PRIVACY POLICY

1. WHO WE ARE

LittleBlock ("we", "us", "our") operates the LittleBlock Minecraft server, website, gem store, and Discord bot. This policy explains what personal data we collect, how we use it, and your rights.

2. DATA WE COLLECT

2A. WEBSITE & STORE

Data	Why we collect it	Stored where
Minecraft username	To deliver gems to your in-game account	Browser localStorage (client only)
Payment information	To process your purchase	Stripe — we never store raw card data
Transaction records	Purchase history, refund/chargeback tracking	Server-side JSON file (transactions.json)
Gift code usage	To apply and track discount codes	Server-side JSON file (gift_codes.json)

2B. DISCORD BOT

Data	Why we collect it	Stored where
Discord User ID	Account linking and role assignment	linked_accounts.json on our server
Discord username	Displayed in verification confirmation	linked_accounts.json on our server
Minecraft username & UUID	Links your Discord to your Minecraft account	linked_accounts.json on our server
Server join/leave timestamps	Invite tracking and server analytics	join_events.json on our server
Invite code used on join	To credit the member who invited you	invites.json on our server
Discord member status (online/idle/dnd)	Displayed on the website's live panel	Not stored — fetched live from Discord

3. HOW WE USE YOUR DATA

• To deliver purchased gems to your Minecraft account
• To process payments and handle refunds or chargebacks via Stripe
• To link your Discord account to your Minecraft account after verification
• To display your player profile stats in Discord via /profile
• To track server invite statistics for analytics and rewards
• To assign the @Player Discord role upon verification

4. DATA RETENTION

• Transaction records: Kept indefinitely for financial and chargeback dispute purposes
• Linked accounts: Kept until you request deletion or your account is removed
• Join/leave events: Automatically purged after 90 days
• Pending verification codes: Automatically expired and deleted after 5 minutes
• Minecraft username (localStorage): Stored in your browser only — cleared when you clear browser data

5. THIRD PARTIES

• Stripe: Handles payment processing. See Stripe's Privacy Policy
• Discord: The bot accesses Discord's API. See Discord's Privacy Policy
• mc-heads.net / Crafatar: Used to fetch Minecraft player head images. Your username is sent to their API when displayed

We do not sell, rent, or share your personal data with any third parties beyond those listed above.

6. YOUR RIGHTS (UK GDPR / GDPR)

If you are in the UK or European Economic Area, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten") — request deletion of your data
• Portability — receive your data in a machine-readable format
• Object to processing of your data

To exercise these rights, please contact us via our Discord server. We will respond within 30 days.

7. SECURITY

We take reasonable technical measures to protect your data:

• HTTPS encryption for all web traffic
• Bot internal API bound to localhost only (not publicly accessible)
• Payment data handled exclusively by Stripe — we never see raw card numbers
• JSON data files are stored server-side with restricted access

8. COOKIES

We use browser localStorage (not cookies) to remember your Minecraft username on the store page. This data never leaves your device and is not transmitted to our server unless you make a purchase.

We use session cookies for admin authentication only. These expire when your browser closes.

9. CHILDREN'S PRIVACY

Our service is intended for users aged 13 and over (or the minimum age in your country). We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us for immediate removal.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of material changes via the LittleBlock Discord server. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. CONTACT

For any privacy-related enquiries or data requests, please contact us via our Discord server.