Who we are
Ultra MC is a Minecraft development studio based in Romania: we make plugins, server setups and custom work. We decide what happens to the data described here. Write to [email protected] about anything on this page.
What we keep, and why
- Your account: your name, your email, your password (only as a one-way hash, never the password itself), and, if you connect them, your Discord ID and username or your Google ID and email, and the link to your profile picture. We need them to sign you in and to show you your plugins and orders.
- Your briefs: what you send from the custom page (the project, the estimate, your idea, the links, and your name, Discord username or email to answer you). We use them to answer you and to prepare an offer. A copy goes to a private channel of our Discord server, where our team reads it.
- Your purchases, once the shop opens: what you bought, when, and its license key. The payment itself is handled by our payment provider, which sells to you on our behalf and has its own privacy notice. We never see your card details.
- Security: your IP address or email, for at most one hour, to slow down anyone guessing passwords or sending too many emails.
We use the account, the briefs and the purchases because you ask us for a service: an account, an answer, a plugin (the contract, article 6(1)(b) of the GDPR). We use the security data because we have a real need to keep accounts safe (article 6(1)(f)). We send no newsletters and sell no data, to anyone.
Cookies
Only the cookies the site needs to work. No analytics, no advertising, no tracking, so there is no cookie banner.
| Cookie | What for | How long |
|---|---|---|
dg_session | Keeps you signed in. It holds a random code, and only its hash is in our database. | 30 days from your last visit |
dg_name | Shows your name in the header. It holds nothing else. | 30 days from your last visit |
dg_oauth | Checks that a sign-in with Discord or Google is the one you started. | 10 minutes |
Who helps us
- Cloudflare hosts the site and its database, and forwards the emails sent to [email protected].
- Discord and Google, only if you sign in with them. When you open your account page, your browser loads your profile picture from them.
- Discord also delivers your briefs to our private channel.
- Resend sends the account emails: the link to confirm your address and the link to set a new password.
- Our payment provider, once the shop opens. Its name is on the checkout page.
Some of them work outside the European Union. They do so under the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
How long we keep it
- Your account, until you delete it (Settings, on your account page).
- A session, 30 days after you last used the site. The links we email, one hour (new password) or 24 hours (confirm your email).
- Briefs, as long as we need them to answer you and to keep a record of our work. If you delete your account, they stay without your account on them; ask us and we delete them too, unless they led to a contract.
- Purchases, as long as tax and accounting law asks us to.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to give it to you in a file you can take elsewhere, and you can object to how we use it. Write to [email protected]: we answer within a month. You can delete your account yourself, in Settings. If you think we got something wrong, you can complain to the data protection authority of your country; in Romania that is ANSPDCP (dataprotection.ro).
Younger players
Our work is for server owners. If you are under 16, ask a parent or guardian before you make an account, send us a brief or buy anything.
Changes
When this policy changes, the date at the top changes too. If a change matters for your account, we tell you by email first.