Privacy Policy

Effective 27 September 2026

Chulacraft is a community Minecraft Java Edition server for Chulalongkorn University students and staff. This policy explains what we collect through this website, why, and your choices. We follow Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1 What we collect

DataSourceWhy
Discord user ID and usernameDiscord sign-inYour login and identifying you in the community
Chula Google email and Google account ID"Verify with Chula Google"Confirming you are a Chula member, and making sure one Chula account verifies only one player
Personal Google email and account ID (optional)"Add personal Google"Letting you sign in with that account
Minecraft UUID and usernameYou enter it; we confirm it with Mojang's public APIAdding you to the server whitelist
Account change history (what changed, when, by you or an admin)This websiteSecurity, abuse prevention and resolving disputes
Registration attempt countsThis websiteRate limiting
Anonymous page-view statisticsVercel Analytics (no cookies, no cross-site tracking)Understanding how the site is used

From Google and Discord we receive only your basic profile and email address. We never read your Google Drive, Gmail, contacts or Discord messages, and we never see your passwords.

2 How we use it

Only to run Chulacraft: signing you in, verifying Chula membership, managing the whitelist, moderating the server and keeping the service secure. We do not sell or rent your data or use it for advertising.

3 Google user data

Chulacraft's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only for sign-in and Chula verification and is shared with no one except the service providers listed below.

4 Who can see it

  • Server admins see your Discord username, Chula email, linked Google email, Minecraft accounts and change history, to moderate the server.
  • Other players see your Minecraft username in game, as on any Minecraft server.
  • Service providers that run the service for us: Supabase (database and login), Vercel (hosting and analytics), Discord and Google (sign-in), and Mojang/Microsoft (username lookup).
  • We disclose data when the law requires it.

5 How long we keep it

While your account exists. Your Chula verification record stays even if you unlink that Google account, so one Chula account cannot verify several players; an admin can reset it on request. After your account is deleted, change history is kept for up to 12 months for security, then deleted.

6 Your rights

Under the PDPA you can ask to access, correct, export or delete your data, or withdraw your consent. You can unlink your personal Google account from Settings at any time. For anything else, contact an admin (see below). Deleting your account also removes you from the whitelist.

7 Security

Your data is stored in Supabase with row-level security: players can read only their own records, and every change goes through checked server functions. No system is perfectly secure; if a breach affects you, we will tell you as the PDPA requires.

8 Minors

If you are under 20, you confirm that a parent or guardian agrees to your use of Chulacraft.

9 Changes

We will post changes on this page and update the effective date. Significant changes are announced on our Discord.

10 Contact

Message the Chulacraft admins on our Discord server. See also the Terms of Service.

Chulacraft is a student community project, not an official service of Chulalongkorn University, Mojang, Microsoft, Discord or Google.