Privacy Policy

This Privacy Policy explains how SkyVault Interactive SIA (reg. no. 40203451987, VAT LV40203451987), Brīvības iela 103, Rīga, LV-1001, Latvia ("we") processes your personal data when you use SkyVault, in accordance with the EU General Data Protection Regulation (GDPR). We are the data controller.

Data we collect

• Account data: email address, first and last name, and a securely hashed password (we never store your password in plain text).
• Gameplay/delivery data: your Minecraft username and the UUID we resolve from it.
• Order & wallet data: items purchased, amounts, currency, payment reference, and wallet transactions.
• Technical data: IP address, approximate location and browser information from server logs, used for security and fraud prevention.
• Cookies: see our Cookie Policy.

Why we use it (legal bases)

• To provide the service and deliver your purchases — performance of a contract.
• To verify your email and secure your account — legitimate interests and legal obligation.
• To prevent fraud and abuse — legitimate interests.
• To meet accounting and tax obligations — legal obligation.
• Non-essential cookies/communications — your consent, which you can withdraw at any time.

Payment data

Card details are entered with and processed by our payment provider and are never stored on our servers, keeping us out of PCI cardholder-data scope. During the beta, payments run in test mode and no real card data is processed.

Sharing & transfers

We share data only with processors that help us run the service (hosting, email, payment, the Minecraft username lookup) under data-processing agreements. Where data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep account and order data for as long as your account is active and as required for legal/accounting purposes (typically up to the statutory retention period), then delete or anonymise it.

Your rights

You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent. You may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.

Contact

To exercise your rights or ask about this policy, email support@skyvault.gg.