Privacy Policy
Effective TODO: owner — set effective date
Owner: this is a starter draft. Replace with your reviewed privacy copy before launch.
1. What we collect
- Account info — username, email, hashed password.
- Profile content — posts, comments, friends, donations.
- Minecraft linkage — your linked Minecraft UUID and username, plus stats reported by our servers.
- Logs — IP addresses, user agents, request timestamps for security and abuse prevention.
- Cookies — session tokens, preferences. We do not use third-party advertising trackers.
2. Why we collect it
To operate the Services, authenticate you, deliver donation perks, render leaderboards, and prevent abuse.
3. Sharing
We do not sell your data. We share data with processors necessary to operate the Services:
- Tebex — payment processing for donations.
- Cloudflare — DDoS protection, edge caching.
- Discord — for OAuth login if you connect a Discord account.
4. Retention
- Account data is retained while your account is active.
- Server uptime and ping history is retained for 30 days.
- Server access logs are retained for 90 days.
- Deleted account data is purged within 30 days of deletion request.
5. Your rights
You can request export, correction, or deletion of your data by emailing [email protected].
6. Children
The Services are not directed to children under 13. We do not knowingly collect data from children under 13.
7. Security
We use industry-standard hashing for passwords (bcrypt), TLS in transit, and disk-level encryption for backups. No system is perfectly secure; we will notify affected users of any breach within 72 hours of discovery.