In short. Open a support ticket in the Frost Discord server, from the Discord account linked to your Frost account, and say what you want: a copy of your data, a correction, deletion, or for us to stop a particular use. It is free. We answer within one month, and tell you if we need longer.
§1 What you can ask for #
| Request | What it means at Frost |
|---|---|
| Access | A copy of the personal data we hold about you across the website, license service and Discord bot, and how we use it. |
| Correction | Fix data that is wrong, such as your email address. |
| Deletion | Delete your data. Most of it you can delete yourself; see Account deletion. We also remove what self-service deletion leaves behind, except what we must keep (see below). |
| Portability | The data you gave us, in a machine-readable format (JSON). |
| Restriction | Pause our use of your data while a complaint about it is being checked. |
| Objection | Stop a use based on our legitimate interests, unless we have compelling grounds or need it for a legal claim. |
| Withdraw consent | Turn off Bazaar Share Stats in the client and delete your stats on the Bazaar page, or ask us to. |
| Human review | Ask a person to review an automated license refusal; see the Privacy Policy. |
| Opt out of sale or sharing (US) | Frost does not sell or share personal information for targeted advertising, so there is nothing to opt out of. You can still ask us to confirm this. |
Which of these rights you have depends on where you live. Where the EU or UK GDPR applies, you have all of them, within the limits the law sets.
§2 How to make a request #
- Open a support ticket in the Frost Discord server, titled "Privacy request", from the Discord account linked to your Frost account if you have one.
- Say which request you are making. If it is about the license service or the Discord server, include your Frost account ID (shown on your account page) or your Discord username.
- If it is about Hypixel auction data in the market data service, include your Minecraft UUID.
Do not send passwords, full license keys or identity documents. We will never ask for them.
§3 How we check it is you #
We match the request to the account using only what we already hold:
- A ticket from the Discord account linked to your Frost account or license: that link is the check; we may ask you to confirm in the ticket.
- No linked Discord account: we ask you to sign in to your Frost account and confirm a short code we give you, so we know you control it.
- For Minecraft UUID requests: we may ask you to confirm the request from that Minecraft account in a way we agree with you.
We will not ask for more information than we need to confirm the request, and we delete what you send for verification once the request is closed. If we cannot confirm a request comes from you, we will say so.
§4 Asking on someone else's behalf #
An authorised agent or a parent or guardian can make a request for someone else. We will need written permission from that person, and may still ask that person to confirm the request directly.
§5 How long it takes, and cost #
We reply within one month of receiving a request. If a request is complex or there are many, we may extend this by up to two further months and will tell you why within the first month. Requests are free, unless they are clearly unfounded or excessive, in which case we may refuse or charge a reasonable fee and explain why.
§6 What we may have to keep #
Some data cannot be deleted on request while we still need it, for example order records we must keep under tax or accounting law, or records needed to deal with fraud or a legal claim. If we keep anything, we tell you what and why, and delete it when the reason ends. Payments recorded on a public blockchain cannot be deleted by anyone.
§7 If you are not satisfied #
Tell us, and we will look again. In the EU or UK you can also complain to a data protection authority; see the Privacy Policy.