1. Scope and controller
This notice covers the ChunkLoom website, customer area, support, payments, and hosted Minecraft control panel. The data controller is Elena Philippe, trading as ChunkLoom, at 14 avenue des Mimosas, 06800 Cagnes-sur-Mer, France. Privacy questions and rights requests can be sent to privacy@chunkloom.com.
2. Data we process
We may process your name, verified email address, billing country, account identifiers, invoices and payment status, support messages, server configuration, service usage, IP address, security logs, and abuse reports. Card numbers are handled by the payment provider and are not stored by ChunkLoom.
3. Why we process it
We use this information to create and secure accounts, provide servers, process orders, answer support requests, prevent fraud and abuse, keep accounting records, meet legal duties, and improve reliability. Depending on the activity, the legal basis may be performance of a contract, legitimate interests, consent, or a legal obligation.
4. Providers and transfers
Necessary data may be handled by Cakend for server infrastructure, Cloudflare for DNS and anti-bot protection, Brevo for transactional email, Spaceship for domain and email forwarding, Google for the support inbox, SumUp if a card payment is offered, and OpenAI Sites for the public website. Providers act under their own terms or data-processing terms. Where a provider processes data outside the European Economic Area, we rely on an applicable adequacy decision or contractual safeguards. We do not sell personal data.
5. Retention
Account and service data is normally kept while the account is active and for up to 24 months afterward. Invoices and transaction records may be retained for up to 10 years where accounting law requires it. Routine security and access logs are normally retained for up to 90 days, but relevant records may be kept longer during an incident or legal claim. Minecraft server files and local backups are scheduled for deletion within seven days after service termination.
6. Cookies
The service uses essential cookies for sign-in, security, and checkout. Non-essential analytics or marketing cookies remain disabled unless a lawful consent mechanism is in place. The launch site does not intentionally set advertising cookies.
7. Your rights
You may have rights to access, correct, delete, restrict, object to, or export your personal data, and to withdraw consent where processing relies on consent. Contact privacy@chunkloom.com to make a request. We may need to verify your identity. You may also complain to France's data-protection authority, the CNIL.
8. Security and children
We use access controls, encryption in transit, restricted administrative access, updates, and monitoring appropriate to a small hosting service. No system is perfectly secure. The paid service is not intended to be purchased independently by children who cannot legally contract.
9. Required information and automated checks
An email address and the account fields marked as required are necessary to create and secure an account and provide a service. If you do not provide them, we cannot open the account. Automated anti-spam, capacity, and abuse checks may temporarily block an action, but ChunkLoom does not use solely automated decisions that produce legal or similarly significant effects.