Privacy Policy

Last Updated: December 26, 2025

1. Overview

GumYum ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Infrastructure Partner: GumYum operates on infrastructure provided by unsandbox.com. Data processing occurs on unsandbox.com systems, and their Privacy Policy applies to underlying infrastructure operations.

2. Information We Collect

2.1 Account Information

Email Address (Required):

• Required for account creation and authentication
• Used to send one-time login codes (OTP) for passwordless authentication
• Used for important account notifications and service updates
• May be used for subscription and payment confirmations
• Never sold or shared with third parties for marketing

2.2 Automatically Collected Information

IP Addresses:

• Used for rate limiting and abuse prevention
• Used for security monitoring and fraud detection
• Retained only as long as necessary (typically 24-48 hours for rate limiting)

Server Activity Data:

• Player counts and connection statistics
• Server status (running, sleeping, etc.)
• Resource usage metrics for scaling decisions
• Used to provide popularity rankings and auto-scaling features

2.3 Payment Information

Payment Processing:

• Credit card payments processed by Stripe - we never see full card numbers
• Cryptocurrency addresses for payment verification
• Transaction amounts and confirmation status
• Subscription tier and duration
• Stored only for transaction verification and service delivery

2.4 Server Content

Game Server Data:

• World files, configurations, and player data stored on your servers
• Server names and descriptions (public if listed in server browser)
• Plugin/mod configurations you upload
• Console logs (retained temporarily for debugging)

3. How We Use Your Information

We use collected information for:

• Authentication: Sending login codes to verify your identity
• Service Delivery: Hosting and managing your game servers
• Account Notifications: Subscription status, important updates, security alerts
• Popularity Features: Ranking servers, auto-scaling based on player counts
• Abuse Prevention: Detecting and preventing service abuse and security threats
• Payment Processing: Verifying payments and activating subscriptions
• Service Improvement: Analyzing usage patterns to improve the platform

4. Data Storage and Retention

Storage Location:

• All data stored on unsandbox.com infrastructure within the United States
• Server data preserved during sleep/freeze states
• Encrypted at rest and in transit

Retention Periods:

• Account data: Retained while account is active
• Server data: Retained 30 days after subscription expiration
• IP addresses: 24-48 hours for rate limiting
• Payment records: Retained for legal/tax compliance
• Email address: Until account deletion or upon request

5. Information Sharing

We do NOT sell your personal information. We share data only with:

• unsandbox.com: Our infrastructure partner that hosts all servers and data
• Stripe: For credit card payment processing
• Blockchain Networks: Cryptocurrency payments are public by design
• Legal Requirements: If required by law or to prevent illegal activities
• Service Protection: To enforce our Terms of Service and protect users

Public Information:

• Server name and player count (if listed in public server browser)
• Server address for players to connect
• You control whether your server appears in public listings

6. Security Measures

We implement security practices including:

• All traffic encrypted with TLS/HTTPS
• Passwordless authentication reduces credential theft risk
• Server isolation - each server runs in its own container
• Regular security updates and monitoring
• Rate limiting to prevent abuse

7. Cookies and Tracking

Minimal Tracking:

• No advertising cookies
• No Google Analytics or third-party analytics
• Essential cookies only for session management and CSRF protection
• No cross-site tracking or user profiling

8. Your Privacy Rights

You have the right to:

• Access your personal data we store
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Request data portability (export your server data)
• Control whether your server appears in public listings

GDPR Rights (EU Users):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to data portability
• Right to object to processing

9. Children's Privacy

Our service is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Users aged 13-17 should have parental consent before creating an account.

10. International Users

If you access our service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer. We comply with applicable data protection laws for international transfers.

11. Third-Party Services

We integrate with:

• unsandbox.com: Infrastructure and compute services
• Stripe: Credit card payment processing
• Cryptocurrency Networks: Bitcoin, Litecoin, Monero, Dogecoin blockchains

Each third-party service has its own privacy policy governing their data practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be announced via email. Continued use of the service after modifications constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us through our support channels.