Draft. Not yet in force. Nation Economics is not on sale, so there is no agreement between us to govern. These documents are published early so they can be read, questioned and reviewed before the first sale.
They have not been checked by a lawyer. Written by the developer from the product's own design decisions, which makes them accurate about what the software does and unproven as legal instruments.
Still to be filled in: the legal entity, its trading address and a formal contact address. Nation Economics is currently run by an individual rather than a registered company, and those details are left blank rather than invented.
What we do not store, on purpose
This is the most important paragraph on the page. Your players' economy data never reaches us. Balances, ledgers, transactions, banks and nations live in files on the server you already run.
The panel does not hold a copy. It asks your server for whatever you are currently looking at, renders it, and forgets it. Graphs and history are computed on your machine and sent on request.
That is a deliberate architectural decision with a direct consequence: we are not holding your players' personal data, so the obligations that come with holding it do not attach to us.
What we do store
Only what an account needs to exist:
| Data | Why |
|---|---|
| Email address | Identifies the account. Comes from your sign-in provider. |
| Display name | Shown in the panel. |
| Google or Discord user ID | How we recognise you at sign-in. We never receive your password. |
| Minecraft UUID and username | Required, so the panel knows whose data it is showing. |
| Session records | Keeps you signed in. Expire after 30 days of inactivity. |
| An audit log | Sign-ins, account linking and permission changes, so a disputed action can be answered. |
IP addresses in the audit log are stored hashed with a secret salt, never in the clear. That is enough to recognise repeated activity from one source without the log becoming a record of where our customers live.
We hold no passwords
Sign-in is Google or Discord only. There is no password database here to leak, and nothing we store is reusable on another site.
Who else touches it
Each of these is a company that processes some of your data on our behalf.
| Service | What it handles |
|---|---|
| Cloudflare | Hosting, the database and the session store. |
| Google, Discord | Sign-in. They tell us your ID, name and email; we tell them nothing. |
| Merchant of Record | Payment and invoicing. They are the legal seller and handle your payment details; we never see a card number. |
| Email provider | Account and incident emails. Purchase receipts come from the seller instead. |
| Error tracking | Diagnostics when something breaks, configured to strip request bodies and identifiers before they are sent. |
The specific providers are named in the Data Processing Agreement once contracts are in place. Naming them before signing would be stating something we have not yet done.
Your data, your call
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Deletion removes the account, its links and its sessions. The audit log keeps the record that an action happened, without the account it belonged to.