Privacy Policy

1. Scope and contact

This policy explains how Coastal Client handles information on coastalmc.org, in the Windows client, and in the account and purchase services used by the client.

“Coastal,” “we” and “our” refer to the team operating Coastal Client. The Minecraft network portal and server store are separate parts of the Coastal service. For a privacy request, use player support or contact staff through Coastal Discord. Identify the request as “Client privacy.” Do not send passwords, card numbers, authentication tokens or private keys.

2. Information we handle

• Website requests: hosting and security services can receive IP addresses, browser and device information, requested URLs, timestamps, response codes and usage measurements.
• Accounts: Discord sign-in provides an account identifier, display name and avatar. A linked Minecraft account can provide its username and verification status. We do not receive your Discord or Microsoft password through these sign-in flows.
• Purchases: our systems store product identifiers, order and payment references, purchase status, ownership and subscription status. Stripe processes payment and billing details; Coastal does not store complete payment-card numbers.
• Local client data: profiles, keybinds, HUD layouts, preferences, cosmetic cache and diagnostic logs are stored on your computer. Diagnostic reports remain local unless you choose to share them.
• Support: we receive messages, attachments and account or transaction details you choose to provide when requesting help.

3. Why information is used

We use information to authenticate accounts, verify Minecraft links, provide purchased content, manage subscription access, prevent fraud and abuse, deliver updates, diagnose failures and answer support requests. Website usage information helps maintain and improve the site. We do not treat a checkout redirect as proof of payment; ownership is verified by the backend.

4. Cookies, browser storage and advertising

Secure session and sign-in-state cookies support account access and protect authentication. They are separate from your locally saved client profiles. Clearing cookies signs you out of website account services; clearing local application data may remove preferences and cached content.

The website includes Google AdSense code under publisher ID pub-9052672002847551 for verification and advertising services. Google and its partners may process device information, IP addresses, cookies or similar identifiers for ad delivery, measurement and fraud prevention, subject to provider settings and applicable consent requirements. Approval and the availability of ads are controlled by Google.

Learn how Google uses information at Google partner-site privacy, review Google ad preferences, and use your browser’s cookie controls. Cloudflare provides hosting, security and website usage services. Essential account cookies are needed when you sign in. This policy does not itself grant consent to personalized advertising.

5. Service providers and disclosures

Relevant providers include Cloudflare for hosting and security, Discord for sign-in, Stripe for payments, and Google for advertising services. Each provider handles information under its own policies. Information may also be disclosed where necessary to comply with a legal obligation, respond to a valid request, investigate fraud or protect users and the service. We do not publish account records, session secrets or payment credentials as part of the cape gallery.

6. Retention and security

We retain account and purchase records for the purposes described above, including access to owned content, accounting, disputes and legal obligations. Support and operational records may be retained while needed to resolve issues and protect the service. Local data remains on your device until changed, cleared or removed by you or the client’s cleanup process.

Controls include encrypted transport, protected session cookies, hashed server session tokens, server-side purchase verification and restricted paid-content delivery. These measures reduce risk; they do not guarantee that any online service or desktop software is immune from compromise.

7. Your requests and choices

You can sign out, manage or cancel an available membership through the client’s billing controls, change local settings and clear browser cookies. You may contact support to request access, correction or deletion of account information. We may ask for proportionate proof that the account belongs to you. Some purchase, fraud-prevention or legal records may need to be retained after an account request. Additional privacy rights may apply where you live.

Deleting an account or local files does not automatically cancel a recurring payment. Cancel the membership through billing controls or contact support about cancellation separately.

8. Children and international processing

Coastal account and purchase services are not intended for children under 13. A minor must have permission from a parent or guardian to purchase. If you believe a child under 13 has provided personal information, contact support so we can investigate and take appropriate action. We do not claim that an age statement replaces any parental-consent duties that may apply.

Providers may process information in countries other than your own. Applicable rights and protections can vary by location. This policy may change as the service changes; the effective date identifies the version published here.