Privacy

What this covers

This policy explains what nlo.gg collects, why, and how to reach us. The operator is Brock Knechtel in Colorado, United States. Contact: Discord from nlo.gg.

What we collect

• Account: email, display name, password hash (never the raw password), and Google or X profile identifiers if you use those buttons.
• Minecraft identity: the in-game name and UUID you claim, skins we fetch from public skin services, and whether the live box has seen you.
• Desk and shop: coin balance, grant status, bounty posts, watchlist names, and paid-pack receipts (pack, amount, time). Card data stays with Stripe.
• World telemetry we store for the roster: last seen, online flag, and similar ledger facts the live server reports.
• Technical: IP address, user agent, and basic request logs needed to run the site, fight abuse, and talk to Stripe / auth providers.

What we do not collect on purpose

We do not ask for government ID, date of birth, or a home address to create an account. Prize winners may be asked for enough information to deliver a gift card or comply with tax rules.

We do not sell personal information.

Why we use it

• Run the desk, deliver coins in-game, and show the roster.
• Process payments through Stripe and prevent fraud or double-spend.
• Enforce rules, bans, and bounty integrity.
• Run Season One scoring and contact winners.
• Keep the site working and secure.

Who we share with

• Stripe, for checkout and receipts.
• Google or X, only if you choose that sign-in.
• Hosting and the live Minecraft box, so grants and roster facts can move.
• Public pages: claimed names, skins, open bounties, and season boards are visible to anyone on nlo.gg.
• Law enforcement if we are legally required to.

How long we keep it

Account, desk, and receipt records stay while the account is open and for a reasonable period after, so we can handle chargebacks and bans. We can delete or anonymize earlier on request unless we must keep a record.

Children

nlo.gg is not directed at children under 13. Do not create an account if you are under 13. If a parent believes we have a child’s data, message us on Discord and we will delete it.

Your choices

You can update your claimed name, password, and watchlist from the desk. You can ask us on Discord to close an account or export what we have on it.

If you are in a place with GDPR-style rights, you can ask for access, correction, deletion, or a copy of your data. We will respond in a reasonable time.

Security

Passwords are hashed. Cards go through Stripe. No method is perfect. Tell us on Discord if you think a desk was taken over.

Changes

The date at the top is the current policy. Material changes will be posted here.