Privacy Policy

We collect information you provide directly to us and information generated through your use of the Service. Account information: When you register, we collect your email address, display name, and a hashed password. We do not store plaintext passwords. Server data: When you connect a Minecraft server to Buckler, we collect server metadata (name, address, game version) and the event data emitted by the Buckler plugin. This includes player actions, server performance metrics, and moderation events. Usage data: We collect standard server logs, including IP addresses, request timestamps, and error information, to operate and improve the Service. Payment information: Billing is handled by a third-party payment processor. We do not store full card numbers or payment credentials.

We use the data we collect to: • Provide, operate, and maintain the Service. • Authenticate your identity and secure your account. • Display event logs, metrics, and moderation tools within your dashboard. • Send transactional communications (account confirmations, billing receipts). • Investigate security incidents and enforce our Terms of Service. • Improve and develop new features based on aggregate, anonymised usage patterns. We do not sell your data to third parties. We do not use your server event data for advertising purposes.

Event history is retained according to your plan tier: • Free: 7 days of event history • Pro: 90 days of event history • Founder: Unlimited event history Account data is retained for as long as your account remains active. Upon account deletion, your personal data and event history are permanently deleted within 30 days, except where retention is required by applicable law. Server performance metrics are stored in aggregate and may be retained for longer periods in anonymised form for capacity planning purposes.

We implement industry-standard technical and organisational measures to protect your data, including: • Passwords hashed using Argon2id. • API keys generated with cryptographically secure random generation. • Data transmitted over TLS/HTTPS. • Access to production systems restricted to authorised personnel. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [email protected].

Buckler uses minimal browser storage: • Authentication tokens: We store a JWT in localStorage to maintain your session. This is not a cookie but has similar function. • Theme preference: We store your selected theme (light or dark) in localStorage. We do not use third-party tracking cookies, advertising cookies, or cross-site tracking.

We use the following third-party services to operate the Service: • Payment processing: A PCI-compliant payment processor handles billing. Your card data is governed by their privacy policy. • Hosting infrastructure: Our servers are hosted on cloud infrastructure providers. Data may be stored in data centres within the EU or UK. We do not share your data with analytics providers, advertising networks, or data brokers.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate data. • Deletion: Request deletion of your account and associated personal data. • Portability: Request an export of your event data in a structured format. • Objection: Object to certain processing of your data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

For privacy-related enquiries or to exercise your rights, contact us at: Email: [email protected] We will endeavour to respond within 5 business days.