xlmine Privacy Policy

1. Controller and related domains

This policy describes personal data processing in xlmine and related xlartas services. The main project domain is xlmine.net. xlmine is a subsidiary direction of the xlartas ecosystem; the main xlartas website and services are available on xlartas.ru and xlartas.com.

OAuth sign-in for xlmine.net uses the xlartas.ru callback domain. When signing in through Google, GitHub, Discord, X/Twitter or another provider, the user may be redirected from xlmine.net to the provider domain, then to xlartas.ru for callback processing and back to xlmine.net. OAuth identifiers, email, profile name, avatar, authorization state, technical tokens and session data may be processed during this flow.

2. Data we process

We may process email, username, hashed password, OAuth identifiers, avatar, language, timezone, registration date, IP addresses, cookies, local storage data, user-agent, technical logs, game UUIDs, skins, capes, game session tokens, balance data, voluntary project support data, payment data, support requests and server actions.

The launcher may send technical data required for authorization, client pack updates, version checks, error diagnostics and abuse protection.

3. Purposes

Data is used for registration and sign-in, email verification, account recovery, launcher operation, server access, granting and accounting for internal bonuses, processing voluntary project support and payment errors, moderation, security, anti-fraud, support, stability analytics, protection of project rights and legal obligations.

4. Cookies and local storage

The website uses cookies and local storage for authorization, language, session state, OAuth redirects, request forgery protection and technical settings. Some functions may not work properly without them.

5. Third parties

We do not sell personal data. Data may be shared with hosting providers, payment systems and banks, authorization services, email providers, analytics, anti-fraud and infrastructure contractors only as needed for project operation, security, payment processing, legal compliance and protection of rights.

6. Retention

Data is stored as long as needed for account operation, server operation, payments and voluntary project support, security logs, dispute resolution, accounting and tax records, legal compliance and abuse prevention. Technical logs may be deleted or aggregated earlier than account data.

7. Security and localization

We use technical and organizational safeguards, but no internet service can guarantee absolute security. If you notice suspicious activity, contact administration. When collecting personal data of Russian citizens through the website, we proceed from the need to use databases located in Russia where required by applicable law.

8. User rights

You may request information about processing, clarification, correction, blocking or deletion of data unless it conflicts with security, project rules, evidence preservation, financial records, contractual relations or legal requirements.

9. Minors

If a user cannot legally consent to data processing in their country, the project may be used only with permission from a legal representative.

10. Changes and contact

We may update this policy. The current version is published on the website. For data questions, use the official xlmine or xlartas channels listed on the website.