Effective July 20, 2026 · Commonwealth of Redmont law
This Privacy Policy explains what information GnomePay collects, why, and your rights over it, in line with the Commonwealth of Redmont Privacy Act. GnomePay coordinates identity and payments across the GnomeCorp services, so much of what it holds is what the Act protects most: financial records held by a private organisation, including balances and transaction history, are personal information under the Act, and we handle yours accordingly. We never require real-life information about you, including an email address.
Under Privacy Act s8 we do not require, and ask you not to provide, real-life personal information such as your legal name, age, address, phone number, email address, or images. Sign-in runs through Discord requesting only the basic profile: your Discord account id, username, and avatar. The sign-in scope deliberately excludes your email, so Discord never shows it to us. Keep real-life information out of payment memos and support requests.
GnomeAds banners run on GnomeCorp sites and partner sites. The ad frame sets one cookie, gads_vid, a random identifier used to cap how often you see the same campaign. It lasts a year, and your browser partitions it per site, so it cannot connect your visits on one site with your visits on another. We store a salted hash of it, never the identifier itself.
A serving record (the hashed viewer id, the hour of day derived from your browser timezone, the site and slot, the price, and whether the ad was seen or clicked) is kept for 30 days, then reduced to aggregate counts that identify no one. Your IP address is used in memory to limit request rates and is never stored or logged by the application, and production runs no geolocation, so not even a country is recorded. The ad frame is told which site and slot it sits in and your browser timezone, never which page you are reading.
GnomePay itself sets cookies only for sign-in: a session cookie readable by the server only, a request-forgery guard, and short-lived cookies for the Discord handshake. The one advertising cookie is gads_vid, described in section 3. There are no analytics cookies and no tracking pixels anywhere on the Service.
We process your information on the lawful bases in Privacy Act s9: to perform our contract with you (your account, balances, Transfers, campaigns, and payouts), with your consent (linking your Minecraft account), and for our legitimate interests (preventing fraud and invalid traffic, scheduling and capping ads by viewer-local time, keeping every ledger reconciled against the real Treasury balance, and securing the Service).
We do not sell personal information, and we run no analytics or data partnerships. One mirror is broader than our own books: for accounting and reconciliation, the Treasury feeds of estate accounts and the reporting feeds of Connected Services record each transaction's counterparty (in-game name and UUID), item-level trade detail, and recurring-payment patterns, including for players who have never used GnomePay. That is what any payee's books record about the people who pay them. We keep those records under the legitimate-interests basis for as long as the books they reconcile, and access is restricted to the operator.
Your rights under Privacy Act s6 include being informed about how your information is handled (this Policy), access to the information we hold about you, correction, deletion where the information is no longer needed, withdrawing consent, and making a complaint. Where a breach of the Act causes you quantifiable loss or harm, it lets you seek damages through civil proceedings in the Redmont courts. GnomeCorp (in-game firm 2231), as operator, is accountable for requests under this Policy; to make one, contact us through the Discord link below.
Money operations re-check your role on every write and fail closed. Advertising money is held apart from all other estate money in a dedicated account and reconciled against the real Treasury balance. Publisher API secrets are stored as hashes, impression billing is authenticated end to end, and the audit trail of admin actions records no network addresses. We may update this Policy; the current version lives at this address with its effective date, and we will note material changes in the Service.
To ask about your information, or to exercise any right above, reach us on the GnomeCorp Discord.