Privacy Policy
Effective August 6, 2026
1. Information collected
When you create an account or place an order, Donut Wave may collect your account username, email address, Minecraft username, selected products, order references, payment status and delivery status. Basic technical information such as IP address, browser details and security logs may also be processed.
2. How information is used
Information is used to create and secure accounts, process orders, verify payment, deliver digital items, provide support, prevent fraud, maintain the service and comply with legal obligations.
3. Social sign-in
If you use Google to sign in, Donut Wave receives your Google account identifier and verified email address so an account can be created or linked. Your Google password is never provided to Donut Wave.
4. Payment providers
Payments are handled by the payment provider selected at checkout, such as Stripe or PayPal. Donut Wave does not store full payment-card numbers or payment-provider passwords.
5. Cookies
A secure session cookie is used to keep signed-in users authenticated. The cart and Minecraft username may also be stored locally in the browser. You can remove local browser data through your browser settings, although doing so may sign you out or clear your cart.
6. Sharing
Data is shared only where needed with payment, hosting, security and fulfilment providers, or where disclosure is required by law. Personal information is not sold.
7. Retention
Account, order and delivery records are kept only for as long as reasonably needed for service operation, support, fraud prevention, accounting and legal obligations. Records may then be deleted or anonymised.
8. Security
Passwords are stored using one-way salted hashing, and authentication cookies are configured to be inaccessible to client-side scripts. No system is completely secure, so users should choose a unique password and report suspected account misuse promptly.
9. Your choices and rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction or a copy of your personal information. Requests may require identity verification and may be limited where records must be retained by law.
10. Contact and changes
Privacy questions should be sent through the official Donut Wave support channel. Material changes will be posted on this page with an updated effective date.