Privacy Policy

1. We never require real-life information

Under Privacy Act s8 we do not require, and ask you not to provide, real-life personal information (such as your legal name, age, address, phone number, email address, or images). A newsletter usually runs on email; Gnomestack is built to deliver on the site and through your Discord identity instead, so we do not ask for your email. We sign you in through Discord requesting only the basic profile (your Discord account id, username, and avatar). Please keep real-life information out of your posts, comments, and any other input.

2. What we collect

• Account: your Discord account id, username, and avatar, and the role we assign you.
• Minecraft link: your in-game player name and UUID, so funds reach the right account.
• Financial activity: your wallet balance, deposits, withdrawals, subscriptions, passes, and unlocks, kept as a ledger.
• Content you publish or comment, and any support requests you send.
• Technical: session and basic log data needed to operate and secure the Service.

The Privacy Act treats financial records held by a private organisation, including balances and transaction history, as personal information, and we handle yours accordingly.

3. Why we use it (lawful bases)

We process your information on the lawful bases in Privacy Act s9: to perform our contract with you (running your account, wallet, subscriptions, and publications), for our legitimate interests (operating, improving, and securing the Service and preventing fraud and money laundering), where you have consented, and where required or permitted by law or server rules.

4. When we share it

• DemocracyCraft and the Redmont Treasury: the minimum needed to move server currency to and from your linked account.
• Our administrators and moderators, on a need-to-know basis, to run the Service and investigate abuse.
• Authorities and regulators where lawfully required, or to comply with law or server rules.
• We do not sell your personal information.

Published content and anything you post publicly are public by design and are not protected personal information under the Privacy Act.

5. Your rights

Under Privacy Act s6 you may be informed about how your information is handled (this Policy), access the information we hold about you, have it corrected, ask us to delete it where it is no longer needed (subject to records we must keep for financial and legal integrity), withdraw consent, use a pseudonym where practicable, and make a complaint. Where a breach of the Act causes you quantifiable loss, the Act allows you to seek damages. To exercise any of these, contact us through the Discord link below.

6. Security, retention, and changes

We apply reasonable safeguards to protect your information against loss, theft, and unauthorised access, and limit access to those who need it. We keep your information while your account is active and for as long as needed to run the Service, keep accurate financial records, and meet legal or server-rule obligations. Permanently deported players are not entitled to the protections of the Privacy Act, except the protection of real-life information, which always applies. We may update this Policy and will note material changes in the Service.