Privacy Policy

Last updated: August 2026

This Privacy Policy explains what information DonutAFK collects, why, and how it's used. It's part of and should be read alongside our Terms of Service.

1. What we collect

Account info: the username, password (stored as a salted hash, never in plain text), and email address you provide when redeeming a license key.
Minecraft session data: the Microsoft/Xbox authentication tokens needed to keep your Minecraft account(s) connected while the Service is running, held only for that purpose.
Usage data: in-game chat and status the Service reads to power features like balance tracking and auto-sell (e.g. sale amounts, connection status) — not your private messages with other players beyond what the game itself broadcasts as system chat.
Payment data: none. Payments are arranged directly with the owner and are not processed through the Service, so no card, wallet or transaction data is collected or stored here.
Technical data: IP address and basic request logs, used for security (rate-limiting, abuse prevention) and debugging.

2. What we don't collect

We don't ask for or store payment card numbers, bank details, or wallet private keys/seed phrases. We don't sell your data to anyone.

3. How we use it

To operate the Service: keeping your account(s) connected, running the features your plan includes, and detecting payment.
To secure the Service: rate-limiting logins, detecting abuse, and protecting against unauthorized access.
To contact you: password reset links, verification codes, and important service notices, sent only to the email you provided.

4. Sharing

We don't share your personal information with third parties, except where required by law.

5. Data retention

Account data is kept for as long as your account exists. If you'd like your account and associated data deleted, contact us using the details below.

6. Security

Passwords are hashed, not stored in plain text. Access to the underlying server is restricted to the Service owner. As with any online service, no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

7. Your choices

You can request a copy of the data associated with your account, request corrections, or request account deletion at any time by contacting us.

8. Changes to this policy

We may update this policy from time to time. Continued use of the Service after a change means you accept the updated policy.

9. Contact

Questions about this policy or your data can be sent to relaylab1@gmail.com.