Privacy

• Your Minecraft name and UUID, proved by the payment you made to connect.
• Your Discord id, username and avatar, if you connected that way. We never see your password and cannot post as you.
• Your balance and every movement of it — deposits, deals, fees, withdrawals — as a permanent double-entry ledger.
• Listings, deals, and the messages and images in them.
• Feed posts, direct messages, live chat and support tickets.
• Images you upload, stored on our own server. We check the file’s actual bytes rather than trusting its name or extension.
• Timestamps, and your IP address for a short period, used to rate-limit writes and to investigate abuse.

We do not collect a real name, an address, a date of birth, an email, a phone number, or any payment details, because none of those are needed to hold in-game coins for you and every one of them would be something worth stealing.

To run the escrow. The ledger is what proves whose coins are whose; the deal thread is what a dispute is decided on; the record of completed deals is what a stranger uses to judge whether you are safe to trade with.

There is no other purpose. Nothing here is used to profile you, to advertise, or to train anything.

• The other side of a deal sees your Minecraft name, your completed-deal count, and everything either of you writes in that deal thread.
• Anybody can see your public listings, your feed posts, your live chat messages, your follower counts and your public trading record. Your balance is never public.
• Staff can read a deal thread when a dispute is opened on it, and read a support ticket you have opened. Every staff action that moves coins or changes an account is logged against the staff member who did it.
• Nobody else. We do not sell, rent or share data with third parties, and there is no advertising network on this site to share it with.

We would hand over data if we were legally required to. If that ever happens and we are allowed to say so, we will.

One cookie: a signed session token that says which account you are. It is httpOnly, so scripts on the page cannot read it, and it lasts seven days.

There are no analytics cookies, no advertising cookies, and no third-party cookies, which is why this site does not put a consent banner in front of you.

• The ledger and deal records: permanently. They are the proof of who was paid what. Deleting one side of a deal would erase the other person’s evidence too.
• Messages, posts and uploads: until you delete them, or the account is closed.
• Live chat: rolling — old messages are not kept indefinitely.
• IP addresses: days, not months, unless attached to an abuse investigation.

Open a support ticket and ask. We will tell you what we hold about you, correct anything wrong, and delete what can be deleted.

What cannot be deleted is the financial and dispute record described above. In place of deleting it we can detach it from you: your name is replaced, and what remains is an anonymous row proving a deal happened.

The site is served over HTTPS. Sessions are signed tokens rather than a password we could leak, because there is no password. Balances move only inside database transactions under row locks, so a half-completed transfer is not possible.

No system is perfectly secure. If you find a way into something you should not be able to reach, please tell us through support before telling anybody else.