Privacy Policy

1.Information we collect

Account information.

When you sign up we collect your email address, your chosen username, and a securely hashed version of your password (we never store your password in plain text). We also store your two-factor authentication secret so we can verify your login codes. This is the minimum needed to run an account.

Content you provide.

The server listings you create — names, descriptions, banner images, server addresses, Discord invites, tags, regions, and any Votifier configuration — and any reviews you write. These are largely public by design.

Technical and usage information.

We collect your IP address and basic request information when you use the Service. We use IP addresses for security and anti-fraud purposes — in particular to prevent vote manipulation and abuse — and we derive an approximate geographic location from your IP (GeoIP) to default the directory to servers near you. We do not use IP-based location to identify you personally.

Voting information.

When a vote is cast we record the Minecraft username used, the server voted for, the date, and the associated IP address, to enforce the once-per-day voting limit and to detect abuse.

2.How we use information

• to operate the directory, display listings, and run search;
• to authenticate you and keep your account secure;
• to count votes fairly, compute rankings and the Hall of Fame, and prevent fraud and abuse;
• to check server status (our pinger connects to the server addresses you list to record live status, uptime, and player counts);
• to default your view to a relevant region using approximate GeoIP location;
• to respond to support requests and to comply with legal obligations.

3.Cookies

We use a small number of first-party cookies, and we do not use them for advertising:

• mcsh_session — a signed, HTTP-only session cookie that keeps you logged in. Strictly necessary.
• mcsh_pending_2fa — a short-lived cookie used only between the password step and the two-factor step of login. Strictly necessary.
• mcsh_region — remembers the directory region you selected so we don’t have to re-detect it. Preference cookie; you can clear it any time.

Because these cookies are strictly necessary or a basic preference, the Service works without any advertising or tracking cookies. Clearing your cookies will log you out and reset your region preference.

4.Third parties and where data goes

We keep the number of third parties small and share only what is needed to run the Service:

• Cloudflare R2 — stores the banner images you upload.
• A GeoIP provider — used to turn an IP address into an approximate country/region for the default directory view.
• Mojang — when you vote we may check a Minecraft Java username against Mojang’s public API (a soft check only; it never blocks a vote).
• Server owners — when you vote for a server, the vote (including the Minecraft username you entered) may be delivered to that server via Votifier so it can grant in-game rewards.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and security of the Service and its users. Note that listings and reviews are public, and the third-party servers you connect to have their own privacy practices that we do not control (see our Terms).

5.Data retention

We keep account and listing information for as long as your account is active. When you delete a listing we remove it and its banner image; when you delete your account we remove your account data and listings. Some information may persist briefly in routine backups, and we may retain limited records (such as abuse or vote-fraud logs) for as long as needed to keep the Service safe or to meet legal obligations.

6.Security

Passwords are hashed with bcrypt, two-factor authentication is required on every account, sessions are signed and HTTP-only, and banner uploads are re-encoded server-side (stripping embedded metadata). No system is perfectly secure, but we take reasonable measures to protect your information.

7.Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it. See also the age requirement in our Terms of Service.

8.Your choices and rights

You can view and edit your listings, update your account, and delete your listings or account at any time from your dashboard. Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you, or to object to certain processing. To make a request, email [email protected].

9.Changes to this policy

We may update this Privacy Policy as the Service evolves. When we make material changes we will update the “Last updated” date above. Continuing to use the Service after changes take effect means you accept the updated policy.

10.Contact

Questions about privacy? Email [email protected].