Short version: We collect only what we need to provide the service. We don't sell your data. We don't share it with advertisers. You can request deletion at any time.
PhantomAC ("we", "us", "our") operates the PhantomAC website and provides the PhantomAC Minecraft client software. We are the data controller responsible for your personal data.
For privacy-related enquiries, contact us via our Discord server.
We collect the following categories of personal data:
| Data Type | What We Collect | Why |
|---|---|---|
| Account Data | Username, email address, hashed password | Account creation and authentication |
| Payment Data | Transaction ID, Stripe customer ID, purchase plan, amount | Processing payments and managing subscriptions |
| License Data | License key, Hardware ID (HWID), activation date, expiry date | Software licensing and anti-piracy protection |
| Technical Data | IP address (at login/registration), browser type, device type | Security, fraud prevention, and service delivery |
| Communication Data | Emails we send you (verification, license delivery) | Account verification and purchase confirmation |
We do NOT collect: Full payment card details (handled by Stripe), your Minecraft account credentials, gameplay data, screenshots, or any data from within the game client itself.
We collect data through:
For users in the European Economic Area (EEA), we process your personal data under the following legal bases:
We use your data exclusively for the following purposes:
We do not sell, rent, or trade your personal data. We share data only with the following trusted third-party services, strictly to operate our service:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, payment details (their servers, not ours) |
| Resend | Transactional email delivery | Email address, username, license key |
| Railway | Server and database hosting | All data stored in our database |
All third-party providers are contractually bound to process your data only as instructed by us and in compliance with applicable data protection laws.
Our software collects a Hardware ID (HWID) — a unique fingerprint generated from your computer's hardware components — upon first launch. This data is used solely to bind your license to your device and prevent unauthorized sharing.
We retain your data for the following periods:
If you are located in the EEA, you have the following rights regarding your personal data:
To exercise any of these rights, contact us via Discord. We will respond within 30 days. Note that some rights are subject to limitations — for example, we must retain payment records for legal reasons even if you request deletion.
We take the security of your data seriously and implement the following measures:
While we implement industry-standard security measures, no system is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Our website uses only essential cookies required for the service to function:
We do not use tracking cookies, advertising cookies, or any third-party analytics that place cookies on your device. You can disable cookies in your browser settings, but this will prevent you from staying logged into your account.
PhantomAC is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately and we will take steps to delete that information.
Our servers are hosted on Railway's infrastructure, which may be located outside the EEA. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and notify users via email where required. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
For any privacy-related questions, data requests, or complaints, please contact us via our Discord server.
If you are located in the EEA and are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).