Privacy Policy

Overview

Capely ("we", "us") sells Minecraft cape redemption codes. This policy explains what we collect when you browse this site or buy a code, why we collect it, and what you can ask us to do about it. It is written to be read rather than to sound impressive. Capely is not affiliated with, endorsed by, or sponsored by Mojang Studios or Microsoft.

What we collect

Only what the shop needs to work. There is nowhere on this site to give us your real name, your postal address or your phone number, and we never ask for them.

• Your email address, typed at checkout. We send your receipt to it, which is also the copy of your code you can keep, and it is how we identify your order and contact you about it.
• Your order: the capes, the quantity, the price, the payment method, any discount code used, any referral code, and the reference our payment processor gives us.
• The description your browser sends with every request. It is stored with your order, to help us spot fraud.
• A Minecraft username, only if you use the try it on preview. Our server asks Mojang's public API for that account's skin and keeps the answer in memory for a few minutes so a repeat preview is quick. It is never written to our database, and your browser never talks to Mojang itself.
• A referral code, only if you arrived through a creator's link. It is kept in your browser for 30 days and recorded with any order you place in that time, so the creator gets the credit. It does not identify you.
• Page views: which page you opened, which cape if you were on a cape page, and the site you came from. There is more on this under Analytics below.
• A review, if you send us one: the display name you choose, your rating and what you wrote. Nothing is published until we have read it.

Our server also sees the address your connection comes from, because every web server does. We use it to limit how fast requests can arrive, so a script cannot drain the stock or hammer the site. We do not keep the address itself with your order. What we keep is a shortened, salted hash of it, stored with your order and with any review you send, so repeat activity can be recognised without naming you. The salt changes every day, so a hash cannot be turned back into an address or matched from one day to the next. There is one exception: a request that looks like an attack on the site is logged with the address it came from, so that address can be blocked.

How we use it

To take your order and issue your code. To find your order and answer you if you get in touch. To spot fraud and discount abuse. To credit a creator for a referral. To keep the records we need for accounting and tax. We do not sell your information, we do not share it for advertising, and we do not use it to build a profile of you.

Payments

Card details never reach Capely's server. A card payment is taken on a page hosted by Stripe, our payment processor, so your card number, expiry date and security code go to Stripe and not to us. We are told only that a payment succeeded or failed, with a reference and an amount. Stripe is given your email address, our order id, which capes you bought and what the order costs, and nothing else about you. A cryptocurrency payment works the same way on a page hosted by NOWPayments, which is given the amount and our order id and no email address at all.

Your code

Codes are issued automatically after a successful payment. They are shown to you on the order confirmation page and emailed to the address you gave at checkout, through our email provider, Resend. Your code is also held in your browser's session storage, so that page can show it again if you refresh, and it goes when you close the tab. We keep our own record of which code went with which order, so we can help if you lose it. Because a code has value only until it is redeemed, a code that has been shown to you is treated as sold. The Terms of Service explain what that means for refunds.

Cookies

This site sets no advertising cookies and no third party cookies. It sets two cookies of its own while you browse the shop, so we can count visitors and visits without a third party analytics service. One names your browser and lasts up to a year. The other names the current visit and lapses after 30 minutes of inactivity. Both are random strings, set by this site and read by nobody else, and neither carries your name, your email or anything you typed. They are set when your browser talks to our own API, so if you have Do Not Track or Global Privacy Control switched on, browsing alone will not set them. Clearing your cookies removes them.

What your browser keeps

Separately from cookies, the shop stores a few things in your own browser. They sit on your device and are not sent to us on their own.

• Your basket, as cape ids and quantities only, never prices. Every price is worked out by our server.
• The currency you chose to view prices in. The conversion is for display only and we charge in US dollars.
• A referral code, for up to 30 days, if you followed a creator's link.
• The order you are paying for, and the finished order including its code. Those two are session storage for the current tab and are gone when you close it.

Clearing your browser storage removes all of it.

Analytics

Our analytics are our own. There is no Google Analytics, no advertising pixel and no third party script anywhere on this site, and the fonts and the 3D code are served from our own server, so opening a page tells nobody but us that you were here. Your browser sends us a short note when you open a page: which page it was, which cape if you were on a cape page, and the site you came from. An order link's access token is stripped out before the page address is sent. Order and referral events are recorded by our server rather than by your browser, because a browser can claim a purchase that never happened. Requests that announce themselves as bots are not counted, and if your browser sends a Do Not Track or Global Privacy Control signal the page sends nothing at all. These usage records are deleted after 180 days.

Who else sees your information

Only where the shop cannot work otherwise. Our payment processor, to take the payment. Our email provider, Resend, to deliver your receipt: because that receipt contains your code, the provider handles both your email address and the code itself. Mojang's public API, if you use the try it on preview, which our server queries on your behalf. And anyone we are required by law to tell, such as in answer to a valid legal request. We do not share your information with advertisers or data brokers. The sale alerts we send to ourselves carry the order id, the capes and the amount, and no customer details. Our payment processors, our email provider and Mojang are outside the United Kingdom, so information sent to them is handled abroad.

Keeping it safe

The site is served over HTTPS. Cape codes are encrypted where they are stored, with a key held outside the database, so a copy of the database on its own does not reveal a single code. The database itself is not reachable from the web. We cannot promise that any system is impossible to break into, and we would not trust a shop that did.

How long we keep it

Order records, including the email address and any referral code on the order, are kept for as long as we need them for accounting, tax, fraud prevention and support. Usage records are deleted after 180 days. The referral code in your browser expires after 30 days. You can ask us to delete an order record and we will, except where we are required to keep it.

Children

This site is not aimed at children under 13 and we do not knowingly collect information from them. Minecraft is popular with younger players, so if you are a parent or guardian and believe your child has given us information, contact us and we will remove it.

Your choices

You can ask what we hold about an order, ask for a copy of it, ask us to correct it, or ask us to delete it. You can turn cookies off, switch Do Not Track on, or clear your browser storage at any time. Nothing here depends on us recognising you, although clearing your storage will empty your basket. To make a request, contact us below and tell us the email address you used at checkout, so we can find the order.

Changes

We will update this policy as the shop changes. The date at the top is when it last changed. Using the site after an update means you accept the updated version.

Contact

Reach us on Discord, which is where our support is. Requests about your information go there too. We send order receipts by email, but that address is not monitored for replies, so please do not use it to contact us.