Privacy Policy
This policy explains what data Scarlet Proxy ("we", "the service") collects, why we collect it, how long we keep it, and the rights you have. We keep this deliberately short and honest.
1. Data we collect
- Account data: your username, email address, a securely hashed password (we never store your password in plain text), and a permanent account ID that identifies your account in support requests.
- Usage data: your enabled features, instance settings, the Minecraft accounts you link, and total playtime.
- Strike records: the date and reason of any strike on your account (see section 4).
- Network data: your IP address when you connect through the proxy, and an approximate location (country and state/region level only) that we derive from that IP address offline. We do not determine your street address or precise coordinates.
2. Why we use it
We process this data to operate the service (run your accounts and instances) and, on the basis of our legitimate interest, to keep the service secure and prevent abuse. In particular, we use it to detect when a single account or premium key is being shared across multiple people in different locations.
3. IP address and location in detail
When you connect, we record your IP address and its approximate state/region. The location is looked up offline on our own server using the DB-IP database; your IP is not sent to any lookup service. If your account is later used from a different region than before, our system raises an internal alert so we can review possible account sharing. Your IP history is stored on our own server and is not publicly accessible.
We do not sell, rent, or trade your IP address or any other personal data to anyone, for any purpose.
Automatic login notifications contain only account names, not your IP address. When one of our administrators reviews a possible sharing case, your IP history is shown to that administrator through our private admin bot on Discord. It is displayed only to the administrator who requested it, is not posted in any channel, and is not kept anywhere outside our own server.
4. Strikes and suspension
To protect the service from account and key sharing, your account can receive a strike when it is used from a new region that suggests it is being shared. At most one strike is given per 24 hours, so travelling does not suspend you at once. You can see your strikes on your profile page.
At 3 strikes your account is suspended: you can no longer start instances, add or remove Minecraft accounts, or redeem keys. You can still delete your account at any time. A suspension is not a final decision. Contact us with your account ID (shown in your profile and in the strike window) and we will review your case by hand. Strikes that turn out to be wrong are removed.
5. How long we keep it
We keep your IP and location history and your strike records for as long as your account exists, because they are needed for the anti-abuse purpose above. When you delete your account, all of your stored IP addresses, location data and strike records are permanently deleted along with it. You can also ask us to delete your data at any time (see below).
6. Sharing with third parties
We do not sell or share your personal data. The only third-party services involved in running Scarlet Proxy are our email provider (to send you account emails), our payment providers (see section 7), and Discord, which we use for internal notifications about logins (account names only), for a private purchase log (see section 7) and for our private admin bot described in section 3. These act only as processors for us.
7. Purchases
Keys are sold through SellAuth, which runs the checkout. Payments are handled by PayPal or the selected cryptocurrency. We never see your card or PayPal login details. You buy while signed in, and we pass the email address of your Scarlet Proxy account to SellAuth so the key can be sent to you. The key is also saved in your profile. For each purchase we also receive the Discord username if you provide one and the plan you bought. These details and the key are posted to a private Discord channel that only our administrators can see, so we can help you if something goes wrong.
Your key goes to the email of your account. Make sure it is correct. If you buy directly in our SellAuth store instead, the key is sent to exactly the address you enter there; if it contains a typo, the email cannot reach you and you may not receive your key. In that case, contact us with your invoice ID and we will help, but we cannot guarantee delivery to a wrong address.
8. Your rights
You have the right to access, correct, or delete your personal data, and to object to processing. The quickest way to erase everything is to delete your account from your profile page. For any other request, email us and we will respond.
9. Cookies
We use a single strictly necessary session cookie to keep you logged in. We do not use any advertising, analytics, or tracking cookies, so no cookie-consent banner is required for them.
10. Contact
Questions or data requests: scarlet@scarletproxy.net
IP Geolocation by DB-IP, licensed under CC BY 4.0.