Privacy Policy

Last updated: September 8, 2026

MinecraftAFK is operated by Valoks ApS, CVR 46577655, Cortex Park 26N, 5230 Odense M, Denmark. In this policy, "we", "us" and "MinecraftAFK" mean Valoks ApS.

We are the controller of the personal information described in this policy. This means that we decide why and how that information is processed and are responsible for handling it in accordance with data-protection law.

This policy explains what information we process when you visit our website, use MinecraftAFK, buy a subscription or gift, contact us, or interact with a feature that connects to another service.

Information we process and why

Your MinecraftAFK account

You can create an account with an email address and password, or sign in using Discord or Google. Depending on the method you choose, we process:

  • your email address and an identifier specific to your MinecraftAFK account;
  • a password hash, if you use a password;
  • the permanent account identifier and display name supplied by Discord or Google, if you use or connect that service; and
  • your account preferences, subscription status and security-related account events.

We use this information to create and secure your account, recognise you when you return, provide account recovery, manage your subscription, and send important service or security notices.

We do not receive your Discord or Google password. After sign-in, the rest of the MinecraftAFK service identifies you using our own account identifier.

If you connect Discord while you have a subscription, our Discord bot may assign the corresponding subscriber role in our Discord server. Other members of that server can see the role. You can disconnect Discord in your account settings.

If a connected Discord or Google account supplies a profile picture, your browser may load that picture from the provider. The provider will consequently receive the request, including your IP address and browser information. Disconnecting the account replaces the picture with one generated by MinecraftAFK.

Minecraft accounts you add

When you add a Minecraft account through Microsoft, Microsoft and Mojang provide the identifiers and credentials required to authenticate that account and connect it to Minecraft servers. These can include:

  • the Minecraft username, profile identifier, edition and Xbox Live identifier;
  • a Microsoft refresh token and short-lived Minecraft access tokens; and
  • Mojang-issued credentials used for signed chat on supported Minecraft versions.

These credentials allow MinecraftAFK to connect to servers and act as the added Minecraft account. They do not give us access to your Microsoft password, email, contacts, files or payment methods. Microsoft sign-in takes place on Microsoft's website, and we request only the permissions needed for Xbox Live sign-in and continued access while the Minecraft account remains connected.

Authentication credentials are held on the backend and encrypted at rest. You can revoke access by removing the Minecraft account from MinecraftAFK or through your Microsoft account settings.

For an offline-mode Minecraft account, we process only the username you provide.

Server profiles, macros and connections

We process the settings you provide for server profiles, accounts, proxies, movement and macros so that we can operate the service as configured by you.

When an account connects, we process the destination server address, port and version, the account used, connection times and duration, and operational status. For a limited period after a connection problem, we may retain diagnostic details, including the message returned by the server. Macro errors may also be retained so that they can be diagnosed and resolved.

Minecraft chat is streamed to your active dashboard session. We do not maintain a general transcript of server chat. A server message may nevertheless appear in a short-lived diagnostic record when it explains a disconnection, or be sent to a Discord webhook if you configure a rule that does so.

We do not maintain a history of the blocks or entities an account saw, its movement coordinates, or its inventory. This information may be processed temporarily in memory while the account is connected.

How connections reach Minecraft servers

Minecraft connections are routed through addresses supplied by proxy-network operators. The operator carrying a connection can receive or observe:

  • the destination Minecraft server and connection time;
  • the Minecraft username and, on supported versions, the account identifier sent before protocol encryption begins; and
  • the contents of a connection to a server that does not enable Minecraft protocol encryption, potentially including chat.

We do not provide proxy-network operators with your MinecraftAFK email address, billing information, payment details or home IP address. Proxy locations may be outside the EU and are not selected according to your location.

The mix of proxy operators can change. You may contact us to ask which operator has carried your connections. Where the law entitles you to the identity of a recipient, we will provide it.

If you add a custom proxy, we also store the connection details and credentials you supply for it.

IP addresses

Like most online services, our website and backend receive your IP address when your browser or application makes a request. We use it in technical logs to secure, operate and diagnose the service.

If you start in-game verification, we temporarily process the IP address used by your Minecraft client to confirm that the in-game connection belongs to your verification session.

At checkout, your browser may contact an IP-geolocation service to suggest a billing country. The service receives your IP address directly from your browser. You can change the suggested country before continuing.

Billing and payments

When you buy a subscription or gift, we process your name, email address and billing address. We use them to complete the purchase, calculate applicable tax, select an available payment route, issue invoices and meet accounting obligations. We may retain billing details to make future purchases easier, and you can correct them through the service or by contacting us.

Card and wallet payments are handled by Stripe. Cryptocurrency payments are handled by CoinGate. In some countries Stripe may also act as the seller of record, so the name on your statement may differ from ours.

MinecraftAFK does not receive your full card number or cryptocurrency payment credentials. For a saved card, we may receive the card type and last four digits so that we can identify the payment method in your dashboard. We retain references, transaction status and invoice information needed to administer the purchase.

Gifts

If you buy a gift, we process the purchaser's billing information and the recipient email address you provide. We use the recipient address to deliver and administer the gift. The recipient does not need a MinecraftAFK account before receiving it.

Please provide another person's email address only when you have a reasonable basis to do so. A gift recipient can contact us to have an unused gift address removed.

Communications and marketing

We use your contact details to respond to requests and to send messages needed to operate your account, subscription and purchases. We may also send important legal or security notices.

We send marketing email only when you have consented. You can withdraw that consent at any time using the unsubscribe link in the message or your account settings. Withdrawing consent does not affect service and security messages.

Discord webhooks you configure

If you configure a Discord webhook, MinecraftAFK sends the information selected by your rule to the webhook URL. Depending on the rule, this may include server chat, nearby player names, account or server-profile names, or an image captured by the service. Discord processes that information under its own terms and privacy policy.

Anyone with access to the destination Discord channel may be able to see it. You control the webhook destination and rules and can disable or delete them at any time. We do not retain a separate archive of successful webhook content.

Website analytics and technical monitoring

We collect limited information about use of the website, including pages visited, browser and device information, IP address, and selected events such as starting a checkout. We use it to understand how the service is used and to improve it. We do not send our analytics provider your name, email address or MinecraftAFK account identifier.

We also process logs, error reports, traces and performance measurements to operate the service, diagnose faults, prevent abuse and investigate security incidents. These records may contain IP addresses, request information, internal identifiers and technical error details. We do not use them for advertising.

We rely on the following legal grounds:

PurposeLegal ground
Create and operate your account; connect Minecraft accounts; store server profiles, settings and macros; route connections; provide support; and send necessary service messagesPerformance of our contract with you, or steps you ask us to take before entering into a contract
Process purchases and retain information needed to provide subscriptions and giftsPerformance of our contract with the purchaser
Issue invoices and retain legally required accounting recordsCompliance with our legal obligations
Send marketing emailYour consent
Deliver a purchased gift to the recipient address supplied by the purchaserOur legitimate interest in delivering and administering the purchased gift
Keep proportionate connection history and service statisticsPerformance of our contract while you have an account; after closure, only anonymous information that is no longer personal data may be retained for service statistics
Maintain logs, prevent abuse, protect accounts, diagnose faults, improve the service, respond to requests, and establish or defend legal claimsOur legitimate interests in operating a reliable and secure service and protecting our legal rights

Where we rely on legitimate interests, you may object to the processing as described under Your rights. Where we rely on consent, you may withdraw it at any time.

Services that receive information

We do not sell personal information or share it for third-party advertising.

We use service providers to perform specific functions on our behalf. Depending on how you use MinecraftAFK, the following categories may receive information:

Recipient categoryPurposeInformation involved
EU infrastructure and hosting providersHosting the application, databases, backups and operational monitoringInformation stored or processed by MinecraftAFK, subject to access controls and contractual restrictions
Email-delivery and business-email providersSending our messages and receiving messages you send usEmail addresses, message contents and attachments
Cloud storage and content-delivery providersStoring invoices and delivering assets such as server icons and skinsStored files; IP address and request information when an asset is loaded
Proxy-network operatorsCarrying connections to Minecraft serversThe game-connection information described above
Payment providersProcessing card, wallet and cryptocurrency paymentsBilling, order and payment information required by the selected provider
Analytics providersMeasuring website use and selected service eventsIP address, browser information, pages visited and selected event details
Partnered-server access providersWhitelisting eligible users on participating serversInformation required for eligibility and routing, such as email address, Minecraft username and proxy address

Some services receive information directly because you choose to interact with or connect them:

ServiceWhen information is receivedInformation involved
Microsoft and MojangWhen an added Minecraft account signs in or connectsMicrosoft or Xbox authentication and Minecraft profile information
DiscordWhen you sign in with Discord, use subscriber roles, load a Discord profile picture, or configure a webhookDiscord identifier, subscription-role status, request information, and webhook content selected by you
GoogleWhen you sign in with Google, load a Google profile picture, or play an embedded YouTube videoGoogle sign-in or profile information; for YouTube, IP address, browser information and cookies set after you choose to play the video
StripeWhen you select card or wallet paymentBilling, order and payment information
CoinGateWhen you select cryptocurrency paymentEmail address, order and payment information
IP-geolocation serviceWhen the checkout suggests a countryYour IP address and browser request

You may contact us for current information about the providers in a category and, where applicable, the specific recipients of your personal information.

We may disclose information to public authorities or other parties when required by law. Where legally permitted and appropriate, we will inform you of the request.

International transfers

Our primary application systems, databases, backups and monitoring systems are hosted in the European Union.

Some recipients operate outside the EU or European Economic Area, or may process information there. Where personal information is transferred internationally, we use a transfer mechanism recognised by applicable data-protection law, such as an adequacy decision or the European Commission's standard contractual clauses, and apply additional safeguards where required. Contact us if you would like information about the safeguard applicable to a particular transfer or how to obtain a copy.

Proxy-network locations can be in any country in which our providers operate. The information visible to those providers is described under How connections reach Minecraft servers.

How long we keep information

We retain personal information only for as long as it is needed for the purposes described above, including legal, accounting, security and dispute-resolution requirements.

InformationRetention period or criterion
Account, server profiles, settings and added Minecraft accountsWhile the MinecraftAFK account remains open
Billing details, invoices and other accounting recordsFive years from the end of the financial year to which they relate, as required by accounting and tax law
Connection history associated with an open accountWhile needed to provide account statistics; deleted or irreversibly anonymised when the account is closed
Diagnostic details for connection problemsUp to 72 hours
Records of resolved macro problemsUp to 30 days after resolution
In-game verification requests and sessionsUnapproved requests expire after 10 minutes and are deleted within 5 minutes after expiry. Completed sessions are deleted within one hour after ending, or immediately when you end them yourself
Technical logs, traces and performance measurementsUp to 30 days
Record of marketing consent or withdrawalWhile relied upon and for up to two years after withdrawal, to document your choice
Support correspondenceOne year
Staff access logsThree years

When you ask us to delete your account, we delete the account information that is no longer needed. We retain invoices and other records where the law requires us to do so.

After information is deleted from active systems under the periods above, protected copies may remain for up to 30 additional days to support service recovery following an operational incident. These copies expire automatically and are not restored for ordinary use.

If retained connection statistics cannot be rendered genuinely anonymous, they will be deleted when the account is closed unless another lawful retention ground applies.

Cookies and information stored in your browser

We use cookies and browser storage for sign-in, navigation, account-linking, checkout, appearance preferences, limited analytics, and error and performance monitoring.

Necessary storage is used to provide features you request, including keeping you signed in and returning you to the appropriate page after authentication. Blocking the sign-in cookie prevents authenticated parts of the service from working.

Our analytics does not use advertising cookies or follow you across unrelated websites. Analytics identifiers and monitoring-session identifiers are held in session storage and are cleared when you close the tab. We do not provide these systems with your name, email address or MinecraftAFK account identifier.

Embedded YouTube content is not loaded until you choose to play it. If you do, Google receives the browser request and may set its own cookies.

Storage details

StoragePurposeDuration
Sign-in session cookieKeeps you signed inUp to 24 hours
Authentication and account-linking stateReturns you to the correct page and completes a requested sign-in or linking flowUp to 10 minutes, or until used
Checkout statePreserves the result of a checkout or payment-provider returnUntil used or cleared according to the checkout flow
Appearance preferenceRemembers light or dark modeUntil you clear it
Analytics and monitoring session identifiersGroups activity, errors and performance information within one browser sessionUntil you close the tab
YouTube storageSet by Google only after you choose to play an embedded videoDetermined by Google

We do not use advertising cookies.

Your rights

Depending on the circumstances, data-protection law gives you the right to:

  • obtain confirmation that we process your personal information and receive a copy of it;
  • correct inaccurate or incomplete information;
  • have information deleted;
  • restrict how information is processed;
  • receive information you provided in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller;
  • object to processing based on our legitimate interests; and
  • withdraw consent at any time, without affecting processing carried out before withdrawal.

These rights are subject to the conditions and exceptions in applicable law. For example, we may need to retain invoices despite an erasure request. For security, an access or portability response will not include live authentication credentials in a form that could enable another person to take over a Minecraft account.

If you object to direct marketing, we will stop using your information for that purpose. You can also withdraw marketing consent through the unsubscribe link in an email or through account settings.

To exercise a right, contact us at [email protected]. We may need information to verify your identity. We normally respond within one month. If a request is complex or numerous, the law may permit an extension of up to two further months; we will notify you within the first month if that applies.

Children

You must be 18 or older to purchase and hold a MinecraftAFK subscription. A parent or guardian may purchase and hold an account used for a younger player. In that case, MinecraftAFK may still process the younger player's Minecraft username, profile identifier and gameplay connection information as part of providing the service to the account holder.

If you believe that a child has independently created an account or provided personal information contrary to these requirements, contact us so that we can investigate and take appropriate action.

Contact and complaints

For questions about this policy, your personal information, or the exercise of your rights, contact [email protected] or write to:

Valoks ApS
Cortex Park 26N
5230 Odense M
Denmark

You also have the right to complain to a data-protection supervisory authority. You may complain to the authority in the EU or EEA country where you live or work, or where you believe an infringement occurred. Our lead authority is:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
[email protected]
+45 33 19 32 00
datatilsynet.dk

You do not need to contact us before making a complaint, although you are welcome to give us the opportunity to address the issue first.

Changes to this policy

We may update this policy when our service, providers or legal obligations change. The date at the top of the published policy will show when it was last updated.

If a change materially affects how we use personal information or the choices available to you, we will provide an appropriate notice before the change takes effect. Where a new use requires consent, we will ask for it. Continued use of the service is not treated as consent to processing that legally requires consent.