Privacy Policy
Last updated 3 November 2026
This explains what lana.org and the Lana client collect, why, and what you can ask us to do with it. We collect as little as we can.
What we collect
- Your account: username, email address and a hashed password. If you sign in with Discord, your Discord ID and username.
- Your wallet and plans: credits added, plans bought and when they run until.
- Payments: handled by our payment providers. We receive confirmation that a payment went through, never your card number or wallet keys.
- Security logs: sign-in times and IP addresses, kept to protect your account and stop abuse.
- Shared prices (DonutSMP only): while you play on DonutSMP, the client sends the auction-house listings and item worth it sees (item, amount, price, the listing's seller and expiry where shown) so every member gets up-to-date prices. Each reading is stored with your account and when it was seen, so we can stop abuse. Other members only ever see the combined prices, never who contributed them.
What we don't do
No ads, no trackers and no selling your data. The site uses one cookie to keep you signed in. Apart from the shared prices above, the Lana client doesn't send your gameplay, chat or server list to us.
How long we keep it
Account and purchase records are kept while your account exists and for as long as the law requires afterwards. Security logs are deleted after 90 days. Shared-price readings linked to your account are replaced by your newer ones and deleted within 7 days of being seen (listings when they end, or 6 hours after they were last seen); upload records are deleted after 48 hours. Staff can delete everything you contributed at any time.
Your choices
You can ask for a copy of your data, a correction, or for your account to be deleted. Open a ticket in our Discord server and we'll take care of it.