Privacy Policy
Last updated: 6 November 2026 · Operated by Astrofox Studios Ltd
1. Introduction
Astrofox Studios ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you play on the Solaris Minecraft servers, visit this website (playsolaris.net), buy from the store or use an Astrofox Account with Solaris, how we use and share it, and your rights under the UK GDPR, the Data Protection Act 2018 and, where relevant, the EU GDPR.
Legal Entity
The data controller is Astrofox Studios Ltd (Company No. 16129887), registered at Suite Ra01, 195-197 Wood Street, London, England, E17 3NU. Our registration with the Information Commissioner's Office (ICO) is in progress. Astrofox Accounts and our hosting (Callisto) are run by Astrofox Studios Ltd too.
2. Data Collection
When you play on Solaris (the Minecraft servers)
- Minecraft identity: your Minecraft UUID, username and previous usernames, and your skin as provided by Mojang.
- Connection data: your IP address and the time of each login, and whether it is your first join. We check IP addresses with ip-api.com to see whether a connection comes from a VPN, proxy or hosting provider, and store the result with the approximate country and internet provider.
- Chat and commands: public chat, private messages and commands pass through our chat filter, and are recorded in server logs. Messages blocked or changed by the filter are logged.
- Moderation records: warnings, mutes, kicks and bans, with the reason, the staff member, the server, the time and the IP address at the time; and a staff audit log of moderation actions.
- Gameplay data: stats, match results, ranks, levels, playtime and login streaks, Stars balance, items, inventories, cosmetics, pins, housing, marketplace listings and trades, friends, in-game mail and your settings.
When you use an Astrofox Account
- Account details: email address, a hashed password (never the password itself), your username and username history, your role, and when you signed up and verified your email.
- Social login: if you sign in with Microsoft, Google, Discord or GitHub, we receive your account ID at that provider, the email address it gives us and whether the provider has verified it. We don't receive your password for those services.
- Linked Minecraft account: the Minecraft UUID and username you link or verify.
- Security: active sessions with the IP address and browser (user agent) used, two-factor authentication settings, one-time email codes and backup codes (stored hashed).
When you buy from the store
- Order details: your Astrofox Account ID and email, the Minecraft username and UUID you deliver to (and any extra usernames for gifted Early Access), the items, prices, currency and exchange rate, any coupon, creator code or promotion, order status and dates.
- Payment references: our billing system (Paymenter, which we run at billing.playsolaris.net) holds a customer record with your username and email, and the order and invoice. Payments are processed by Stripe; we receive a payment reference and its status, never your full card or PayPal details.
- Checkout consent: when you tick the box agreeing to immediate delivery and our Terms, we record the time, the version of the Terms and your IP address, so we can show the consent was given.
- Fundraiser purchases: for the Trans Pack we also record the share of the price that goes to the fundraiser, so we can report the total. Your personal details are not shared with the fundraiser beneficiary.
- Refunds and disputes: if a payment is refunded or disputed, we record that and what was removed from the account.
When you visit the website
- Visit logs: your IP address, the page you visited and when, the referring page, your device type (desktop, mobile or tablet), and your approximate country and city derived from your IP using ip-api.com.
- Astrofox Analytics: our own cookieless analytics records page views and events (such as outbound clicks, button clicks, form submissions and scroll depth) with a random session ID kept in your browser for up to 30 minutes of inactivity, your browser, operating system, device type and country. Your IP address and browser are used only to make a daily-rotating, one-way visitor hash; we don't store them with analytics events. If you are signed in, events may be linked to your account. Analytics is switched off if you choose "Opt Out" in our cookie notice, or your browser sends Do Not Track or Global Privacy Control.
- Early Access signups: your email address, selected interests, signup time, and your IP address and approximate location unless you opted out.
- Applications (staff and tester): the details you choose to give, such as your Discord username, age and experience.
- Support: if you contact us by email or Discord ticket, the messages and ticket history.
3. Use of Data
We use your data for these purposes:
| Purpose | Lawful basis |
|---|---|
| Running Solaris: letting you join, saving your progress, items and settings, matchmaking | Performance of a contract |
| Your Astrofox Account and sign-in, including social login | Performance of a contract |
| Processing store orders, delivering purchases in-game, sending receipts and order emails | Performance of a contract |
| Keeping order, payment and consent records for accounting, tax and consumer law | Legal obligation |
| Moderation, the chat filter, VPN/proxy checks, ban enforcement, security and fraud prevention, handling chargebacks | Legitimate interests (keeping Solaris safe and fair, and protecting our business) |
| Visit logs and analytics, to understand how many people use the site and improve it | Legitimate interests |
| Early Access signups and announcements; applications | Consent (you submit the form; you can withdraw at any time) |
| Showing fundraiser totals and purchase announcements (your Minecraft username may appear in-game or on Discord when you buy) | Legitimate interests |
We do not sell your personal data and we do not use it for advertising.
4. Data Sharing
- Stripe processes payments (card, PayPal and other methods) and may use payment data for fraud prevention as its own controller. See stripe.com/privacy.
- Discord: our staff are notified of store sales, Early Access signups, moderation actions and admin logins through private Discord channels. These notifications include your Minecraft username and a masked email address (for example j***@example.com), and for signups your approximate location and IP address unless you opted out. If you use our Discord server, Discord's own privacy policy applies to what you post there.
- Mojang / Microsoft: we look up Minecraft usernames and UUIDs through Mojang's public API, and Minecraft sign-in is handled by Microsoft.
- Social login providers (Microsoft, Google, Discord, GitHub) when you choose to sign in with them.
- ip-api.com receives IP addresses to look up approximate location and VPN/proxy status. See ip-api.com/docs/legal.
- Cloudflare Turnstile on sign-up forms, to block bots.
- Email: account and receipt emails are sent from our own mail server. We don't use a third-party email provider.
- Content providers: pages load fonts and icons from Google Fonts, cdnjs and jsDelivr, and player heads from mc-heads.net and minotar.net. These providers receive your IP address when your browser loads them.
- Legal requirements: we may disclose information if required by law or a court order, to the police, or to protect our rights, our players or the public, including in response to payment disputes.
- International transfers: some providers above (such as Stripe, Discord, Google, Microsoft and Cloudflare) process data outside the UK. Where they do, we rely on UK adequacy regulations or the appropriate safeguards (such as the UK International Data Transfer Addendum).
- Where our servers are: our own servers (the Minecraft servers, this website, the store, Astrofox Accounts and our mail server) are located in Germany, in the EU. Transfers from the UK to the EEA are covered by the UK's adequacy regulations for the EEA.
5. Cookies and Tracking
We don't use advertising or cross-site tracking cookies. We use:
| Name | Type | Purpose |
|---|---|---|
session | Cookie (strictly necessary) | Keeps you signed in (for up to 31 days, or until you sign out) and keeps checkout working. |
| Stripe cookies | Cookie (strictly necessary) | Set by Stripe on the checkout page to process payments and prevent fraud. |
| Cloudflare Turnstile | Strictly necessary | Bot protection on sign-up forms. |
solaris-theme, solaris-cookies | Local storage | Remembers your light/dark theme and your choice on the cookie notice. |
| Cart and currency | Local storage | Remembers your store cart and chosen currency. |
af_sid, af_sid_ts | Session storage | Astrofox Analytics session ID, cleared after 30 minutes of inactivity. Not set if you opt out. |
You can opt out of analytics with the "Opt Out" button on our cookie notice, and clear cookies and storage at any time in your browser settings. Blocking strictly necessary cookies will stop sign-in and checkout from working.
6. Data Security
We use technical and organisational measures to protect your data, including hashed passwords, two-factor authentication for accounts and staff, encrypted connections, and access only for staff who need it. However, no system is 100% secure. You are responsible for keeping your account credentials confidential.
7. Data Retention
We keep personal data for no longer than we need it for the purposes above. These are our retention periods:
| Data | How long we keep it |
|---|---|
| Login, IP address and connection records (game logins, VPN/proxy checks, account sessions, website visit logs) | 12 months |
| Chat logs | 6 months |
| Moderation and punishment records | For as long as the punishment is active, plus 12 months |
| Analytics events | 12 months |
| Order, payment, invoice and checkout consent records | 6 years (UK tax law) |
| Astrofox Account and game data (profile, progress, items, settings) | Until you delete your account, then 30 days |
| Early Access signups | Until you ask us to delete them or the service closes |
| Staff and tester applications | Up to 6 months after a decision is made |
We may keep data for longer where the law requires it, or where we need it to establish, exercise or defend a legal claim (for example, a payment dispute).
8. User Rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion of your data (subject to legal obligations, such as keeping order records);
- restrict or object to processing, including processing based on legitimate interests;
- request portability of your data;
- withdraw consent where we rely on it;
- complain to the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort it out first.
To exercise your rights, email help@playsolaris.net or open a ticket in our Discord server. We may ask you to prove the account is yours (for example by signing in, or joining Solaris with the Minecraft account). We will reply within one month.
9. Children
Many Minecraft players are young. If you are under 13, a parent or guardian must agree before you create an Astrofox Account or give us your details. If you are a parent and think your child has given us personal data without your permission, contact us and we will delete it.
10. Changes to the Privacy Policy
We may update this policy as Solaris evolves. Significant changes will be announced on our website or in our Discord server, and the "last updated" date at the top will change.
11. Contact Information
If you have questions or concerns about this policy, please open a ticket in our Discord server or email us at help@playsolaris.net.
