Privacy Policy

Last updated: 2026-05-19

1. Who we are

MapMC ("we", "us") operates the website at mapmc.app, a tool that turns real-world map data into Minecraft world files. For legal contact details see our Imprint.

2. What we collect

Account data — your email address and display name, collected when you sign up (via email/password or Google OAuth).
Top-up history — amount, date, and Stripe reference for each balance top-up. We never see or store your card number.
Generation jobs — the map area (bounding box) you selected, generation options, price, and status of each world you create.
Generated files — the .mcworld / world folder files we produce for you, stored temporarily (see retention below).
Technical data — IP address and user agent are recorded with login sessions for security. Basic analytics (page views) via Vercel Analytics, which is cookieless.

3. Why we collect it

To operate your account and authenticate you.
To process top-ups and maintain your balance.
To generate worlds and let you download them.
To send transactional email (verification, receipts, job status).
To prevent fraud and abuse.
To comply with tax and accounting obligations.

4. Third-party processors

We share the minimum data necessary with these processors. Each has its own privacy policy:

Stripe — payment processing. Receives your email and payment details (card data goes directly to Stripe, never through us).
Neon — PostgreSQL database hosting. Stores account, balance, and job records.
Cloudflare R2 — object storage for generated world files.
Resend — transactional email delivery. Receives your email address and message content.
Vercel — website hosting and cookieless analytics.

We do not sell your personal data, and we do not use it for advertising.

5. Data retention

Generated files — kept 90 days from creation, then automatically deleted from R2. Download and save the file to keep it permanently.
Account, balance, job records — kept while your account is active.
Audit log — financial events (top-ups, spends, refunds) are retained for 6 years for tax/legal compliance. This log references your user ID but contains no other personal data.

6. Cookies

We use a single essential cookie to keep you logged in (your Better Auth session). We do not use advertising or tracking cookies. See our Cookie Policy for details.

7. Your rights (GDPR & similar)

If you are in the EU/EEA, UK, or a similar jurisdiction, you can:

Request a copy of the personal data we hold about you.
Ask us to correct inaccurate data.
Ask us to delete your account and associated data — email support@mapmc.app with the subject "Delete account". We remove your user record and generated files within 7 days. The audit log entry is retained as noted above for legal compliance.
Object to or restrict certain processing.
Lodge a complaint with your local data protection authority.

8. Data location

We aim to host user data in EU regions where our providers offer it. Some processors (Stripe, Cloudflare) operate globally; transfers are covered by their standard contractual clauses.

9. Children

MapMC is not directed at children under 16. If you believe a child has created an account, email us and we will remove it.

10. Changes

We may update this policy. Material changes will be announced by email or a notice on the site. The "last updated" date above always reflects the current version.

11. Contact

Questions about privacy? Email support@mapmc.app.