Privacy Policy

Last Updated: October 4, 2026

1. Introduction

At AltSupply (alt.supply), your privacy is a top priority. AltSupply is an account management service for Minecraft players (“Services”) that lets you securely store and manage your Microsoft-linked Minecraft accounts, derive credentials automatically, and generate session tokens on demand.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our Services.

2. About Us & Our Privacy Philosophy

AltSupply is an account management service operated via alt.supply. We are registered in the Netherlands and comply with applicable data protection laws including GDPR.

Our privacy philosophy is simple: collect only what’s necessary to provide the Services, protect everything with strong security measures, and be completely transparent about our practices.

IMPORTANT DISCLAIMERS:

  • AltSupply is NOT affiliated with Mojang Studios, Microsoft, or Minecraft
  • Minecraft is a trademark of Mojang Studios
  • We are an independent service and not part of any Minecraft server network

3. Information We Collect

3.1 Account Information

When you create an account with AltSupply, we collect:

  • Authentication Data: Email address and an encrypted password hash
  • Session Data: Your login session tokens
  • User Preferences: Settings and display options
  • API Keys: Generated keys for programmatic access (stored hashed)

3.2 Minecraft Account Data

When you add Minecraft accounts, we store the credentials you provide so the Services can manage them for you:

  • Browser Cookies: Microsoft login cookies for an account
  • Access & Refresh Tokens: Microsoft Java and Bedrock tokens
  • Session Tokens: Minecraft session tokens, including their expiry
  • Profile Data: Derivable details such as Java and Bedrock usernames and UUIDs

3.3 Usage Data

We collect limited usage data to keep the Services reliable and secure:

  • Log Data: Requests made to our API, timestamps, and error information
  • Device Information: Browser type, operating system, and screen resolution
  • IP Addresses: For security, rate limiting, and fraud prevention

3.4 Cookies and Similar Technologies

We use cookies for essential service functionality and authentication.

4. How We Use Your Information

4.1 Providing the Services

  • To store and manage the Minecraft accounts you add
  • To automatically derive usernames, UUIDs, access tokens, and refresh tokens
  • To generate and manage Minecraft session tokens
  • To sync accounts from linked providers
  • To manage proxies and API keys
  • To provide customer support

4.2 Security and Legal Compliance

  • To detect, prevent, and address technical issues
  • To protect against fraudulent, unauthorized, or illegal activity
  • To enforce our Terms of Service
  • To comply with legal obligations

5. Our Commitment to Data Protection

We implement robust technical and organizational measures to protect information:

  • Encrypted Data Transmission: All data is transmitted over secure HTTPS connections
  • Secure Authentication: Industry-standard password hashing and session management
  • Database Security: Encrypted storage for sensitive information
  • Access Controls: Strict internal access policies and audit logs
  • Regular Security Updates: Continuous monitoring and security improvements

While we implement these security measures, we believe in transparency: no method of transmission over the Internet is 100% secure. We continuously work to improve our protections as technology evolves.

6. Data Retention

We retain different types of data for different periods:

6.1 User Account Data

  • Account Information: Retained for as long as your account is active
  • Authentication Data: Retained for as long as your account is active
  • Deleted Accounts: All personal data is permanently deleted within 30 days of account deletion

6.2 Minecraft Account Data

Credentials and tokens are retained until you remove the account or delete your AltSupply account. Session tokens are also subject to their own natural expiry on the Microsoft and Minecraft side.

6.3 Legal Obligations

Data may be retained longer if required by law or for legitimate business purposes (fraud prevention, legal disputes, etc.).

6.4 Your Right to Deletion

You may request deletion of your account and personal data at any time. Removing a Minecraft account from the Services deletes its stored credentials.

7. Sharing Your Information

We are committed to never selling or sharing data with third parties for marketing purposes.

7.1 Essential Service Providers

We use a limited set of trusted service providers to deliver our Services:

  • Database Hosting: Secure hosting for user accounts and stored credentials
  • Authentication Services: Secure authentication and session management
  • Infrastructure Providers: Hosting and content delivery services

These service providers are contractually obligated to protect data and use it only as directed by us.

7.2 No Data Selling

We do not and will never sell information to third parties.

7.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

7.4 No Third-Party Affiliations

AltSupply is not affiliated with Mojang Studios, Microsoft, or any Minecraft servers. We do not share your credentials with these entities.

8. Data Processing and Storage

8.1 What We Store

  • User Accounts: Email addresses, encrypted passwords, and preferences
  • Minecraft Accounts: Browser cookies, access/refresh tokens, session tokens, and derived profile details
  • Usage Data: Logs, device information, and IP addresses

All data is stored securely in encrypted databases within the European Economic Area.

8.2 Data Sources

Minecraft account data is provided by you, either added directly or synced from a provider you have linked and authorized. We do not obtain credentials from any other source.

8.3 Data Security

We implement security measures to protect information:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted database storage for sensitive data
  • Secure authentication with hashed passwords
  • Regular security audits and updates
  • Access controls and monitoring

While we implement these security measures, no method of transmission over the Internet is 100% secure. We continuously work to improve our protections as technology evolves.

9. Your Data Protection Rights

Under applicable data protection laws (including GDPR), you have certain rights regarding your information:

9.1 Right to Access

You have the right to request copies of your personal data. You can access most of your data directly through your account dashboard.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most information directly in your account settings.

9.3 Right to Erasure

You have the right to request deletion of your personal data. You can delete your account at any time through account settings, or contact us for assistance.

9.4 Right to Restriction

You have the right to request restriction of processing your personal data in certain circumstances.

9.5 Right to Data Portability

You have the right to request a copy of your data in a structured, machine-readable format.

9.6 Right to Object

You have the right to object to our processing of your personal data in certain circumstances.

9.7 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. International Data Transfers

We are based in the Netherlands. Our servers and databases are located within the European Economic Area (EEA). If we transfer information outside the EEA, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.

11. Children’s Privacy

Our Services are not intended for use by children under the age of 13. We do not knowingly collect information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this Privacy Policy. We will notify users of significant changes via email or prominent notice on our website.

We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

AltSupply (alt.supply) [email protected]

14. Complaints

If you have a complaint about our use of your information, you have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local data protection authority.

By using AltSupply’s Services, you acknowledge that you have read and understood this Privacy Policy. You further acknowledge that AltSupply is an independent service and is not affiliated with Mojang Studios, Microsoft, or Minecraft.