Children's Privacy Notice

Dracobyte LLC | Dracobyte | Effective April 20, 2026

This notice is written in plain language to help parents and guardians understand what information we collect from children under the age of 13, how we use it, and how they can control it, as required by the Children's Online Privacy Protection Act (COPPA).

1. Who This Notice Applies To

This Children's Privacy Notice applies to children under the age of 13 who use Dracobyte. Minecraft is popular with children, and we want parents to understand our practices. Our main Privacy Policy applies to all users and this notice supplements it.

2. What We Collect From a Child Under 13

After we receive verifiable parental consent, we may collect the following information from a child, limited to what is reasonably necessary to operate the Service:

Username, password, and the email address that was used to obtain parental consent.
Minecraft account identifier, if the child links one.
Technical information such as IP address, device type, browser, and access timestamps, used for security and abuse prevention.
Game world files, server configurations, and in-Service activity needed to run the child's server.
Messages the child sends to our support team.

We do not request a child's full name, home address, phone number, precise geolocation, photographs, video, or voice recordings as a condition of using the Service.

Persistent identifiers (for example an IP address or a session cookie) that we collect from a child are used solely to support the internal operations of the Service as permitted by the Children's Online Privacy Protection Rule, 16 C.F.R. Section 312.5(c)(7). We do not use persistent identifiers collected from a child to build a profile, target advertising, or contact the child outside the Service.

3. How We Use a Child's Information

We use the information strictly to:

Create and secure the child's account.
Host and operate the child's Minecraft server.
Provide support and respond to parent inquiries.
Detect and prevent abuse, including malicious activity targeting minors.
Comply with legal obligations, including reporting obligations related to child safety.

We do not use a child's information for advertising, profile building, or marketing. We do not sell or share a child's information as those terms are defined under U.S. state privacy laws.

Before we collect personal information from a child under 13 that goes beyond the limited internal operations allowed by COPPA, we obtain verifiable parental consent using one of the following methods, chosen to match the risk of the information we intend to collect:

Signed consent form returned by postal mail, fax, or electronic scan.
Government-issued photo identification verified by a trained employee or trusted third-party verification provider, with the identification deleted promptly after verification.
Transaction on a payment card or other online payment system that provides notification of each discrete transaction to the primary account holder.
Knowledge-based authentication question set where available and appropriate.
A video-conference with trained personnel where the parent presents government-issued identification.

When the information will only be used for internal purposes, we may use the email-plus approach: we send an initial email, and after the parent's reply we send a confirmation email a reasonable time later to verify the consent.

Our primary method. Today, we use the email-plus method as our default verifiable parental consent flow because the personal information we collect from a child is used only to support the internal operations of the Service. If we change the data we collect in a way that requires a stronger method, we will switch to one of the higher-trust methods listed above and update this Notice before the change takes effect.

5. What Parents Can Do

A parent or legal guardian may, at any time:

Review the personal information we have collected from their child.
Ask us to delete that information.
Refuse to permit further collection or use of that information.
Revoke consent, which will result in termination of the child's account and deletion of associated personal information, subject to lawful retention needs.

To exercise these rights, email privacy@dracobyte.pro from the address used during the consent process, include the child's username, and describe the request. We will verify the request before taking action. We do not charge for handling these requests.

6. Disclosure to Third Parties

We disclose a child's personal information only to service providers strictly necessary to run the Service (such as our hosting provider and Cloudflare for security), to law enforcement as required by law, or to protect the safety of the child or others. These service providers are bound by contractual terms that restrict their use of the information to support purposes.

7. Data Retention for Children's Data

We retain a child's personal information only as long as reasonably necessary to fulfill the purpose for which it was collected, plus a limited period to comply with legal obligations, resolve disputes, and enforce agreements. Parental consent records are retained until the child turns 13 plus three years to support audit and compliance.

8. Security

We take reasonable steps to protect children's information, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is perfectly secure, and parents should help children choose strong passwords and avoid sharing account credentials.

9. Changes to this Notice

If we make material changes affecting children's privacy, we will provide direct notice to parents of record before the changes take effect. The current version of this notice is always available at https://dracobyte.pro/legal/children.

10. Contact Us

Operator: Dracobyte LLC, Dracobyte LLC, Illinois, USA. For service of process, contact support@dracobyte.pro to obtain the current registered mailing address.. Privacy contact: privacy@dracobyte.pro. General support: support@dracobyte.pro.