within 30 days.

We may keep what we need to enforce bans or handle payments even after a deletion request. You can also complain to your data protection authority, such as the ANPD in Brazil or your local authority in the EU.

Children

GalaxyBoxZ is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 is playing, contact us and we will delete their data.

Security

We limit access to personal data to the staff who need it and rely on the security of the services listed above. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes to this policy

We will update this policy when what we collect changes. The date at the top shows the last change, and important changes are announced in our Discord.

Contact

Privacy questions or requests: email contact@galaxyboxz.com or open a ticket in our Discord.