Privacy policy
Supercraft GSB (gsb.supercraft.host) is operated by Supercraft. The canonical Supercraft privacy policy at supercraft.host/privacy covers all Supercraft products including GSB. This page summarises the GSB-specific handling.
What we collect
- Account data. Email, display name, and hashed password when you sign up. OAuth identifiers (GitHub, Discord, Google) if you use social login.
- Usage data. API call volume, project metadata, and service logs (IP, user agent, timestamps) for billing, rate limiting, and abuse prevention.
- Billing data. If you upgrade to a paid plan, payment is handled by our PCI-compliant payment provider. We store plan level and invoice history, not card data.
- Player data. Data that your game stores in GSB on behalf of end players is processed by us as a data processor on your behalf. You are the controller.
Cookies and analytics
We use a session cookie to keep you signed in and a CSRF token for authenticated requests. We use Statcounter for aggregate traffic analytics. We may add Google Analytics (GA4) and Meta Pixel for conversion measurement on paid traffic. No personally identifying profile data is sold to third parties.
Your rights
You can request access, correction, export, or deletion of your account data at any time by emailing contact@supercraft.host. Deleting your account also removes the player data you stored on our platform; please export anything you need first.
Contact
Questions about this policy: contact@supercraft.host.
Full canonical policy: supercraft.host/privacy.