Last updated: 11 April 2026
This Privacy Policy describes how NET247
(“we”, “us”, “our”) collects, uses, stores, and discloses
personal information when you access or use the BilbyCraft website, account portal, and related community
services connected to our Minecraft server ecosystem (collectively, the “Services”).
We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the
Australian Privacy Principles (APPs). By using the Services, you acknowledge that you have read this
Privacy Policy.
1. Scope
This policy applies to personal information we handle in connection with the Services. It does not apply to
third-party websites, game clients, Discord servers, or services that we do not control; those are governed by
their own policies.
2. Personal information we collect
Depending on how you use the Services, we may collect the following categories of information:
Account and authentication
- Email address and account credentials (passwords are stored using one-way hashing; we do not store plaintext passwords).
- Security-related data such as email verification status, optional two-factor authentication settings where enabled, and API tokens if you use authenticated API access.
- Session identifiers and similar data needed to keep you signed in securely.
Profile and preferences
- Profile details you choose to provide, such as display name, biography, avatar or other media, and links you add to your profile.
- Contact or demographic fields you submit where the product allows it (for example name, phone, postal code, country, date of birth, or similar fields).
- Privacy and visibility settings that control how your profile appears to others.
- Timezone and related preferences associated with your account.
Minecraft, server, and activity data
-
Data relating to in-game identity and participation, including Minecraft usernames, linked identifiers,
groups, claims, economy or progression statistics, moderation records, gameplay telemetry, and related
metadata processed for administration, leaderboards, and improvement of the Services.
-
Server-related operational data (for example heartbeats, performance metrics, plugin integration events,
and player counts) where you or a server you operate connects to our systems.
- Map or world context data where the Services process location-style information for navigation and player-facing features.
Communications
-
If you use our contact or similar forms, we collect the information you submit (such as your name, email
address, and message content) so we can respond.
- Records of certain communications and system notifications we send in relation to your account or the Services.
Technical and usage data
-
Network and device information such as IP address, user agent, approximate location derived from IP where
available, and timestamps.
- Server and application logs used for security, debugging, abuse prevention, and service reliability.
-
Where address or place lookup features are used, queries may be sent to our geocoding provider to resolve
locations (see section 5).
3. How we use personal information
We use personal information for purposes that include:
- Providing, operating, and improving the Services (including accounts, profiles, Minecraft tracking, and community statistics).
- Authenticating users, securing accounts, preventing fraud and abuse, and enforcing our terms.
- Communicating with you about the Services, support requests, and important notices.
- Analysing usage and performance to understand how the Services are used and to develop new features.
- Complying with legal obligations and responding to lawful requests from public authorities.
We do not sell your personal information.
4. Cookies and similar technologies
We use cookies and similar technologies that are essential for the operation of the site (for example session
management, security tokens such as CSRF protection, and optional “remember me” style functionality where
offered).
Analytics or similar measurement scripts may be enabled in some environments. Where used, they may set
cookies and collect usage data as described in the provider’s documentation.
5. Third-party services
We use service providers that process data on our behalf or where you interact with their widgets, including:
-
Google reCAPTCHA — on pages where it is enabled (for example registration or contact forms),
to reduce automated abuse. Google may collect technical data; see Google’s terms and privacy notices.
-
Google Analytics / measurement tags — when enabled (see section 4), subject to configuration
in our environment.
-
Geoapify (or similar geocoding providers) — when you use features that search or resolve
addresses or coordinates, your query may be transmitted to that provider to return results.
-
Hosting, email, and infrastructure — providers that host our application, database,
cache, email delivery, and backups. Data is stored and processed on systems we control or contractually
govern.
These providers have their own privacy policies. We encourage you to read them. We only share what is needed for
the relevant function.
6. Disclosure of personal information
We may disclose personal information:
- To service providers who assist us in operating the Services (subject to appropriate safeguards).
- Where required or authorised by law, or to protect our rights, safety, or the rights and safety of others.
-
In connection with a business transaction such as a merger, acquisition, or asset sale, subject to
appropriate confidentiality arrangements.
- With your consent or at your direction (for example where you choose to make profile information public).
7. Overseas disclosure
Some of our service providers (including those listed in section 5) may store or process data outside Australia.
Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the
recipient handles the information in accordance with the APPs, such as by contractual terms or by selecting
reputable providers. By using the Services, you consent to such disclosures where they occur.
8. Security
We implement reasonable technical and organisational measures designed to protect personal information against
unauthorised access, loss, misuse, or alteration. No method of transmission over the internet or electronic
storage is completely secure; we cannot guarantee absolute security.
9. Retention
We retain personal information for as long as needed to provide the Services, comply with law, resolve
disputes, and enforce our agreements. Some information may remain in backups for a limited period after
deletion from active systems.
10. Access, correction, and complaints
Under the APPs, you may request access to or correction of personal information we hold about you.
To make a request, contact us via the
contact page. We will respond within a reasonable time. If you are not
satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at
oaic.gov.au.
11. Children
The Services are not directed at children under 13, and we do not knowingly collect personal information from
children under 13 without parental consent where required by law. If you believe we have collected such
information, please contact us and we will take appropriate steps.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when we
do. Material changes may be communicated through the Services or by email where appropriate. Continued use after
changes constitutes acceptance of the updated policy, to the extent permitted by law.
13. Contact
For privacy questions or requests, contact us through the
contact page.