Privacy

This policy explains what personal data MCResources keeps when you use this site, why, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who is responsible for your data

MCResources is the controller of your personal data:

• Trading name: MCResources
• Address: [postal address: to be completed]
• Email: [contact email: to be completed]

What we keep, and why

• Your Discord account. When you sign in with Discord, we keep your Discord id, username, display name, avatar, language and, if you share it, your email address. We use them to run your account and to contact you about your orders and requests. Basis: our contract with you.
• Discord access tokens. Discord gives us a token to add you to our Discord server, where your downloads and ticket channels are. We use it only for that. Basis: our contract with you.
• Orders and payments. What you bought or paid for, the amount and the date. Payments are made through PayNow, our payment provider and merchant of record: we never see or store your card details. Basis: our contract with you, and our legal duty to keep accounting records.
• Custom work requests. Your deadline, the description of what you need, any links you send, and our quote or decision. Images and files you share in your Discord ticket are stored by Discord, not on this site. Basis: taking steps at your request before a contract, then the contract.
• Downloads. Which product you downloaded through our Discord bot, and when. Basis: our contract with you, and our legitimate interest in supporting you and preventing misuse.
• Ratings and reviews. The stars you give a product you own and, if you choose, a written review. Stars count towards the average shown; a written review is shown publicly with your Discord username, a “verified buyer” label and the date. You can change or remove it by submitting your rating again without text. Basis: our legitimate interest in helping buyers choose.
• Saved products. The products you save for later. Only you can see them. Basis: our contract with you.
• Discount codes. Which code, if any, you used on an order. Basis: our contract with you.
• Security records. A log of sign-ins, payments, refunds and changes we make, with your Discord id and username and, for actions on the site, your IP address and browser details. Basis: our legitimate interests in keeping the site secure, preventing fraud and resolving disputes.
• Site analytics. We use Umami, which doesn't use cookies or build profiles of visitors. It records which pages are visited (so also how often each product page is viewed), where visitors came from, and their country and type of device, as totals. It respects your browser's Do Not Track setting. Basis: our legitimate interest in improving the site.

Cookies and local storage

We only use what the site needs to work, so we don't ask for cookie consent: the cookies that keep you signed in and protect sign-in (authjs.session-token, authjs.csrf-token, authjs.callback-url; the session lasts up to 30 days), the cookie that remembers your language (NEXT_LOCALE; it lasts a year) and, in your browser's local storage, your light or dark theme choice and what's in your cart. There are no advertising or tracking cookies.

Who we share it with

We don't sell your data. We use these providers to run the site, and they only use it for us:

• Discord: sign-in, our server, your ticket channels and downloads
• PayNow: payments, receipts and taxes (merchant of record)
• Cloudflare: network security and delivery of the site
• Our hosting provider: the servers that run the site and its database
• Umami: site analytics (no personal profiles)

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations (such as the UK-US data bridge) or by the standard contractual clauses approved for the UK.

How long we keep it

• Your account: while you have one. Ask us and we'll delete it.
• Orders, payments and the related security records: six years after the end of the financial year they belong to, as UK tax law requires.
• Sign-in sessions: up to 30 days.
• Other security records: as long as needed to keep the site secure and resolve disputes.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it sent to you or someone else in a portable format. Some data we have to keep by law (such as payment records) even if you ask us to delete it. Email [contact email: to be completed] and we'll reply within one month.

If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Children

The site isn't for children under 13, which is also Discord's minimum age. Anyone under 18 needs a parent or guardian's permission to pay for anything.

Changes

We'll update this page if what we do with your data changes; the date at the top shows the last change.