Privacy Policy

Privacy Policy (GDPR)

1. Controller

Sandra Glassl
Doktorberg 22, Haus 4
2391 Kaltenleutgeben, Austria
E-Mail: shop@pluginsmc.com

2. Data collected and purposes

Data category	Purpose	Legal basis	Retention
E-mail, name	Account, license delivery	Art. 6(1)(b) GDPR	Until account deletion
Billing address	Invoicing	Art. 6(1)(c) GDPR	7 years (§ 132 BAO)
IP address + user agent (login)	Security, abuse prevention	Art. 6(1)(f) GDPR	90 days
Server IP reported by the plugin	License binding, abuse/piracy prevention	Art. 6(1)(b), (f) GDPR	While license is active
Payment & transaction data, IP (PayPal)	Payment processing	Art. 6(1)(b) GDPR	7 years (§ 132 BAO)

3. Payment processing (PayPal)

We process payments through PayPal (Europe) S.à r.l. et Cie, S.C.A.,
22–24 Boulevard Royal, L-2449 Luxembourg. If you choose to pay with PayPal,
the data required for the transaction (name, e-mail, amount, order and
transaction details, and your IP address) is transmitted to PayPal. PayPal acts
as an independent controller for the payment data it processes. See PayPal's
privacy statement at https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.

4. License management & plugin activation

Our plugins are license-bound. When a purchased plugin runs on a Minecraft
server, it contacts our license server (plugins-verify.pluginsmc.com) to
verify the license. In doing so, the server's IP address, a technical
server identifier and the license key are transmitted and stored.

This processing binds the license to the authorised server(s), enforces the
permitted number of servers and prevents misuse and unauthorised redistribution
(piracy). Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR
(legitimate interest in protecting our digital products). The server IP
addresses stored for a license are visible to the customer in their dashboard
and to us as the operator in the admin area. They are retained while the
license is active and removed thereafter under our deletion routines.

5. Processors

• PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — payment processing
• Resend Inc. (USA, Standard Contractual Clauses) — e-mail delivery
• Hetzner Online GmbH (Germany) — server hosting + object storage
• Cloudflare Inc. (USA) — DNS + DDoS protection (if active)

6. Your rights

You have the right to:

• Information (Art. 15 GDPR) — accessible in the dashboard under "Account > Data export"
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) — subject to statutory retention obligations
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Complaint to the Austrian Data Protection Authority (dsb.gv.at)

Requests to shop@pluginsmc.com.

7. Cookies

We use only technically necessary cookies (session cookie pmc_session, admin
session pmc_admin_session, language preference pmc_lang). No tracking or
advertising cookies. During PayPal checkout, PayPal may set its own cookies
for fraud prevention. Details at https://pluginsmc.com/legal/cookies.

8. Changes

This statement will be updated when material changes occur. Earlier versions are archived and viewable in the admin panel.

Last updated: 2026-06-03