Privacy
Short version: if you are only reading the wiki or the blog, this website stores nothing about you and sets no cookies at all.
Cookies
There is exactly one cookie on this site, and it is only set when you actually need it.
| Cookie | What it does | Lifetime |
|---|---|---|
everbloom |
Session cookie. Keeps your basket and, if you are logged in, your session. Set only on the basket, checkout, account and admin pages — and on any page you visit while you already have one. | Until you close the browser |
That is the whole list. No analytics, no advertising, no third-party scripts, no embedded fonts, no tracking pixels. The page you are reading loads nothing from any other domain, and there is nothing to consent to — which is why there is no consent banner in your way.
Your light/dark theme choice is kept in localStorage in your own browser.
It never leaves your machine and is not sent to the server.
If you never create an account
Then this site stores nothing about you beyond ordinary web server logs — the same request records any web server keeps in order to run and to spot abuse. They contain your IP address, the page requested, the time, and your browser's user agent string.
Legal basis: legitimate interest in operating and securing the service (GDPR article 6(1)(f)). Retention: 14 days, then deleted.
If you create an account
We store:
- Username — your name on this website.
- Email address — so your account can be identified if you lose access. Nothing is sent to it otherwise.
- Password hash — bcrypt. We never store, and cannot read, your actual password.
- Timestamps — when the account was created and last logged in.
Legal basis: performance of a contract with you (GDPR article 6(1)(b)). Retention: for as long as the account exists.
If you link a Minecraft account
We then also store your Minecraft username and UUID. Both come from
the game server when you run /link in-game — you never type them
into this website, which is exactly what stops anyone from claiming to be you.
The one-time link code is deleted within 24 hours of being used or expiring.
If you place an order
We store the order: what it contained, the price, when it was placed, which account placed it, and which Minecraft account it was delivered to. We also store the delivery job and its outcome.
No payment data of any kind is stored, because none is collected. The checkout is a stub and is not connected to a payment provider. Should that change, this page will change with it, before the first real payment — not after.
Legal basis: performance of a contract (GDPR article 6(1)(b)). Retention: orders are kept as a delivery record; deleting an account does not delete its past orders.
Who else sees it
Nobody. There are no analytics providers, no advertising networks, no CDNs and no embedded third-party content on this site. Data is passed to the Minecraft server only to deliver what you bought — your Minecraft username, and the command that grants the item.
Nothing is transferred outside the EEA.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to processing, or ask for it in a portable format. Ask a staff member and it will be dealt with.
You can also complain to your national data protection authority. In Norway that is Datatilsynet.
Changes
If this page changes in a way that matters, it will be said out loud on the blog rather than quietly edited here.