Privacy Policy

We use Firebase for account authentication and management.

• Firebase may process basic account-related information such as email addresses or user IDs as required for authentication and security.
• Beyond what is needed for your account, we only process the data described in this policy.

Under the GDPR we rely on the following legal bases:

• Performance of a contract: creating and running your account, providing the tunnel, Premium subscriptions, the referral program and, if you turn them on, Google Drive backups.
• Consent: analytics and personalized advertising in the app, and analytics cookies on our website. You can withdraw consent at any time; this does not affect processing that happened before.
• Legitimate interests: crash reporting, keeping the Service and our infrastructure secure, and preventing fraud and abuse, including abuse of the referral program. You may object to this processing.
• Legal obligation: keeping invoices and payment records as required by Dutch tax law.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We offer an optional monthly and yearly premium subscription. For subscription users, we store only the information required for:

• Payment processing
• Invoice generation
• Legal and accounting obligations

We do not store full payment card details. Payments are handled by Google Play (for purchases in the app) or Stripe (for purchases on our website), which process your payment data under their own privacy policies.

If you take part in the referral program, we store the data needed to run it:

• Your personal referral code, and any creator code we assign to you.
• The code you redeemed, the account that owns it, and the date you redeemed it.
• For each referral: its status (pending, qualified or reversed), the date it qualified, whether the qualifying purchase was made through Google Play or our web checkout, the purchase reference we use to detect refunds, and how each reward was delivered.
• Your referral count, any Premium time granted, any days stored for later delivery, and whether and when lifetime Premium was granted.

If you install through a referral link (anvil-mc.com/r/…), Google Play passes the code to the app on first launch through the Play Install Referrer API. We use it only to apply the referral code to your account.

Referrers never see who used their code. The app shows a referrer only the number of referrals and the status and dates of each one; the other account's name, email or any other identifier is not shared in either direction.

Referral records are kept for as long as they are needed to deliver rewards, detect refunds within the 30-day reversal window and keep your Premium entitlement correct, and are otherwise handled as described under Data Retention.

The app can back up your Minecraft servers to your own Google Drive. This is optional and only happens after you connect Google Drive and allow access.

• Access is limited to the Google Drive "drive.file" permission: the app can only see and manage the backup files it created itself, in a folder named "ANVIL-MC Backups". It cannot see any other file in your Google Drive.
• A backup contains your server's world, settings and add-on data. Depending on your server, this can include the Minecraft usernames and UUIDs of players who joined it, its operator, whitelist and ban lists, and IP addresses that were banned on it. Mod and plugin files themselves are not stored; the backup lists them so they can be downloaded again from Modrinth when restoring.
• Backups go directly from your device to your Google Drive and back. They never pass through our servers, and we cannot see them.
• You choose when backups are made (by hand, when the server stops, or on a schedule) and how many automatic backups are kept. You can rename, restore or delete them in the app, or delete them in Google Drive at any time.
• You can remove the app's access at any time in your Google Account under Security, Third-party apps with account access.

Anvil-MC's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This data is used only to provide the backup feature: it is not used for advertising, not sold, and not shared with anyone else.

We keep user data only for as long as it is necessary to operate the app or meet legal requirements. Account data is kept until you delete your account. Invoices and payment records are kept for 7 years, as required by Dutch tax law.

You may request account deletion, after which your account data will be removed unless retention is required by law (for example, invoices). See our account deletion page for details.

Backups in your Google Drive are stored in your own account, not by us. Deleting your Anvil-MC account does not remove them; delete them in the app or in Google Drive.

The Service is rated PEGI 3 and is suitable for all ages, but is not specifically directed at children under 13. We do not ask for or verify your age.

In the European Union, only people who have reached the age of digital consent in their country (16 in the Netherlands, between 13 and 16 elsewhere) can consent to analytics and personalized advertising themselves. If you are younger, ask a parent or guardian before accepting, or decline: the app works the same, and you will only see non-personalized ads.

If you are a parent or guardian and believe your child under 13 has provided personal data through the Service, please contact us via anvil-mc.com/contact and we will delete the data promptly.