Privacy Policy

Introduction

Welcome to Crafters Development, the software engineering division of Crafters Corporation. This Privacy Policy governs the data practices for all software products, plugins, extensions, modules, companion tools, documentation, and web services provided by Crafters Development, collectively referred to herein as the "Ecosystem."

Crafters Development is an independent software studio based in Chile, founded and maintained by xUnknowns. Our Ecosystem encompasses, but is not limited to, the following products: CraftersStaff, CraftersBan, CraftersLogin, CraftersFastAuth, and the forthcoming CraftersAnticheat.

By downloading, installing, configuring, or otherwise interacting with any software product, documentation page, or web service operated by Crafters Development, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree to any part of this policy, you should discontinue use of our software and services immediately.

We are deeply committed to your privacy and the integrity of all data handled by our software. Our core philosophy is to collect only the minimum information strictly necessary for the software to function correctly, and never to exploit, monetize, or share any collected data with third parties for commercial purposes.

Information We Collect

The types of information collected by Crafters Development products fall into three distinct categories: data collected automatically by plugins during server operation, data associated with interactions on our official distribution platforms, and data provided voluntarily by users or server administrators.

2.1 Minecraft Player Data (Automatic, Plugin-Side)

The following data may be collected and stored locally on the server administrator's database by our plugins:

• Player UUID: The unique identifier assigned by Mojang to each Minecraft account. This is used as the primary key for all player records in our database schemas.
• Minecraft Username: The player's current in-game name at the time of login or interaction. Usernames are stored for display and lookup purposes only.
• Player Skin Hash: In CraftersStaff, a player's skin texture hash may be retrieved from Mojang's API solely to render staff avatars in the web dashboard interface. No skin images are stored by our servers.
• IP Address: CraftersBan and CraftersLogin may store the last known IP address associated with a player for IP-based punishment enforcement, session reuse, alt-account detection, and brute-force protection. This data is stored in the server administrator's own database and is never transmitted to Crafters Development servers.
• Authentication Credentials (Hashed): CraftersLogin stores password hashes (BCrypt, SHA-256, or Argon2 depending on configuration) in the server's local database. Plain-text passwords are never stored, logged, or transmitted.
• Session Tokens: Temporary session identifiers that enable re-authentication without requiring repeated password entry. Sessions are bound to the player's UUID and IP address and expire according to the server's configured session duration.
• Punishment Records: CraftersBan stores records of disciplinary actions (bans, mutes, warnings, kicks) including reason, duration, responsible staff member, and timestamps. These records reside entirely within the server administrator's database.

2.2 Server Environment Data (Automatic, Plugin-Side)

Our plugins may collect and log the following server environment metadata solely for compatibility checking and internal error reporting:

• Server Software Type and Version: For example, Paper 1.21.1 or Purpur 1.20.4, used to detect incompatible environments and provide relevant console warnings.
• Java Runtime Version: Logged at startup to validate compatibility with the plugin's compiled Java bytecode version.
• Installed Plugin List: Some plugins check for soft-dependency plugins (such as ProtocolLib or PlaceholderAPI) to enable optional integrations. No full plugin list is stored or transmitted externally.
• Proxy Type: Whether the server operates under BungeeCord, Waterfall, or Velocity is detected at runtime for network feature activation. This detection is purely local.

2.3 External Platform Data (Distribution Platforms)

When you visit our official plugin pages on third-party distribution platforms such as Modrinth, SpigotMC, or Bukkit/CurseForge, those platforms may collect standard web analytics data (page views, download counts, geographic region) under their own privacy policies. Crafters Development does not control, access, or process this data directly.

2.4 Voluntarily Provided Data

When you contact us through our Discord server, submit a bug report, or request support, you may voluntarily provide:

• Your Discord username and user ID.
• Your server's software version, configuration excerpts, or error logs (for troubleshooting).
• Any other information you choose to include in your support request.

How We Use the Information

All data processed by Crafters Development software is used exclusively for the following operational and technical purposes:

3.1 Authentication and Session Management

CraftersLogin and CraftersFastAuth use player UUIDs, IP addresses, and session tokens to manage the player authentication pipeline on your server validating premium (Mojang) accounts through the official Mojang Session API, creating and expiring login sessions, preventing unauthorized account access through brute-force protection, and enforcing account-per-IP limits configured by the administrator.

3.2 Punishment and Moderation Enforcement

CraftersBan uses player UUIDs, IP addresses, and username records to enforce punishment records consistently across single-server and multi-server network environments, allowing staff teams to maintain auditable moderation logs.

3.3 Staff Management and Monitoring

CraftersStaff uses player UUIDs and usernames to track staff mode status, vanish state, freeze state, and report management workflows. The optional web dashboard uses player skin hashes fetched from Mojang's public API for avatar rendering purposes only.

3.4 Performance and Compatibility Diagnostics

Server environment data (software type, Java version, proxy type) is used exclusively at plugin startup to validate operational requirements and enable or disable feature sets based on detected dependencies. This data is never transmitted externally.

3.5 Support and Debugging

Information you voluntarily provide through Discord or bug reports is used solely to diagnose issues, provide technical assistance, and improve software quality. We do not retain support conversation logs beyond the scope of the Discord platform's own data retention policies.

Data Security & Retention

4.1 Security Practices

Crafters Development implements the following security standards across its software products:

• Password Hashing: CraftersLogin supports BCrypt (configurable cost factor), SHA-256, and Argon2. Plain-text password handling is explicitly prohibited at the code level.
• Session Binding: Authentication sessions are bound to both UUID and IP address, preventing session token reuse across different network origins.
• SQL Injection Prevention: All database queries across our plugins use parameterized prepared statements.
• No Outbound Telemetry: None of our plugins make outbound connections to Crafters Development servers for data collection, analytics, or license validation. The only outbound connections are to Mojang's official session API and any Discord webhook URLs explicitly configured by the administrator.
• Encryption in Transit: Any communication with Mojang's session API is performed over HTTPS/TLS.

4.2 Data Storage Responsibility

All player data collected by Crafters Development plugins is stored in databases entirely under the control of the server administrator who installed the plugin an embedded H2 database, or a remote MySQL/MariaDB database configured by the administrator. Crafters Development has no access to, and no responsibility for, the security posture, backup practices, or retention policies of those databases.

Server administrators are solely responsible for the security of their databases, including access control, backup procedures, and compliance with applicable data protection regulations in their jurisdiction.

4.3 Data Retention

Crafters Development does not operate centralized servers that retain player data. All data retention is determined exclusively by the server administrator's database configuration. Our plugins do not automatically purge or archive data unless the administrator explicitly configures such behavior.

We strongly recommend that server administrators implement regular database backups and a data minimization policy appropriate for their community size and applicable laws.

4.4 Data Sharing

Third-Party Services & Platforms

Our software interacts with a limited number of external services for specific, documented purposes:

5.1 Mojang Session API

CraftersLogin and CraftersFastAuth communicate with Mojang's official session server (sessionserver.mojang.com) to verify premium player authentication during the login handshake, using only the username and session token provided by the Minecraft client. Mojang's data practices are governed by Mojang's Privacy Policy.

5.2 Discord

CraftersBan supports optional Discord webhook integration. When configured by the administrator, punishment events may be transmitted to a Discord channel via a webhook URL. Crafters Development does not operate or have access to the Discord webhook endpoints configured on your server.

5.3 Distribution Platforms

Our official plugin releases are distributed via Modrinth, SpigotMC, and Bukkit/CurseForge. Each operates under its own privacy policy and terms of service. Crafters Development does not receive personal data from these platforms beyond aggregated download statistics visible publicly on the respective plugin pages.

5.4 Cloudflare

Our official website (craftersdevelopment.pages.dev) is hosted on Cloudflare Pages. Cloudflare may collect standard web server access logs, CDN performance data, and DDoS protection signals under Cloudflare's Privacy Policy. We do not use any custom analytics or tracking scripts.

Children's Privacy

Our software is designed for use by Minecraft server administrators and operators. We recognize that the Minecraft player base includes individuals under the age of 13 (or the applicable age of digital consent in their jurisdiction). Because our plugins operate exclusively on server infrastructure not directly as user-facing applications the server administrator is the responsible party for appropriate data handling for their player base, including any minor players.

Crafters Development does not knowingly collect, solicit, or store personal information from individuals under the age of 13 through any direct web service or contact channel. If you believe we have inadvertently received information from a child under 13, please contact us immediately using Section 11, and we will take prompt action to delete such information.

Your Rights & Choices

Since all player data collected by Crafters Development plugins is stored locally on each server's database infrastructure controlled entirely by the server administrator data access, correction, and deletion requests should be directed to the administrator of the specific Minecraft server you are concerned about.

Crafters Development does not maintain a centralized database of player records and therefore cannot fulfill individual player data access or deletion requests on behalf of third-party server administrators.

If your data concern relates to information you have shared directly with Crafters Development (for example, through our Discord community), you may contact us directly using Section 11. We will respond to all legitimate privacy requests within 30 days.

To the extent applicable under Chilean Law 19.628 on the Protection of Private Life or other applicable legislation, you have the right to:

• Request confirmation of whether we hold any personal data about you.
• Request correction of any inaccurate personal data.
• Request erasure of personal data in appropriate circumstances.
• Object to or restrict certain types of data processing.
• File a complaint with the appropriate regulatory authority in your jurisdiction.

Cookies & Analytics

The Crafters Development website (craftersdevelopment.pages.dev) does not use proprietary cookies, tracking pixels, fingerprinting techniques, or behavioral analytics tools. No first-party analytics data is collected or processed by Crafters Development through our website.

Cloudflare, our hosting provider, may place technical cookies necessary for CDN performance, DDoS protection, and bot detection. These are strictly functional and do not track individual users for marketing or profiling purposes. You may manage cookies through your browser settings.

International Data Transfers

Crafters Development is based in Chile. Our website infrastructure is hosted via Cloudflare's global network, which may involve the transfer and processing of technical connection data across multiple geographic regions, governed by Cloudflare's standard contractual and technical safeguards.

Player data collected by our plugins resides exclusively on the server administrator's own database infrastructure, which may be located in any country. Crafters Development does not perform any cross-border transfers of player data on our own behalf.

If you are subject to the EU's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or other regional data protection frameworks, your primary rights regarding plugin-collected data should be exercised with the server administrator operating within your jurisdiction.

Changes to This Policy

Crafters Development reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this document and, where feasible, announce the change through our official Discord server.

Your continued use of any Crafters Development software or web services following the posting of changes constitutes your acceptance of those changes. We encourage you to review this policy periodically.

Previous versions of this Privacy Policy may be requested by contacting us using Section 11.

Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us through any of the following official channels:

• Website: craftersdevelopment.pages.dev
• Discord Community: discord.gg/5srYxV4Z4t
• Developer: xUnknowns (reachable via Discord)

We are committed to addressing all privacy-related inquiries promptly and transparently.