Privacy & Cookies Policy

Flying Fairy

Effective date: 30 May 2025

Saintcraft is operated by Crosswalk Networks ("we", "us"). This Privacy & Cookies Policy explains how we collect, use, and protect your information when you visit our websites and play on our servers. We comply with the UK GDPR, EU GDPR, and the Privacy and Electronic Communications Regulations (PECR).

Who we are

Crosswalk Networks, United States. Contact: contact@saintcraft.us

What data we collect

  • Server logs: IP address, Minecraft username, connection timestamps, and basic device info for security and operations.
  • Website data: Essential cookies for security; optional analytics if you consent.
  • Community interactions: Messages or content you choose to submit (e.g., Discord).

Why we collect it (purposes) and legal bases

  • Provide and secure our services (legitimate interests; necessary for service).
  • Prevent abuse and enforce rules (legitimate interests).
  • Analytics to improve our sites and services (consent).
  • Communications you initiate (consent or legitimate interests, as applicable).

Cookies and consent

We use essential cookies that are required for the site to function. We only set analytics cookies if you choose to allow them using the consent banner. You can change your choice any time through the “Manage cookies” link on our pages.

  • Essential: security_storage, functionality_storage – always on.
  • Analytics: analytics_storage – only enabled if you consent.

We respect your browser’s Do Not Track setting by treating it as a refusal for analytics cookies.

Data retention

We keep server logs for a period necessary for security and operations, typically up to 90 days unless needed longer for investigations. Analytics data is retained according to our analytics provider’s settings and only if you have consented.

Sharing

We do not sell your data. We may share limited information with service providers who help us operate our site and servers (e.g., hosting, analytics) under appropriate data protection agreements, and with authorities where required by law.

International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards for international transfers (e.g., standard contractual clauses). For Australian users, transfers are handled in line with the Australian Privacy Principles (APP 8 – cross‑border disclosure).

Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, object, and data portability. You may also withdraw consent for analytics at any time.

If you make a request, we will respond within the timeframe required by law. To exercise your rights, email contact@saintcraft.us. We may need to verify your identity before completing your request.

US state privacy notice (including California)

For residents of California (CPRA) and other US states with privacy laws, you have additional rights, including:

  • Right to know and access information about our collection, use, and disclosure of personal information.
  • Right to delete personal information, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information.
  • Right to limit use of sensitive personal information (we do not collect sensitive personal information on this site).

We honor the Global Privacy Control (GPC) signal as an opt-out preference where applicable.

Do Not Sell or Share My Personal Information

Children’s privacy and safety

Our community is family-friendly and we prioritize child safety. We follow COPPA in the US (under 13), the UK Children’s Code (Age Appropriate Design Code), and EU GDPR child consent rules (member-state age typically 13–16, default 16). If you are under 13 in the US/UK, or under your country’s digital consent age in the EEA, please ask a parent or guardian before enabling analytics or submitting personal information.

  • We do not knowingly collect personal information from children without parental consent where required.
  • Analytics and non-essential cookies are off by default and only activated with explicit consent. We do not use behavioral advertising.
  • We apply data minimization, do not profile children for marketing, and disable precise geolocation.
  • Parents/guardians can request access, deletion, or withdrawal of consent at any time by emailing contact@saintcraft.us.

Online safety, moderation, and reporting

We aim to maintain a safe environment. We moderate community spaces and act on reports of harmful or illegal content. To report a safety concern, suspected underage account, or policy violation, contact contact@saintcraft.us. In urgent situations or where someone is at risk, contact local authorities.

Age assurance (UK Online Safety Act, October 2025)

To meet UK requirements, we may introduce age assurance measures for access to certain features. Where required, we will provide options such as third‑party face age‑estimation or document checks to estimate age without creating a biometric identifier.

  • If face age‑estimation is offered, it will be performed by a vetted processor solely to produce an age estimate; we will not receive or store your face image or biometric template.
  • We will minimize data, use the least intrusive method available, and provide alternatives where feasible.
  • Any provider will be bound by contract to delete images promptly after the age estimate is produced and to prohibit secondary use.

Australia notice

We aim to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You may request access to and correction of personal information we hold about you and make complaints to the Office of the Australian Information Commissioner (OAIC) if unresolved with us.

Contact

Questions or requests: contact@saintcraft.us. We have not appointed a Data Protection Officer; please use this contact for privacy inquiries.

If you are in the UK/EU, you have the right to lodge a complaint with your supervisory authority (e.g., the ICO in the UK or your local EU Data Protection Authority). In Australia, you may contact the OAIC.

Changes

We may update this policy from time to time. We will post the updated version and update the effective date above.