Privacy Policy

We collect only the data necessary to provide a stable and secure service:

• **Technical Data:** OS version, Java version, application version, and hardware identifiers (for debugging and optimization).
• **Crash Reports:** Anonymized logs generated when the application encounters an error.
• **Authentication Tokens:** Encrypted session tokens provided by Microsoft/Mojang (we do NOT store or have access to your password).
• **Game Integrity Data:** Checksums (hashes) of game files to verify they have not been tampered with.
• **Account & Profile:** Your Minecraft UUID and username, your Microsoft account identifier and, when you sign in to the website, the email address on that account.
• **Join Applications:** The answers you submit on a server owner's application form (which may include your age and anything the owner asks), the language you answered in, and the status of each application.
• **Payment Slips:** When a server charges an entry fee, the slip image you upload and the details read from it — amount, date, bank transaction reference and the sender and receiver names printed on the slip.
• **Gameplay Sessions:** Which server instance you are playing and when, used for online counts and playtime.
• **Workspace & Billing (server owners):** Your workspace, plan and payment references from Stripe, PayPal or Cryptomus. Card and bank details are handled by those providers, never by us.

Collected data is utilized for the following purposes:

• **Service Operation:** To authenticate your license with Mojang/Microsoft services.
• **Security:** To detect and prevent the use of unauthorized programs (Anti-Cheat).
• **Optimization:** To determine the best configuration settings for your hardware.
• **Updates:** To deliver correct patch versions via the Company's API.
• **Applications & Access:** To deliver your application to the server owner, apply their decision, and add you to the server's whitelist when accepted.
• **Entry-Fee Verification:** To check a payment slip against the amount owed, detect a slip that was already used, and record that access was paid for.
• **Notifications:** To tell you and the server owner about submissions, decisions and payments, in the app, by email and through a Discord webhook the owner has set up.

Our integrity verification system is designed with privacy in mind:

• **Scope:** Scans are strictly limited to the Minecraft installation directory and active game processes.
• **Non-Intrusive:** We do NOT scan your browser history, personal documents, photos, or unrelated applications.
• **Data Transmission:** Only validation results (Pass/Fail) or hash discrepancies are sent to our servers; actual file contents are never uploaded.

Server owners run their own communities on the platform. When you apply to a server:

• Your answers, Minecraft UUID, username and any uploaded slip are shared with the owner's workspace, whose members review them. The owner is responsible for what they ask and for how they use what you send; the platform relays and stores it on their behalf.
• The owner may receive a notification of your application through a Discord webhook or email they configured. What happens to that copy is under the owner's control.
• Applications are kept while the server instance exists, including rejected ones (they enforce the owner's re-apply cooldown and appear in the owner's exports). Deleting the instance deletes them.
• You can ask the owner, or us, to delete an application or a slip you uploaded; see User Rights.

Some servers charge a one-time entry fee after approving an application. The platform does not process the payment:

• You pay the server owner directly — by PromptPay QR, a payment link the owner provides, or bank transfer. We never receive, hold or forward the money and cannot issue refunds.
• The slip image you upload is stored in private storage and is viewable only by you and the owner's reviewers through short-lived signed links.
• On plans that include automatic verification, the slip image is sent to EasySlip (Thailand) to read the bank transaction; we store the transaction reference, amount and result. EasySlip's own policy applies to that processing.
• A transaction reference is kept so the same slip cannot be reused for another application on that server.
• A refused slip can be resent a limited number of times; unpaid applications expire after the owner's deadline.

The Service utilizes Microsoft's official authentication protocol (OAuth).

• Your login credentials are processed directly by Microsoft's secure servers.
• The application only receives an access token to verify game ownership.
• We recommend reviewing Microsoft's Privacy Statement at https://privacy.microsoft.com/
• **EasySlip** (easyslip.com) verifies entry-fee payment slips with Thai banks on plans that include automatic verification.
• **Stripe, PayPal and Cryptomus** process subscription payments for server owners' workspaces; we store only the payment reference and outcome.
• **Cloudflare** hosts the website and API, stores instance files and slip images (R2) and sends our email notifications.
• **Discord** (webhooks configured by server owners) and **Modrinth** (mod downloads) receive only what those features require.

The Company implements industry-standard security measures to protect your data:

• All API communications are encrypted via HTTPS/TLS.
• Personal configuration files are stored locally on your device.
• We do not sell, trade, or rent your personal identification information to others.
• Instance files and payment slips live in a private Cloudflare R2 bucket; nothing in it is reachable without a short-lived signed link issued to an authorised viewer.
• **Retention:** Applications and slips are kept for as long as the server instance exists, or until you or the owner ask for them to be removed; gameplay session records are kept for statistics and may be aggregated.

Under applicable data protection laws (including Thailand's Personal Data Protection Act, B.E. 2562), you have the right to:

• Request details about the data we have collected.
• Request the correction or deletion of your personal data stored on our servers.
• Revoke consent for data collection (note: this may limit application functionality).
• File a complaint with the relevant data protection authority.
• Ask for an application you submitted, or a slip you uploaded, to be deleted — through the server owner or by contacting us.

The Company may update this Privacy Policy to reflect changes in our practices or legal requirements. Users will be notified of significant changes through the application or the Company's official website.

For questions regarding this Privacy Policy or data security, please contact Furimoe Co., Ltd.:

• Furimoe Co., Ltd. (บริษัท ฟูริโมเอะ จำกัด) · Registration No. 0665569000776
• Address: 36/4 Chu Choet Nan Road, Bang Mun Nak Subdistrict, Bang Mun Nak District, Phichit 66120, Thailand
• Phone: +66 63 764 2200
• Email: support@furimoe.co.th
• https://datawarehouse.dbd.go.th/company/profile/50665569000776
• https://www.dataforthai.com/company/0665569000776/