Privacy Policy

Overview

Minecraft Index collects only the data needed to operate the service. We do not sell your data, send marketing emails, or use tracking cookies. This policy explains what we collect, why, and how it is handled.

Data We Collect

• Email address

  Collected at registration. Used to identify your account and send transactional emails (verification, payment notices).

• Password

  Stored as a bcrypt hash. We never store or transmit your password in plain text.

• IP address

  Recorded on authentication attempts and votes. Used exclusively for rate limiting and abuse prevention, never for tracking or profiling.

• Server data

  Information you submit when listing a server: name, IP address, description, tags, banner image, Discord, website, and Votifier credentials. This data is displayed publicly as part of the listing.

• Session token

  Set as an httpOnly cookie on login and cleared on logout. It is not accessible to JavaScript and is not transmitted to third parties.

• Payment data

  If you purchase Gold or win a sponsored slot auction, Stripe processes your payment. We store only your Stripe customer ID. We never see or store your card details.

• Auction bid data

  Bids you place in sponsor auctions (server, amount, timestamp) are stored and displayed publicly on the auction leaderboard in real time.

How We Use Your Data

• To create and manage your account
• To display your server listings publicly
• To process votes and apply cooldowns
• To manage Gold membership access and sponsored slot assignments
• To send transactional emails: email verification on signup, and payment-related notifications for sponsored slots
• To enforce rate limits and prevent abuse using IP addresses

We do not send marketing emails, newsletters, or promotional messages. The only emails we send are directly related to actions you take on the platform.

Third Parties

• Stripe

  Used to process payments for Gold memberships and sponsored slots. When you make a payment, your card data is handled directly by Stripe under their privacy policy. We receive only a customer ID.

• MailerSend

  Used to deliver transactional emails (verification and payment notices). Your email address is shared with MailerSend solely for this purpose.

We do not sell, rent, or share your personal data with any other third parties.

Cookies

We set one cookie: a session cookie named session, created when you log in and deleted when you log out. It is httpOnly (not readable by JavaScript) and is used solely to authenticate your requests.

We use no analytics cookies, tracking pixels, advertising cookies, or any other cookies.

Data Retention

• Account data is retained while your account is active.
• Player count stats are available in the dashboard for 30 days (free) or 6 months (Gold). Raw stat data may be retained longer for operational purposes.
• Vote records are used to enforce the 24-hour cooldown and are retained for that purpose.
• Auction bid and payment records are retained as financial records.

Your Rights

• You can delete your account and its associated data at any time from your account settings.
• You can update your server listings or remove them at any time.
• To request data access, correction, or deletion beyond what the UI provides, contact us at [email protected].

Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.