Privacy Policy

1. What we collect

• Minecraft account data: your UUID and username, obtained when you sign in with Microsoft. We never see or keep your Microsoft password or email, and we discard Microsoft tokens once verification is done.
• Project data: name, description, the contact details the owner enters, join policy, and invite link.
• Membership data: which project you belong to, your role, request status, invites, and notifications on the manage page.
• Sign in data: a one-way hash of your session token and its expiry.
• Gallery images: screenshots from the server that the team uploads, which may show player names or skins.
• Technical data: hosting providers may log IP addresses and browser details for security.
• Email: the address from Microsoft or the one you enter, a one-way hash of the 6-digit confirmation code that expires in 10 minutes, and your notification setting.
• Discord: when you link your account we keep your Discord ID, name, and avatar to add you to the server and manage roles. We do not keep Discord tokens after use.
• Nickname: the name you set on the website or in Discord. We keep it and sync it between the website and your Discord server nickname. Clear the nickname field to delete it at any time.
• Creator application (if you apply): channel name, platform, channel links, rough follower count, content type, and a short intro. We use it to review the application and give the creator role. Only the team sees it. Withdraw on the creator page at any time and it is deleted straight away.
• Roles picked in Discord: your answers when joining the server (notifications, play style, gender) exist only as roles inside Discord. The website does not record them.
• Luna (the Discord assistant): when you talk to Luna, we send the messages, images, or files you send her to OpenAI for processing. Luna remembers your recent conversation and short things you told her for up to 90 days after you last talked, and /ลืมฉัน deletes it at any time. Luna logs messages she finds breaking the rules for the team to review, and we keep conversations with Luna for 30 days so the team can check her answers, then delete them.
• More project data: social links, logo and banner images, role icons, and the icon of the project's website, which we fetch from that website directly.
• Activity history: registrations, approvals, requests, invites, joins, leaves, and round endings, to show history to you and the team.

2. Purposes and legal bases

• Verifying that you own a Minecraft account and letting you sign in (performance of a contract).
• Handling project registration, approval, and membership, and checking access when you join the event server (performance of a contract).
• Notifying the team when a project is approved and promoting the event (legitimate interests).
• Preventing cheating and abuse and keeping the system secure (legitimate interests).

3. What is public

• The website shows approved projects' names and descriptions, the owner's username, member counts, and some members' character heads.
• Your nickname is shown on the website to members of your project and the team, and to everyone in the Discord server once you link your account.
• Project contact details and invite links are never public.

4. Service providers

• Microsoft, Xbox Live, and Mojang, to verify Minecraft accounts.
• Cloudflare for website hosting and image storage, and a server provider for the API and database. These may be outside Thailand. We choose providers with appropriate data protection safeguards.
• Telegram, for internal team notifications (project name, description, and the owner's username).
• mc-heads.net, which serves character heads. Your browser sends a UUID or username to it to load the image.
• Discord, for account linking, adding you to the server, managing roles, and setting your server nickname.
• Cloudflare Turnstile, which checks that requests for email codes and registrations come from a person and may process device and browser data.
• Cloudflare Email Service, for notification emails and confirmation codes.
• OpenAI, to process messages people send to Luna and the messages Luna checks against the rules.
• We do not sell personal data, and only disclose it to authorities when the law requires.

5. Cookies

• We use essential cookies only: lc_session keeps you signed in for up to 30 days, and lc_oauth / lc_discord last 10 minutes during sign in or Discord linking. There are no advertising or tracking cookies.
• The registration form keeps a draft in your browser (localStorage). It is not sent to us until you submit the form.

6. Retention

• Sessions expire within 30 days, or immediately when you sign out.
• We keep account, project, and membership data while you use the service and no longer than 1 year after the latest yearly event ends, unless you ask us to delete them sooner.
• Providers keep their system logs on their own schedule.
• We keep Discord data until you unlink. When you unlink, we delete it and remove the roles we gave.
• When a round ends, project memberships end, but we keep activity history for the period above.

7. Your rights

• You can ask to access, copy, correct, delete, or restrict your data, object to processing, and request portability, and withdraw consent where we rely on it.
• You can edit project details, leave a project, or sign out yourself on the manage page. For other requests, contact us below. We reply within 30 days.
• If you believe we have not followed the law, you can complain to Thailand's Personal Data Protection Committee (PDPC).

8. Security

We send data over HTTPS, store session tokens as hashes, restrict admin access, and keep no Microsoft account credentials.

9. Minors

Users under 20 should have a parent or guardian's consent. Parents who want their child's data deleted can contact us.

10. Changes

We may update this policy and will show the new effective date here. We will announce significant changes on the website.

11. Contact the data controller

• Furimoe Co., Ltd. (company registration no. 0665569000776), 36/4 Chuchoet Nan Road, Bang Mun Nak Subdistrict, Bang Mun Nak District, Phichit 66120, Thailand
• Email contact@furimoe.co.th
• Website https://furimoe.co.th