1. Overview
Meridian Bank operates a banking platform for players on DemocracyCraft, a Minecraft server. This Policy explains what information we collect when you use our platform, how we use it, and your rights in relation to it. We collect the minimum information necessary to operate the service and do not sell your data.
2. Information We Collect
We collect the following information:
Identity
Your Discord user ID, Discord display name, Discord username, and Discord avatar. Your Minecraft in-game name (IGN) and Minecraft UUID, collected when you link your account during onboarding.
Financial Records
Account balances, transaction history (deposits, withdrawals, transfers), loan applications, loan balances, and payment records. These records are necessary to operate your accounts and provide banking services.
Session Data
Session tokens stored in an encrypted cookie to keep you signed in. We do not use tracking cookies or third-party analytics.
3. How We Use Your Information
We use your information only to:
- Authenticate you and maintain your session.
- Operate your accounts — processing deposits, withdrawals, transfers, and loan transactions.
- Verify your Minecraft identity via the Panoptic linking service, which checks your Discord-IGN link.
- Maintain accurate financial records as required to operate a bank.
- Detect and prevent fraud, abuse, and prohibited conduct on the platform.
- Communicate with you about your accounts and significant platform changes.
We do not use your information for advertising, profiling, or any purpose unrelated to operating Meridian Bank.
4. Third-Party Services
We interact with the following third-party services:
- Discord OAuth — used for authentication. We receive your Discord ID, username, display name, and avatar from Discord when you sign in.
- Panoptic — a DemocracyCraft service used to verify that your Discord account is linked to your Minecraft account. Your Discord ID and Minecraft UUID are passed to this service during verification.
- DemocracyCraft Economy API — used to execute in-game withdrawals. Your Minecraft UUID and withdrawal amount are sent to this API when you initiate a withdrawal.
We do not share your information with any other third parties. We do not sell your data.
5. Data Retention
We retain your account and financial records for as long as your account is active and for a reasonable period afterward to satisfy any legal or operational obligations. Transaction records are kept indefinitely as they form part of the bank's financial history. If you close your account, your identity information may be removed upon request, subject to any retention obligations.
6. Security
Sessions are stored in encrypted, signed cookies. All financial operations are performed through authenticated server-side actions. We apply both application-level controls and database-level constraints to protect account balances. Webhook endpoints (used for deposit processing) require HMAC signature verification.
No system is perfectly secure. If you discover a security vulnerability in the platform, please report it to Meridian Bank staff via Discord rather than exploiting it.
7. Your Rights
You may request at any time:
- Access to the personal information we hold about you.
- Correction of any inaccurate information.
- Deletion of your account and personal information, subject to operational and legal constraints.
To exercise these rights, contact Meridian Bank staff via our Discord server.
8. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced in our Discord server. Continued use of the platform after an update constitutes acceptance of the revised Policy.
9. Contact
Questions or requests relating to this Policy can be directed to Meridian Bank staff via our Discord server.