Privacy Policy

Last Updated: September 13, 2026

Event Foundry Inc ("we", "us", "our") is a United States software company. We operate eventfoundry.com, we build custom software for clients, and we publish our own applications, including Server Control for Minecraft, an app that lets you launch and manage your own Minecraft Bedrock server.

This policy explains what we collect, why, who we share it with, and how to get it deleted. It covers eventfoundry.com, our applications, and the text messages we send. We are the data controller for the information described here. We are not affiliated with, endorsed by, or sponsored by Mojang AB or Microsoft.

1. Information You Give Us

Email address: optional. Used to sign in, recover your account, and move it to a new device. We send a verification code to confirm it is yours.
Mobile phone number: optional. Collected only if you choose to verify a phone number or turn on two-factor authentication, so we can send you a one-time passcode. See section 4.
Server settings: your world name, message of the day, game mode, difficulty, allow-list entries, and similar configuration.
Screenshots you upload: only if you choose to claim free credits for sharing the app or leaving a review. We review these to confirm the claim, and you should avoid uploading images containing information you would rather not share with us.
Support messages: anything you email us.
Business inquiries: if you contact us about a software project, the name, email, company, and project details you send.

2. Information Collected Automatically

Device identifier: a random identifier we generate on first launch. This is your account key, which is why the app works before you provide an email.
Advertising identifier: on iOS, only if you allow tracking when asked. See section 9.
Usage and analytics data: app opens, screens viewed, server launches, and purchase-funnel events, along with coarse properties such as whether you subscribe, an approximate credit balance range, how many add-ons you have active, your app locale, and the week you installed.
Diagnostics: crash reports, error traces, device model, and OS version.
Push token: if you enable notifications.
Server telemetry: for servers you run: uptime, CPU, memory, network and disk activity, and how many players are connected.

3. Information About Players On Your Server

When someone joins a server you run, the server software records their Minecraft gamertag and Xbox user ID (XUID), along with connection and disconnection times. We store this so the app can show you who is online, keep your allow-list working, and grant operator permissions. Minecraft Bedrock identifies operators by XUID, so we cannot offer that feature without it.

These players are usually not our users and have not agreed to this policy. If you run a server for other people, you are responsible for telling them their gamertag is visible to you through this app, and for any additional obligations that apply where you live, particularly if the players are children. Deleting your account deletes this roster.

4. Text Messages and One-Time Passcodes (SMS)

What we send

We send text messages for one purpose: account security. Specifically, we send one-time passcodes (OTPs) and verification codes that let you confirm your phone number, sign in, complete two-factor authentication, or authorize a sensitive account change.

We do not send marketing, promotional, or advertising text messages of any kind. We do not sell, rent, or license your mobile number, and we do not use it to build advertising profiles.

How you opt in

SMS is entirely optional and is never a condition of creating an account, using our products, or making a purchase. You opt in by entering your own mobile number at the point in our app or website where you choose to verify a phone number or enable two-factor authentication, and confirming the disclosure shown on that screen:

By providing your mobile number, you agree to receive one-time verification codes by text message from Event Foundry. These are account security messages only; we will not send you marketing texts. Message frequency depends on how often you sign in or request a code. Message and data rates may apply. Reply HELP for help or STOP to opt out. See our Privacy Policy and Terms of Service.

We record the date, time, and IP address of that confirmation as proof of your consent.

Message frequency and cost

You receive a message only when you, or someone attempting to use your credentials, request a code, so frequency varies and is driven entirely by your own activity. Message and data rates may apply, depending on your mobile plan.

HELP and STOP

Reply HELP to any message, or email support@eventfoundry.com, for assistance. Reply STOP to any message to stop receiving texts from us; we will send a single confirmation and then send nothing further to that number. Opting out does not close your account, but you will need to use email verification instead, and any phone-based two-factor authentication will be turned off.

What we store

We store your mobile number, the record of your consent, and, for each code we send, the time it was sent, the delivery result reported by the carrier, and whether it was used successfully. The passcode itself is short-lived and is discarded once it is used or expires. We keep this record to investigate account takeover attempts, fraud, and delivery failures.

Who we share it with

To deliver a text message, your mobile number is passed to Twilio, our SMS delivery provider, and onward to your mobile carrier. Twilio acts as our service provider and processes the number only to deliver the message on our behalf.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Your World Data

Your Minecraft world is stored in Amazon S3 so it survives between sessions. We do not read the contents of your world, and we do not use it for anything other than restoring your server and providing the snapshot and restore features in the app.

6. AI Features

Server Tools includes an optional "ask in your own words" box. When you use it, the text you type is sent to Amazon Bedrock, an AI service run by Amazon Web Services, which converts it into one of the app's predefined server commands. AWS processes this text on our behalf as our service provider. It is not used to train third-party AI models.

We keep the text you typed, what it was interpreted as, and whether you accepted the result, so we can answer "why did my server do that?", track what the feature costs, and improve its accuracy. Nothing runs on your server until you confirm it. Please do not type personal or sensitive information into this box. The rest of the app works without it.

7. Advertising and Tracking

The free version of the app shows banner ads and optional rewarded video ads through Google AdMob. Subscribers, and anyone with a server currently running, do not see banner ads. Advertising applies to the app only. We do not use your mobile number or any SMS data for advertising.

On iOS we ask permission before tracking, using Apple's App Tracking Transparency prompt:

If you allow it, your advertising identifier may be used by Google to show you personalized ads and to measure them across other apps and websites. Under some privacy laws this counts as "sharing" or "selling" personal information for targeted advertising.
If you decline, you still see ads, but they are not personalized using your advertising identifier.

You can change this at any time in Settings → Privacy & Security → Tracking on iOS, or reset or delete your advertising ID under Settings → Google → Ads on Android. Google's handling of ad data is described at policies.google.com/technologies/partner-sites.

8. How We Use Information

To run your server, save your world, and keep your settings
To verify your identity and protect your account, including sending one-time passcodes
To manage credits, subscriptions, and in-app purchases
To send notifications you have asked for, such as credit updates
To find and fix crashes and abuse, and to keep the service secure
To understand which features are used so we can improve them
To show ads that fund the free tier
To respond to business inquiries and support requests

Where the GDPR applies, we rely on performance of a contract for running your server and purchases, legitimate interests for security, diagnostics, account verification, and product analytics, consent for personalized advertising and push notifications, and legal obligation where the law requires it.

9. Who We Share It With

We do not sell your personal information for money. We share it only with the service providers below, each for the single purpose listed:

Amazon Web Services: hosting, world storage, and the AI feature in section 6
Twilio: delivery of one-time passcode text messages (see section 4)
Google AdMob: advertising (see section 7)
Google Firebase: analytics and push notification delivery
Sentry: crash and error reporting
RevenueCat: subscription and purchase status
Apple and Google: payment processing for in-app purchases

We may also disclose information if required by law, to enforce our terms, or to protect our users and systems. If the business is sold or merged, your information may transfer with it, subject to this policy. In every case, the exclusion in section 4 applies: text messaging opt-in data and consent are never shared with third parties.

10. Payments

Purchases are processed by Apple or Google. We never receive or store your card number. We receive only your subscription and purchase status so we can unlock what you paid for.

11. How Long We Keep It

Account data: until you delete your account
World data: until you delete it in the app or delete your account
Mobile number and SMS consent record: until you opt out or delete your account, plus a limited period afterward to evidence that consent was given and honored
Passcode delivery logs: retained on a rolling window for fraud and delivery investigation
Session and telemetry records: retained for service history, billing accuracy, and abuse investigation
Crash reports: retained by Sentry on a rolling window, typically 90 days
Purchase records: retained as long as tax and accounting law requires, even after account deletion

12. Your Rights and Choices

Delete your account at any time from inside the app: open the Account tab and choose Delete Account. This permanently removes your account, servers, worlds, player roster, phone number, and settings. It cannot be undone, and it does not cancel a subscription, so cancel that through Apple or Google.

Stop text messages at any time by replying STOP to any message, turning off two-factor authentication in the app, or removing your phone number from your account.

Depending on where you live, you may also have the right to access, correct, export, or restrict the use of your information, to object to processing, to withdraw consent, and to opt out of targeted advertising or "sharing". To exercise any of these, email support@eventfoundry.com. We will not treat you differently for asking. You may also complain to your local data protection authority.

California residents: the personalized advertising described in section 7 may be considered "sharing" for cross-context behavioral advertising under the CCPA/CPRA. Declining the App Tracking Transparency prompt, or turning off personalized ads in your Android settings, opts you out. We do not knowingly sell or share the personal information of anyone under 16, and we do not sell or share mobile numbers or SMS consent data at all.

13. Children's Privacy

Our apps are not directed to children under 13, and we do not knowingly collect personal information from them. Minecraft is popular with younger players, so we want to be clear about two things: the account holder should be 13 or older, and if you run a server for children, section 3 applies to you rather than to us.

If you believe a child under 13 has given us personal information, email support@eventfoundry.com and we will delete it promptly.

14. International Transfers

We operate in the United States, and our servers and service providers are located there. If you use our products from outside the US, your information is transferred to and processed in the US, which may have different data protection laws than your country. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses. Our SMS program is available to United States mobile numbers only.

15. Security

We use encryption in transit, access controls, and standard AWS infrastructure practices to protect your information. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the relevant authorities of a breach where the law requires it.

We will never ask you to read, forward, or share a one-time passcode with anyone, including someone claiming to be Event Foundry support. If you receive a code you did not request, do not share it, and change your password.

16. Changes to This Policy

We may update this policy. We will change the "Last Updated" date above, and for material changes we will tell you in the app or by email before they take effect.

17. Contact

Event Foundry Inc
Email: support@eventfoundry.com