1.The short version
We keep as little as we can. There are no analytics, no tracking pixels and no advertising cookies anywhere on this site. We do not sell your data and we never will.
This policy explains the small amount we do hold, why we hold it, and how to have it removed.
2.What we collect
When you buy something:
- The Minecraft username you are buying for, and the username of anyone you send a gift to.
- The email address attached to the PayPal account that paid.
- The PayPal order and transaction references, the amount, the currency, and the date.
- Which rank you bought and whether it was a gift.
When you simply visit the site, our web server records the usual request logs: your IP address, the page you asked for, the time, and your browser's user agent.
We never receive your card number, your bank details, or your PayPal password.
3.Why we need it
- Usernames are the only way to deliver a rank to the right account and to know later who owns what.
- Payment records let us match a payment to a delivery, handle refunds and disputes, and keep proper accounts.
- Server logs let us keep the site online and defend it against attacks and abuse.
Our legal basis for the first two is performing the contract you entered into when you bought a rank. For logs it is our legitimate interest in keeping the service secure.
4.Payments
Payments are processed by PayPal. When you pay, you are dealing with PayPal directly and their own privacy policy applies to what they collect. PayPal tells us that a payment succeeded, how much it was for, and the payer's email address. That is all we receive.
The PayPal payment button is loaded from PayPal's servers on the checkout page only, so PayPal can see that you visited that page.
5.What is public
The supporters leaderboard publicly shows the Minecraft usernames of people who have bought ranks, together with how much they have spent in total and their skin.
Your purchase history is on the Profile page for whoever is signed in with your username. Signing in takes only a username, but for an account locked to the ParkoMC app the purchase history shows only once you approve the browser on your phone. The page lists which ranks were bought, when, for how much, and who any gifts were sent to.
7.Who else sees it
We share the minimum needed to run the site, the store and the app, and with nobody else:
- Cloudflare, which every visit to the site passes through. It sees your IP address and everything that passes between you and the site, helps keep the site online during attacks, and briefly keeps copies of public pages.
- PayPal, to take payments and handle refunds and disputes.
- Mojang and Microsoft, because we send the username you type to their public API to check the account exists and to fetch its skin for the avatar shown on the site.
We do not sell, rent or trade your information, and we do not share it for advertising.
8.Where it is stored
Your data is stored outside the European Union and the United Kingdom. If you are in either, this means your data leaves your country when you use the site or buy from us.
That transfer is allowed because it goes to a country that the European Commission and the United Kingdom both recognise as giving personal data an adequate level of protection.
9.How long we keep it
- Order records are kept for as long as the network runs, because your rank is permanent and we need the record to prove you own it. We also need them for accounting and tax.
- Web server logs are kept for 14 days and then deleted automatically.
10.Your rights
Depending on where you live, you may have the right to ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format.
To use any of these, message us on Discord or email us. We will reply within 30 days and will not charge you.
Some records we have to keep: payment records are needed for accounting and tax, and the order record is what proves you own your rank, so deleting it would remove the rank. When you ask, we will tell you what we can delete and what we have to keep.
If you are in the EU or UK and you are unhappy with how we have handled a request, you have the right to complain to your local data protection authority.
11.Children
You must be at least 13 to buy from us, and under 18s need permission from whoever owns the payment method. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.
12.Security
The site is served over HTTPS, access to our data is restricted, and it is backed up regularly. Payment details never reach our servers, because PayPal handles them.
No system is perfect. If you find a security problem, please tell us on Discord rather than making it public, and we will fix it as quickly as we can.
13.Changes
If this policy changes, the date at the top changes with it, and anything significant gets announced in our Discord.
14.The ParkoMC app
The ParkoMC app is a companion to the profile you already have from playing on ParkoMC, and it adds ways to interact like chat, private messages and friends. The app does not create a separate account: you sign in to your existing profile with a /link code from the server, and your profile stays on our servers whether or not you use the app.
What the app sends us
- Your Minecraft UUID and username, when you sign in.
- Your phone's model, its system version and the app version, when you sign in.
- Your IP address, with every request.
- Your approximate location, worked out by Cloudflare from your IP address and rounded to about 11 km, only to show the real sky and weather where you are. Our server does not store it, and your phone keeps it for up to 7 days.
- The chat lines and private messages you send, your friend requests and the players you block.
- Your settings, like notifications, muted players, who can see your profile and the Profile Card you wear.
- What you do with badges and streaks in the app, like opening a badge or saving your streak.
- Your Discord user id, name and avatar, if you connect Discord.
- Sign-in approvals: when a new phone or browser asks to sign in to your profile, the request and your answer.
- A push token, once you turn on notifications.
- The reports you make about a player, a chat line or a private message, with your note and the line you report.
The app has no ads, no analytics and no tracking. It never asks for your location, contacts, photos or camera.
Why we need it
- Your Minecraft account and phone details keep you signed in and show you which phones are signed in to your profile.
- What you send is delivered to the players it is meant for.
- Sign-in approvals and your IP address keep your profile safe and stop abuse.
Who else sees it
- Cloudflare, which every request from the app passes through. It sees your IP address and tells us your approximate location.
- Google Firebase on Android and Apple on iPhone, only once you turn on notifications. They get your push token and the text of each notification, which can include who messaged you and what they wrote. On Android, Firebase also gets the app's Firebase installation id.
- Discord, if you connect it. Discord handles the connect step, our Discord bot sends you sign-in approval messages, and the app loads your Discord avatar from Discord.
- MET Norway, which our server asks for the weather over a square about 28 km wide. It never sees your IP address or anything about you.
- Other players see the chat lines you send, in game and in the app, and the player you message sees your private message.
How long we keep it
- Signed-in phones, with their model, versions, push token and settings, until you unlink that phone or sign it out from another phone.
- Your Discord connection, until you disconnect it. A locked Discord stays until you remove it in the app.
- Friends, friend requests, blocks, privacy settings, your Profile Card, badges, streaks and the day you first used the app are part of your profile and stay with it.
- Sign-in approvals stay on record with your profile. The code in each one is deleted once it is used or runs out.
- Public chat: only the last 150 lines, on our server and on your phone.
- Private messages are not stored by the app's server. Your phone keeps the last 30 of each conversation.
- Server logs, which include your IP address, for 14 days.
- Game server logs, which include the chat lines you send from the app, as long as we need them to moderate the server.
- Reports, with the line you report, as long as we need them for moderation. Only our staff see them.
Your choices
- Unlink in the app's Settings signs that phone out and deletes its sign-in, settings and push token from our server.
- Disconnect in the app's Discord settings removes your Discord connection.
- For a copy of your data or to have it removed, open a ticket in our Discord server.
The app is for players aged 13 and over.
15.Contact
For anything privacy related, email [email protected] or message us in our Discord server.
The data controller is Dupliko LLC.
This policy was last updated on 17 October 2026.