Privacy Policy

The information we collect depends on how you use Rarecandy. We may collect and store the following information:

Account Information

• Your Discord username.
• Your Discord user ID.
• Your Discord avatar URL, where provided.
• Information required to associate your Discord account with your Rarecandy account.

Authentication and Session Information

• Session information required to keep you authenticated while using the Website.
• Authentication-related information necessary to securely maintain your session.

Session information may be stored using cookies or similar browser mechanisms. We do not use session information for advertising or tracking purposes.

Purchase Information

When you make a Purchase, we may store information necessary to record and fulfill the transaction, including:

• Your Discord user ID.
• The Product or Products purchased.
• The amount and currency of the Purchase.
• Order status and relevant timestamps.
• PayPal order and payment/capture identifiers.
• Information necessary to deliver your purchased Product.

Technical Information

Our hosting provider, web server, or other infrastructure may automatically process limited technical information when you access the Website. This may include information such as IP address, browser type, operating system, request timestamps, and error or security logs.

We do not intentionally use this information to create advertising profiles or track you across unrelated websites.

Shopping Cart Information

Your shopping cart is stored locally in your browser usinglocalStorage.

Cart contents remain on your device and are not sent to Rarecandy merely because you add an item to your cart. Cart information is transmitted to us when necessary to begin or complete the checkout process.

Rarecandy does not directly collect or store your full payment card number, bank account credentials, or PayPal password.

Payments are processed by PayPal. We receive transaction information and payment confirmation necessary to identify and fulfill your Purchase, but payment credentials are handled by the payment provider.

We do not intentionally collect sensitive personal information that is not necessary for operating the Service.

We use the information we collect for purposes including:

• Authenticating you through Discord OAuth.
• Maintaining your Rarecandy account and login session.
• Processing and recording Purchases.
• Confirming successful payments through PayPal.
• Delivering purchased Products through our Discord bot.
• Associating purchased Products with your Discord account.
• Preventing fraud, abuse, unauthorized access, and payment manipulation.
• Detecting and investigating security incidents.
• Maintaining and improving the Website and Service.
• Complying with applicable legal and regulatory obligations.

Where applicable law requires a legal basis for processing personal information, we may process your information because:

• It is necessary to provide the Service or fulfill a transaction you requested.
• It is necessary to comply with a legal or regulatory obligation.
• It is necessary for our legitimate interests, such as preventing fraud, securing the Service, and maintaining our systems.
• You have provided consent where consent is required.

Rarecandy relies on third-party services to provide authentication, payments, communication, hosting, and other functionality.

These providers may process information according to their own privacy policies and terms.

• Discord - used for authentication, account identification, communication, and Product delivery. See Discord's Privacy Policy.
• PayPal - used to process payments and provide payment confirmations. Payment information is handled according to PayPal's policies. See PayPal's Privacy Policy.

We may also use hosting, infrastructure, database, security, or other service providers necessary to operate Rarecandy. Such providers may process information only as necessary to provide their services to us.

Rarecandy uses cookies or similar browser storage mechanisms where necessary to provide authentication and maintain your signed-in session.

We also use your browser's localStorage to retain shopping cart contents between visits.

Cart information stored in localStorage remains on your device and is not transmitted to us until it is required for checkout.

Clearing your browser's stored data may remove locally stored cart information and may sign you out of the Website.

We do not use cookies or local storage for third-party advertising or cross-site behavioral advertising.

We do not sell your personal information.

We may disclose or provide access to information when reasonably necessary.

We do not share personal information with third parties for their own advertising purposes.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Account information is generally retained while your Rarecandy account remains active.

Purchase and transaction records may be retained for longer periods where necessary for accounting, fraud prevention, dispute resolution, legal obligations, tax requirements, or maintaining records of licenses and purchases.

Security and technical logs may also be retained for a limited period where necessary to investigate incidents, prevent abuse, or maintain the reliability of the Service.

When information is no longer reasonably required, we may delete or anonymize it.

You may request deletion of your Rarecandy account and associated personal information by contacting us through our Discord server.

We will review deletion requests and remove personal information where we are not required or reasonably entitled to retain it.

Deleting your account does not necessarily delete transaction, payment, security, or other records that we are legally required to retain or that are reasonably necessary for legitimate business purposes.

Account deletion may also result in the loss of access to Rarecandy services associated with that account.

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of certain personal information.
• Object to or restrict certain processing activities.
• Request a copy of certain information in a portable format.
• Withdraw consent where processing is based on consent.

These rights may be subject to limitations and exceptions under applicable law.

To exercise an applicable privacy right, contact us through our Discord server.

Rarecandy and the third-party services we use may operate in or process information from countries other than your own.

As a result, your information may be transferred to and processed in jurisdictions that may have different data-protection laws from those in your country.

Where required by applicable law, we will take appropriate measures when transferring personal information internationally.

We take reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction.

These measures may include access controls, authentication protections, secure communication, restricted database access, and verification of payment notifications.

However, no method of transmission, storage, or electronic communication is completely secure. We therefore cannot guarantee absolute security of your information.

If you believe that your account or personal information has been compromised, please contact us as soon as possible.

Rarecandy is intended for users who meet the minimum age requirements stated in our Terms of Service.

We do not knowingly provide the Service to individuals who are not legally permitted to use it or knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided us with personal information in violation of applicable law, please contact us. We will review the matter and take appropriate action, including deletion where required.

We may process account, purchase, technical, and transaction information to detect and prevent fraud, unauthorized payments, Product redistribution, account abuse, unauthorized downloads, and other misuse of the Service.

This may include associating Purchases and download activity with your Discord account and retaining relevant records for investigation and enforcement purposes.

Rarecandy may provide Products intended for use with Minecraft, Discord, server software, mods, plugins, or other third-party platforms.

Rarecandy does not control these third-party platforms and is not responsible for their privacy practices, policies, security, outages, or changes.

Your use of third-party platforms is subject to their respective privacy policies and terms.

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, applicable law, or the third-party services we use.

When changes are made, we will update the "Last updated" date at the beginning of this policy.

Where appropriate, significant changes may also be announced through our Discord server or other available communication channels.

If you have questions about this Privacy Policy, want to request access or deletion of your information, or have other privacy-related concerns, contact us through our Discord server.

See also our Terms of Service.