1. What we collect
- Account details: your name, email address and a password (stored only as a one-way hash, never in readable form).
- Sign-in with Google or Discord: if you choose it, we receive your name, email and profile picture from that service. We never see your password there.
- Creator profile: if you open a store, the store name, handle, bio, city, avatar and banner you provide, and any about text, links, support contact and languages you add. These are public.
- Orders: what you buy, the amount and when. For paid orders you also enter billing details (name, mobile number, address, PIN or postal code and, if you want a business invoice, a GSTIN). We keep them with the order for receipts and tax records, check your PIN code against India Post's public directory (only the PIN is sent), and pass your name and mobile number to our payment provider so it can process the payment. We never see or store your card, UPI PIN or bank login details.
- Payout details (creators): the UPI ID or bank account you add to be paid. They are stored encrypted and only the person who pays you can see them when processing a withdrawal.
- Server listings and votes: the servers you list are public, including their address and the status we measure. When you vote, we store your account and a one-way fingerprint of your internet address (never the address itself) to allow one vote per day. If the server uses Votifier rewards, we also send that server your Minecraft username, the vote time and your internet address; the address is kept only until it has been sent (or the attempts run out), then erased.
- Reviews: if you review something you bought, your review, star rating and account name are public, with a “Verified buyer” tag. The creator may reply publicly.
- Newsletter: if you join, your email address and whether you confirmed or unsubscribed. We only send updates after you confirm, and every email has an unsubscribe link.
- What you upload: product details, images and files, and the descriptions and changelogs you write.
- Technical data: IP address, browser and device type, and the time of your sessions, kept to keep your account secure and to find and fix problems.
- Messages: emails we send you (verification, password reset, review decisions) and what you send to us for support.
2. Why we use it
- To create and secure your account and sign you in.
- To run the marketplace: show products and stores, review submissions and deliver files.
- To send emails you need to receive about your account and your products.
- To prevent fraud, abuse and security problems, and to meet legal duties.
We use your data on the basis of your consent and to provide the service you asked for. We do not sell your personal data and we do not use it for advertising.
3. Who we share it with
Only as needed to run the site, with these kinds of providers acting on our instructions:
- Hosting and infrastructure providers that run our servers and network.
- An email delivery provider that sends our emails.
- Sign-in providers (Google, Discord) if you use them.
- Cloudflare Turnstile, which checks that a vote comes from a person and not a bot. It sees your internet address and browser signals while the check runs.
- Payment providers, once purchases are available. They handle your payment details; we do not store card numbers.
- Authorities or courts when the law requires it.
Your public store information is visible to anyone. Your email address is never shown publicly. Our servers and providers may be located outside India.
4. Cookies and similar storage
We use only essential cookies: a secure session cookie that keeps you signed in, and short-lived cookies for sign-in and security. Your cart is stored in your browser’s local storage. We do not currently use advertising or analytics cookies. If that changes, we will update this page and ask for consent where required.
5. How long we keep it
We keep account data while your account is open. When you ask us to delete your account we remove or anonymise your personal data, except what we must keep for law, tax or dispute reasons (for example records of orders and invoices), and backups that are overwritten on a schedule.
6. Security
Passwords are hashed, connections use HTTPS, product files are stored privately and only served to people allowed to download them, and uploads are checked before they are accepted. No system is perfectly secure, so please use a strong, unique password.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy,
- correct or update it (you can edit your name in Account settings),
- erase your data and close your account,
- withdraw consent you gave us, and
- nominate someone to exercise these rights for you if you cannot.
Email us at the address below. We will reply within a reasonable time. If you are unhappy with our answer you can complain to the Data Protection Board of India.
8. Children
The site is meant for adults. If you are under 18, please use it only with a parent or guardian’s consent. We do not knowingly collect data from children without that consent. If you think a child has given us data without it, contact us and we will delete it.
9. Changes
We may update this policy. The date at the top shows the latest version, and we will tell you about significant changes.
10. Contact and grievances
For questions, requests or complaints about your data:
- General help and your account: support@builtbybharat.com
- Billing, payments and refunds: billing@builtbybharat.com
- Server listings, votes and boosts: mcserver@builtbybharat.com
- Operated by: builtbybharat