Privacy Policy · Schokr

This Privacy Policy explains how Schokr, Inc. (“Schokr”, “we”, “us”) collects, uses and shares personal information when you use schokr.gg, the Schokr console, our APIs, the Pterodactyl panel we provide, our documentation and our other services (the “Service”).

Schokr, Inc. is the company responsible for your information (the “controller” under data protection laws such as the GDPR). You can reach us at:

Schokr, Inc.
333 W San Carlos St, San Jose, CA 95110, United States
legal@schokr.gg

Summary

We collect what we need to run your account and servers, keep the Service secure and stop abuse.
We don’t sell your personal information, and we don’t share it for targeted advertising.
We don’t use analytics or advertising trackers on our website or console.
Payments go through Stripe. We never see or store your full card details.
You can ask us to access, correct or delete your information at any time.

Information we collect

Information you give us

Account details: your email address, username and password. We store passwords only as a secure one-way hash, never in plain text.
Profile details: anything you add to your public profile, such as a bio, avatar, banner and whether your profile is private.
Teams: teams you create, their names and settings, who you invite (by email address) and the roles you assign.
Your content: the files, code, worlds, configuration and other data you upload to or create on your servers.
Waitlist sign-ups: if you join a waitlist for an upcoming product, the email address you enter and which product it’s for.
Messages: anything you send us, for example when you email us or ask for help on Discord.

Information from Discord

If you link your Discord account, we ask Discord for permission to see your Discord identity, email address and your membership of Discord servers. We use this to:

Link the accounts. We store your Discord user ID and Discord avatar URL. We read your Discord username and email during linking but don’t store them.
Check the Schokr Discord. We check whether you’re a member of the Schokr Discord server, which is needed for credits, rewards, the store and referrals. If you aren’t a member, we may add you to it when you link your account.

Information collected automatically

Session and security data: your IP address, browser or app user agent, and the times you sign in, sign out and use the Service. We record successful and failed sign-in attempts to protect accounts.
Activity on your account and servers: actions such as creating servers, power actions, file changes, backups, team changes and profile edits, so you and your team can see what happened.
Rewards and credits: your credit balance, transactions, daily reward streaks, referrals, and whether you’re currently active on the AFK rewards page.
Approximate country: the Schokr console may check your approximate country through Cloudflare to suggest a language. This isn’t stored.

Payment information

When you buy credits or subscribe to Schokr One, payment is handled by Stripe. We receive and keep a Stripe customer ID, checkout and payment IDs, amounts, what you bought and the payment status. We don’t receive or store your full card number or security code.

How we use your information

We use personal information to:

Provide the Service: create and run your account, teams and servers, process payments and credits, and show your profile.
Keep the Service secure: authenticate you, protect accounts, rate-limit requests, and detect and prevent fraud and abuse. This includes blocking disposable email addresses, recognising duplicate (“alt”) accounts and spotting abuse of credits and rewards.
Support you: answer your questions and requests.
Communicate with you: send service-related messages, and email you when a product you joined the waitlist for launches. We use waitlist emails only for that product’s launch.
Improve the Service, using information about how features are used.
Follow the law: meet legal, tax and accounting obligations and respond to lawful requests.

Legal bases (EEA and UK users)

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases:

Purpose	Legal basis
Running your account, servers, payments and Schokr One	Performance of our contract with you
Security, fraud and abuse prevention, and improving the Service	Our legitimate interests in keeping Schokr safe, fair and working well
Waitlist emails	Your consent, which you can withdraw at any time
Tax, accounting and legal requests	Legal obligation

What other people can see

Your public profile. Other Schokr users can see your username, tag, avatar and bio, unless you make your profile private. Private profiles hide your avatar and bio.
Leaderboards. If your team ranks on a rewards leaderboard, signed-in users can see the team owner’s username, tag and avatar, and the team’s credit balance.
Your teams. Members of a team can see each other’s email address, username and avatar. Team activity logs, including the IP address and device of the person who took each action, can be seen by team members with access to those logs.

We don’t sell your personal information or share it for cross-context behavioural advertising. We share it only with:

Service providers that help us run Schokr, under contracts that limit how they use it:
- Stripe, for payments.
- Discord, when you link your account, and to check or manage membership of the Schokr Discord server.
- Cloudflare, for network delivery, security and, where enabled, storage of backups and snapshots.
- Our hosting and infrastructure providers in the locations where your servers run.
Services your browser contacts directly when you use the console:
- Gravatar, which receives a hashed version of your email address to show a default avatar.
- Google Fonts, which serves our fonts.
- Discord’s CDN, which serves Discord avatars.
These services can see your IP address.
Your team, as described above.
Legal and safety: when required by law, or when we believe in good faith it’s necessary to protect the rights, property or safety of Schokr, our users or others.
Business transfers: if Schokr is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

Cookies and local storage

We only use cookies and similar storage that are needed to run the Service or remember your preferences. We don’t use analytics or advertising cookies.

Name	Type	Purpose
`schokr_session`	Cookie, 7 days	Keeps you signed in. Essential.
`schokr_lang`	Cookie and local storage, 1 year	Remembers your language.
`manhattan_token`	Local storage	Keeps you signed in to the console. Essential.
`schokr_selected_tenant_id`	Local storage	Remembers which team you last selected.
`theme`	Local storage	Remembers light or dark mode.

Our mobile apps store your sign-in token securely on your device.

The marketing site at schokr.gg doesn’t set cookies.

How long we keep information

Account, team and profile information: while your account exists.
Sessions: up to 7 days, and expired sessions are removed regularly.
Server content: until you delete it or the server, or your account is deleted.
Security and activity logs, credit transactions and referral records: while your account exists, so we can protect accounts and investigate abuse.
Payment records: as long as needed for tax, accounting and legal purposes, which may be longer than your account.
Waitlist emails: until the product launches and we’ve let you know, or until you ask us to remove you.

When we no longer need information, we delete it or make it anonymous.

Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you and get a copy.
Correct information that’s wrong. You can update most account details yourself in the console.
Delete your account and personal information.
Object to or restrict some uses of your information.
Data portability: receive your information in a portable format.
Withdraw consent, for example to waitlist emails, at any time.
Complain to your local data protection authority.

To use any of these rights, email legal@schokr.gg from the email address on your account. We may need to verify your identity before acting on a request. We’ll respond within one month, or within the time required by the law that applies to you.

Deleting your account: email us and we’ll delete your account, teams, servers and associated data. We may keep limited information where we’re legally required to, such as payment records, or where it’s needed to prevent fraud and abuse, such as the fact that an account was banned.

California privacy rights

If you’re a California resident, the California Consumer Privacy Act (as amended) gives you additional rights.

Information we collect. In the past 12 months we have collected these categories of personal information, for the purposes described above:

Identifiers: email address, username, IP address, Discord ID and account IDs.
Commercial information: credit purchases, Schokr One subscriptions and transactions.
Internet or other electronic network activity: sign-in, session and account activity.
Approximate location, from IP addresses.
Account credentials, which the CCPA treats as sensitive personal information. We use them only to provide and secure the Service.

These categories come from you, from your use of the Service, and from Discord and Stripe.

No selling or sharing. We don’t sell personal information, and we don’t share it for cross-context behavioural advertising. We haven’t done so in the past 12 months, and we don’t knowingly sell or share the personal information of anyone under 16.

Your rights. You have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and not to be discriminated against for using these rights. You can make a request by emailing legal@schokr.gg. You can also use an authorised agent, who must provide proof that you’ve authorised them. We’ll verify requests by confirming they come from the email address on the account. We’ll respond within 45 days, or tell you if we need more time.

Security

We protect your information with measures including hashed passwords, encryption of stored panel credentials, HTTPS, secure session cookies, rate limiting and abuse detection. No system is completely secure, so please use a strong, unique password and keep your SFTP password and API keys private.

International transfers

Schokr is based in the United States, and your servers may run in the United States, the United Kingdom, Germany, Singapore or Japan, depending on the location you choose. Your information may be processed in these and other countries where our service providers operate. When we transfer personal information from the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Children

Schokr isn’t for children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we’ll delete it. Users between 13 and 18 need a parent or guardian’s permission to use Schokr and to make purchases.

Changes to this policy

We may update this policy. We’ll post the new version here with a new “last updated” date and, if the changes are significant, let you know through the Service or by email.

Contact us

Questions or requests about privacy? Email legal@schokr.gg, or write to Schokr, Inc., 333 W San Carlos St, San Jose, CA 95110, United States.