Privacy policy

CapeDrop ("CapeDrop," "we," "us," or "our") operates capedrop.net (the "Site"), through which we sell redeemable Minecraft cape codes. This policy applies to any personal information collected through the Site or in the course of fulfilling an order, and sets out what we collect, why we collect it, who we share it with, and the choices available to you. By using the Site or purchasing from us, you agree to the practices described here. If you do not agree, please refrain from using the Site.

We are CapeDrop, and we act as the data controller for the personal information described below. Questions regarding this policy may be directed to support@capedrop.net.

We aim to collect only what is necessary to fulfil an order, provide support, and keep the Site secure.

2.1 Information you provide to us

a) Order information. When you place an order, we collect the email address to which your cape code will be delivered, the item(s) purchased, and, where applicable, your order or ticket reference.

b) Payment information. Payment is processed entirely through our third-party payment processor(s) (currently Stripe). We do not receive, view, or store your full card number at any point; we retain only transactional metadata such as payment status, amount, and currency.

c) Support communications. If you contact us through our support channels, email, or any other means, we retain the content of that exchange, including any screenshots or attachments you choose to provide, for as long as reasonably necessary to resolve the matter and maintain an accurate record.

2.2 Information collected automatically

a) Server and security logs. As with substantially all websites, our infrastructure automatically logs IP addresses, browser type, request timestamps, and similar technical data, which we use to operate the Site, apply rate limiting, and detect abusive or fraudulent behaviour.

2.3 Information from third parties

a) Payment confirmation. Our payment processor provides us with confirmation of successful or failed transactions and limited transactional metadata (for example, the last four digits of a card and payment status). We do not receive full card details.

a) We do not sell or rent your personal information to any third party.

b) We do not run third-party advertising trackers on the Site.

c) We do not send unsolicited marketing communications. Emails and Discord messages from us relating to your order are limited to what is necessary to confirm, deliver, and support that order, unless you separately and affirmatively opt in to receive promotional updates.

d) We do not store full payment card details on our systems at any point.

We process personal information on the following bases:

a) Performance of a contract: to process your order, confirm payment, and deliver your cape code.

b) Legal obligation: to maintain financial and transaction records for accounting and tax purposes.

c) Legitimate interests: to secure the Site, prevent fraud and abuse, investigate suspected policy violations, and respond to support requests, balanced at all times against your rights and interests.

d) Consent: where you have separately opted in to receive marketing or promotional communications, which you may withdraw at any time.

We share personal information only with the service providers reasonably necessary to operate our business, and only to the extent each provider requires:

a) Payment processor(s) (e.g. Stripe), for the purpose of processing payments and, where applicable, calculating tax.

b) Hosting, email, and infrastructure providers necessary to operate the Site and deliver order-related communications.

c) Customer support platforms necessary to manage and respond to support requests.

We may also disclose personal information where required to comply with applicable law, a valid legal process, or a governmental request; to enforce our Terms of Service or this policy; or to protect the rights, property, or safety of CapeDrop, our customers, or the public. Should CapeDrop undergo a merger, acquisition, or sale of assets, order and account records may be transferred as part of that transaction, subject to this policy or its successor.

The Site uses only the cookies and local storage strictly necessary for it to function, such as maintaining your cart contents and supporting checkout and fraud-prevention measures required by our payment processor. We do not deploy our own analytics or advertising cookies. Should this change, we will update this policy accordingly. You may clear cookies and local storage through your browser settings at any time; doing so may affect functionality such as your cart contents.

a) Order and transaction records are retained for as long as necessary to meet accounting, tax, and dispute-resolution obligations, and in any event no longer than [6] years following the transaction.

b) Support and ticket correspondence is retained for as long as necessary to resolve the relevant matter and maintain an accurate record.

c) Server and security logs are retained for a limited, rolling period before being deleted or anonymised.

We apply reasonable administrative and technical safeguards appropriate to the nature of the information we hold, including encryption of data in transit, restricted internal access to personal information, and secure storage of sensitive records. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. If you have reason to believe your order, account, or codes have been accessed without authorisation, contact us immediately at support@capedrop.net.

The Site may link to third-party services, including Minecraft's official code redemption page. These third parties operate under their own privacy practices, which we encourage you to review; this policy governs only our own collection and use of your information.

The Site is not directed at, and is not intended for use by, individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@capedrop.net and we will take reasonable steps to delete it.

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of the personal information we hold about you, to object to or restrict certain processing, and, where applicable, to receive your data in a portable format. If you are a California resident, these rights may be available to you under the California Consumer Privacy Act; residents of other jurisdictions may have comparable rights under applicable local law. To exercise any of these rights, contact us at support@capedrop.net. We may need to verify your identity, such as by confirming the email address used at checkout, before actioning your request, and will respond within a reasonable timeframe as required by applicable law.

CapeDrop operates in the United States. If you access the Site from outside the United States, your information will be transferred to, and processed in, the United States, which may not offer the same level of data protection as your home jurisdiction. By using the Site, you consent to this transfer.

We may revise this policy from time to time, including to reflect changes in our practices, service providers, or legal requirements. Material changes will be posted on this page with an updated effective date. Continued use of the Site following any such change constitutes acceptance of the revised policy.

Email: support@capedrop.net

Website: capedrop.net