This privacy policy explains how we collect and use personal data when you visit norwaycraft.no, create an account or shop in our store.
Last updated: 13.10.2026
1. Data controller
NorwayCraft Group AS, org. no. 928 793 176, is the data controller for the personal data processed on norwaycraft.no. If you have any questions about privacy, you can contact us at kundeservice@norwaycraftgroup.com.
2. What data we collect
- When you shop: name, e-mail address, billing address and possibly phone number, as well as what you bought, the amount and the time.
- Minecraft username: the username you enter, so the rank or package can be delivered to the right account in the game.
- When you create an account: e-mail address, username, password (stored encrypted) and your order history.
- When you contact us: whatever you write in forms or e-mails.
- Technical information: IP address, browser type and similar, which the server logs when you visit the website.
- Statistics: information about how the website is used, but only if you have consented to it.
We never store card numbers or other payment information. The payment itself is handled by Vipps MobilePay or PayPal.
3. Why we process the data
- To complete the purchase and deliver it in the game, send an order confirmation and help you if something goes wrong. This is necessary to fulfil the agreement with you (GDPR Article 6(1)(b)).
- To keep accounting records because the Norwegian Bookkeeping Act requires it (Article 6(1)(c)).
- To protect the website against abuse and spam, which is a legitimate interest (Article 6(1)(f)).
- To show this month's top donors to thank those who support the server, which is a legitimate interest (Article 6(1)(f)). See section 5.
- To create visitor statistics with Google Analytics, only with your consent (Article 6(1)(a)). You can withdraw your consent at any time.
4. Who we share data with
We never sell personal data. We only share it with the suppliers we need to run the website and the shop:
- Vipps MobilePay processes the payment when you pay with Vipps, and is an independent data controller for it.
- PayPal processes the payment when you pay with PayPal or card, and is an independent data controller for it.
- one.com sends e-mail on our behalf, for example order confirmations.
- Mojang/Microsoft and GeyserMC: when you enter a Minecraft username, we check it against Mojang (Java) or GeyserMC (Bedrock) to find the right account.
- mc-heads.net shows your Minecraft head based on your username, for example in the top donor list.
- Google provides statistics (Google Analytics), but only if you have consented to it.
- Cloudflare protects our forms against spam with Turnstile, and in doing so processes technical information about your browser.
- Public authorities when required by law.
The website and the database run on a server in Norway.
5. Top donors this month
On the shop page we show the Minecraft usernames of those who have supported NorwayCraft the most that month. We never show amounts, real names or other information, only the Minecraft name and your character's head. The list starts over every month. If you don't want to be on the list, send an e-mail to kundeservice@norwaycraftgroup.com and we'll remove you.
6. Transfers to countries outside the EEA
Some of the suppliers, including Google, PayPal, Microsoft and Cloudflare, may process data in the USA. The transfer is based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
7. How long we keep the data
- Order and accounting data: for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act.
- Customer account: until you delete the account or ask us to delete it.
- Top donor list: only shows the current month.
- Statistics in Google Analytics: automatically deleted by Google after a maximum of 14 months.
8. Cookies
We use necessary cookies so that the cart, login and checkout work. These do not require consent. Statistics cookies from Google Analytics are only set if you accept them in the cookie banner. Your choice is remembered for 180 days, and you can change it at any time with the cookie button at the bottom left of the page.
9. Your rights
You have the right to access the data we hold about you and to have errors corrected. You can also ask for the data to be deleted, for processing to be restricted, or to receive a copy of it (data portability). You can object to processing based on legitimate interest. Note that we must keep certain order data for as long as the Bookkeeping Act requires.
Send your request to kundeservice@norwaycraftgroup.com, and we'll reply within 30 days.
10. Complaints
If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no). We'd appreciate it if you contact us first, so we have the chance to put things right.
11. Children and young people
Many of our players are under 18. If you are under 18, purchases with a bank card must be approved by a parent or guardian, see the terms of purchase.
12. Changes
We may update this privacy policy. The date at the top shows when it was last changed.