This page explains what we collect when you use the Boxpix storefront, what we do with it, and the choices you have. We try to keep this short and concrete instead of legalese.
When you log in we store your Minecraft username (IGN) and the linked UUID. When you place an order we store the items, prices, total, payment status, and the Stripe session ID for that purchase. We don't ask for your real name, address, age, or anything outside of what's needed to deliver your in-game items.
Your IGN and UUID are used to deliver purchases in-game and to show your order history at /me/purchases. Order rows are kept so refunds, chargebacks, and renewal billing can be reconciled later. Anonymous statistics (top donator, recent payments) are derived from those rows.
We set a few first-party cookies: a cart session cookie (so your basket survives a refresh), a verification cookie (so you don't have to confirm in chat on every visit), and a language cookie (NEXT_LOCALE). No advertising or analytics cookies are set by us.
Payments are processed by Stripe — the payment fields you fill in never touch our servers. We use Cloudflare Turnstile to deter bots on the verification flow. Avatars are loaded from mc-heads.net using your IGN/UUID as a key. Each of these has their own privacy policy linked from their site.
Order data is kept indefinitely for accounting. Verification cookies expire after 30 days of inactivity. The cart session and language cookies expire automatically when the browser deletes them.
Want your purchase history wiped? Reach out on Discord and we'll delete the rows tied to your UUID. You can clear local cookies any time from your browser settings.
Questions about this policy can be sent to our staff on Discord. We're not a registered company — Boxpix Network is run by a small team, and the answers come from us directly, not a privacy department.