Microsoft's privacy policy covers your data when using Minecraft services, but if you use the Minecraft Shop (run by a company called Snow Commerce), a completely separate privacy policy applies.
Consumer impact (what this means for users)
If you purchase from the Minecraft Shop, your personal data — including payment and purchase information — is handled by Snow Commerce under their own privacy terms, not Microsoft's, and this EULA provides no details about Snow Commerce's data practices.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Export Your Data
To understand what data Microsoft holds about you for Minecraft Services, review the Microsoft Privacy Statement and submit a data subject access request through Microsoft's privacy portal at privacy.microsoft.com. For Minecraft Shop purchases, separately contact Snow Commerce through shop.minecraft.net for their privacy terms.
Cross-platform context
See how other platforms handle Privacy — Incorporation of Microsoft Privacy Statement and similar clauses.
Users of the Minecraft Shop are subject to a third party's data practices without clear disclosure of what those practices entail within this EULA itself, creating a privacy gap for users who may not realize a different company is handling their data.
View original clause language
The Microsoft Privacy Statement applies to all Minecraft Services. The sole exception is the Minecraft Shop, which is managed by our friends at Snow Commerce, who are not part of us or Microsoft. Please review their terms and conditions, as their terms will apply to your usage of the Minecraft Shop.
(1) REGULATORY FRAMEWORK: This provision engages GDPR (Art. 13-14 transparency obligations, Art. 26 joint controller arrangements, Art. 28 processor agreements) for EU/EEA users. The split between Microsoft as primary data controller and Snow Commerce as a separate controller triggers GDPR accountability obligations. CCPA (§1798.100 et seq.) requires disclosure of third-party data sharing to California residents. COPPA (16 CFR Part 312) applies if minors use the Minecraft Shop and their data is collected by Snow Commerce.
(2)
🔒
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Applicable agencies
FTC
FTC has jurisdiction over deceptive privacy practices, including insufficient disclosure that a third-party company (Snow Commerce) is the data controller for Minecraft Shop transactions.
State Attorneys General, particularly in California, have jurisdiction over CCPA violations related to undisclosed third-party data sharing with Snow Commerce in the Minecraft Shop context.