Privacy Policy

1. Who is responsible

MC Brainrot is operated by an individual in Wales, United Kingdom. For privacy questions or to exercise your rights, email alexanderguythomson@icloud.com. MC Brainrot is the controller for server and website information it determines how to use. Tebex Limited separately controls payment and checkout information under its Privacy Policy.

2. Information we process

• Minecraft Java or Bedrock username, UUID or Floodgate identifier, rank, permissions, profile, balance, rebirths, inventory and gameplay records.
• Chat, commands, moderation records, reports, support correspondence, and evidence you send us.
• Connection and security information including IP address, connection time, client/protocol details, server logs, and anti-cheat signals.
• Store selection, purchase status, Tebex transaction reference, purchased product, fulfilment status, edition, Minecraft username, and customer IPv4 supplied to Tebex when a checkout basket is created.
• Website request logs that may include IP address, time, requested page, browser details, and referring page.

MC Brainrot does not receive or store your full card number. Tebex and its payment providers handle payment details.

3. Why we use it and lawful bases

• Contract: operate accounts, gameplay, store checkout, delivery, subscriptions, support, and requested services.
• Legitimate interests: secure the service, prevent cheating and fraud, moderate behaviour, diagnose faults, protect players, and improve performance.
• Legal obligation: respond to valid legal requests and keep records required for tax, accounting, disputes, or consumer protection.
• Consent: only where we specifically ask for it; consent can be withdrawn without affecting earlier lawful use.

4. Who receives information

Information may be shared only as needed with Tebex and its payment providers, Minecraft infrastructure providers such as Mojang/Microsoft and Geyser/Floodgate components, hosting and network providers, anti-cheat/moderation services, professional advisers, regulators, courts, or law enforcement. We do not sell personal data or use it for third-party advertising.

5. International transfers

Some providers may process information outside the UK. Where UK data protection law requires it, the responsible provider must use an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. See Tebex's policy for its transfers.

6. Retention

• Active gameplay profiles and ownership records: while the account or server service remains active, then reviewed for deletion or anonymisation.
• Routine server, connection, and security logs: normally up to 90 days, longer when needed for an active security, moderation, legal, or technical investigation.
• Moderation and ban records: while needed to enforce safety and prevent evasion, with periodic review.
• Support correspondence: normally up to 24 months after resolution.
• Purchase and fulfilment records: up to 7 years where needed for tax, accounting, fraud, and legal claims. Tebex applies its own retention periods.

7. Children

Minecraft is likely to be used by people under 18. We minimise collection, do not knowingly use children's information for behavioural advertising, and ask under-18s to involve a parent or guardian before purchasing or sending personal information. Do not put real names, addresses, school details, phone numbers, passwords, or payment data in chat.

8. Your rights

Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict, object to, or obtain a portable copy of personal data, and to withdraw consent. Email us with your Minecraft username and request. We may verify identity and normally respond within one month. Some information may need to be retained for legal, security, or fraud-prevention reasons.

You may complain to the Information Commissioner's Office, but we would appreciate the opportunity to resolve the issue first.

9. Security and changes

We use access controls, private credentials, encrypted checkout connections, and operational safeguards, but no online system is completely risk-free. We will update this policy when practices change and publish the new effective date here.