Privacy Policy

Last updated 8 October 2026

SkyMarket is independently operated by an individual under the SkyMarket name ("we," "us"). This policy explains information handling for skymarket.dev and its associated services. Questions and privacy requests: [email protected].

Browsing and technical information

Public market pages do not require an account. When you visit the site or use its API, our infrastructure and providers receive your IP address and request details. These can include the page or endpoint requested, time, browser information, referrer, and error or security events. This information is used to deliver the service, troubleshoot problems, apply rate limits, and prevent abuse.

Optional accounts

  • When you use an available Google or Discord sign-in option, we receive the provider's account identifier and basic profile information, such as your name, email address, and email-verification status, where supplied. We do not receive the provider's password.
  • We keep account and linked-provider identifiers, profile information, creation and sign-in times, account status and entitlements, and records needed to manage sign-in sessions.
  • We do not ask for your Minecraft or Hypixel password. Do not send us passwords or access tokens.

Payments

  • Premium is sold through Link, Stripe's checkout, which acts as the seller of record for the payment. Your payment details and billing address go to Stripe and Link, not to SkyMarket. They use the address to work out and pay sales tax, VAT or GST, and they send your receipts.
  • We keep your Stripe customer reference and a record of each purchase: what was bought, when, the amount and tax charged, and whether it was refunded or disputed. We need these records for your Premium, for support and refunds, and for tax and accounting obligations.
  • When a Premium seat is in use, we record which Minecraft account (its public UUID) is running on it, so that one seat runs one account at a time.

Browser storage and cookies

  • Display preferences, such as number format and chart settings, are stored on your device.
  • A sign-in token is kept in browser storage to maintain your session. Signing out removes the local token and ends that session; it does not delete your account or all server records.
  • A short-lived security cookie and temporary browser storage help tie a sign-in attempt to the browser that started it. They are not used for advertising.
  • Clearing browser storage can reset preferences and remove local sign-in information. Sign-in and infrastructure providers may use their own cookies or similar technologies under their own notices.

Analytics and browser signals

We use Cloudflare Web Analytics for aggregate usage and performance information. Cloudflare describes this analytics product as operating without analytics cookies or cross-site user tracking. This is separate from network delivery and security processing, which can involve your IP address. See Cloudflare's analytics documentation.

SkyMarket does not sell personal information or share it for cross-context behavioral advertising. The site does not currently change its behavior in response to the browser's Do Not Track signal. You can contact us about privacy choices and any rights that apply to you.

Support and legal correspondence

If you email us, we process your email address, message, attachments, and relevant message metadata to respond, investigate issues, and handle account, privacy, or copyright requests. Cloudflare routes incoming support mail and Google provides the destination email service. Send only information needed for your request.

Public game information

We collect market information from Hypixel's public API, including item and auction identifiers, prices, times, item attributes, and seller or buyer player identifiers where supplied. Auction pages and the available API may show those identifiers and historical records. Public availability does not necessarily make information anonymous or remove applicable privacy rights. These records are collected independently of whether a player has a SkyMarket account.

Service providers and sharing

We use Cloudflare for site delivery, security, analytics, and inbound email routing; Stripe and Link to sell Premium, take payments and handle tax; backend hosting and infrastructure providers to run and store the service; Google for support email and, when selected, sign-in; and Discord when its sign-in option is available. Providers receive information needed for their role. Some provider processing is also governed by their own privacy notices: Cloudflare, Google, and Discord, and Stripe, and Link.

Public game records can be viewed by other people. Account email addresses and sign-in records are not published as part of those market pages. We may disclose relevant information when required by law, to protect rights or security, or to advisers who need it for those purposes. Copyright complaints and related contact information may need to be shared with affected parties, advisers, or authorities to handle a dispute.

Retention and deletion

  • Account and linked sign-in information remains while the account exists. You can request account deletion through [email protected].
  • Purchase records stay with the account and are deleted with it. Stripe keeps its own payment records for as long as the law requires them.
  • Session records have expiry and revocation information. A session ending is not the same as immediate deletion of its database record.
  • Support correspondence is retained to handle requests, follow-ups, and disputes. Security and administrative records may be retained to investigate abuse, meet legal obligations, or establish and defend claims.
  • Backup copies may remain after records are removed from active systems until backup archives rotate. Provider records are also subject to those providers' retention practices.
  • Historical auction and sale records are kept long term, without a fixed automatic expiry, to provide market history. They are separate from SkyMarket account records.

Deleting a SkyMarket account does not automatically delete independently collected game records. We assess requests relating to those records under applicable law. We will explain any lawful limitation on a deletion request, including information that must be retained for legal or security purposes.

Your choices and requests

You may browse public pages without signing in, change local preferences, clear browser storage, and sign out. Contact [email protected] to request access, correction, or deletion of information relating to you. Depending on applicable law, you may also have portability, restriction, objection, consent-withdrawal, opt-out, appeal, or regulator-complaint rights. We respond within applicable legal deadlines and explain any lawful refusal or limitation.

We may need proportionate information to verify a request, such as confirmation from a linked account email. Do not send a password or government identification unless a specific, justified verification process has been explained.

Children

SkyMarket is not intended for children under 13. Accounts are intended for users 13 or older, subject to applicable age and guardian-consent requirements. We do not knowingly collect personal information from children under 13 except as legally permitted. If you believe a child has supplied information to us, contact [email protected] so we can investigate and take the steps required by law.

Security and processing locations

We use safeguards to protect information, but no online service can guarantee absolute security. Infrastructure and communications providers may process information in countries other than your own. This policy does not waive mandatory protections available to you under applicable law.

Changes

We will update the date on this page, provide appropriate notice of material changes, and obtain consent where legally required before making relevant changes to processing. Privacy questions: [email protected].