Legal · GDPR
Privacy Policy
Last updated October 12, 2026
1. Controller and contact
MrKrox is operated under the MrKrox name by the developer known as MrKrox, who acts as controller for personal data processed by the service. Contact: MrKrox on Discord, MrKrox on Discord, or the feedback page.
2. Data we process
- Account and authentication: Discord user ID, username, avatar, email when available, session and security records.
- Community and permission data: Communities, memberships, Discord servers, roles, channels, module configuration, and management actions.
- Game and operational data: UIDs, nicknames, power values, rosters, plans, event entries, schedules, reminders, uploaded screenshots, and other content submitted by users or leadership.
- Rewards and referrals: referral codes and alias history, attribution, account-bound discount eligibility, reserved quotes and verified discount uses, milestone progress and claims, Community Goal contributions, activity-claim descriptions and evidence links, approval decisions, Community Reward Pool grants, balances, redemptions, fraud-risk signals, and audit history.
- Payments: Ko-fi transaction identifiers, event type and status, product, amount, currency, payer name when provided, a protected hash of the payer email used for matching, checkout offer, fulfilment result, and provider event data needed for verification and reconciliation. MrKrox does not receive or store full card or bank credentials.
- Technical records: security, error, delivery, webhook, and audit logs needed to operate and protect the service.
3. Why and legal basis
We process data to perform the service and deliver requested access; administer Communities and permissions; verify, fulfil, and reconcile payments; operate free Rewards; prevent fraud and secure the platform; comply with legal obligations; and improve reliability. Depending on the activity, the basis is contract performance, legitimate interests in operating and securing MrKrox, legal obligation, or consent where required.
4. Sources and sharing
Data comes from you, Community owners or authorized leaders, Discord, Ko-fi payment notifications, configured Game Intel providers, and normal service operation. Game Intel uses recorded observations; imported screenshot and video readings require review before confirmation. It may be processed by Discord for login and bot functions; Ko-fi and its connected payment provider for payment; infrastructure and email providers for hosting and notices; and selected automated processing or translation providers only when a feature explicitly requires processing. We do not sell personal data or use it to create third-party advertising profiles.
The Joy Store is linked from this site. MrKrox does not collect the seller's bank, cryptocurrency, PayPal, or order details through the shop page. If you contact the seller through WhatsApp, Discord, or TikTok, information you send is handled by that seller and the chosen service under their own privacy terms. MrKrox's Privacy Policy covers only data MrKrox itself processes, including any later gift-verification request you submit for MrKrox access.
5. Community visibility
Information in a private Community is visible according to its roles and permissions. Owners and authorized leaders may manage member records and operational content. Public guides, transfer campaigns, or other explicitly public features display only the content submitted for publication.
6. Retention
Account and Community data is retained while needed to provide the service and for a reasonable period afterward. Payment, entitlement, security, anti-fraud, and audit records may be kept longer where needed for accounting, disputes, chargebacks, legal obligations, and abuse prevention. Raw provider payloads are access-restricted. Expired commercial access does not by itself immediately delete Community data.
7. Security and international processing
MrKrox uses access controls, encrypted secrets, hashed payment matching identifiers, audit trails, and limited administrative access. No system is completely secure. Providers may process data outside your country under their own safeguards and applicable transfer mechanisms.
8. Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on consent. You may also complain to your local data-protection authority. We may need to verify identity and may retain data that must be kept for legal, security, fraud-prevention, or dispute purposes.
9. Cookies and optional analytics
Optional measurement has separate controls for audience and setup milestones, Joy Store visits and interactions, and external Google Analytics. Google tags load only after specific external-measurement consent and only when enabled by the operator. Private account, community and manager pages are excluded from Google Analytics. Advertising signals and personalization are disabled. Existing consent from the earlier first-party system does not authorize Google Analytics. Change or withdraw these choices on the Cookie Policy page. Cookie Policy page. Separate operational account and payment records remain subject to the purposes and retention described above; analytics totals should not be interpreted as complete conversion or sales figures.
10. Children
MrKrox is not intended for anyone below Discord's minimum age requirement or a higher minimum required by local law.
11. Changes
Material updates will be dated here and, when appropriate, communicated to affected users or Community owners.
Aggregate access statistics and optional purposes
MrKrox keeps daily page-view totals by fixed public or platform area. These counters do not store IP addresses, account or community IDs, visitor identifiers, full URLs, query strings or browsing journeys. They operate independently of optional analytics choices and are retained for up to 365 days. They count page views, including reloads and client-side navigation, not unique people.
Optional measurement has separate controls for audience and setup milestones, Joy Store visits and interactions, and external Google Analytics. Google tags load only after specific external-measurement consent and only when enabled by the operator. Private account, community and manager pages are excluded from Google Analytics. Advertising signals and personalization are disabled. Existing consent from the earlier first-party system does not authorize Google Analytics. Change or withdraw these choices on the Cookie Policy page.
