PRIVACY POLICY

Information you give us

• Account data: your email address, a username or display name, and a password. Passwords are stored as hashes by our authentication provider — we never see your plain-text password.
• Server details: the server name, software and version, and the configuration you enter, such as max players, MOTD, and seed settings.
• Content you upload: world files, plugin and mod jars, configuration files, and anything else you place on your server.
• Support messages: the contents of emails or messages you send us, so we can answer them.

Information created by using the Service

• Operational logs: server console output, start and stop events, and queue activity. Minecraft server logs can include player names and the IP addresses players connect from.
• Owner visibility: if you run a server, its logs and files belong to you, so you can see the IP addresses of players who connect. When you join someone else's server, its owner can see yours.
• Technical data: IP address, browser user agent, timestamps, requested URL, and similar request metadata used for authentication, rate limiting, abuse prevention, and debugging.
• Session data: a login cookie or token that keeps you signed in.
• Security records: limited logs of authentication events and administrative actions on your account or server.

Analytics

We run a self-hosted, cookieless analytics tool (Umami) for page views and referral sources. It does not set advertising cookies and does not track you across other websites. The tracker is served from our own domain so requests are not shared with a third-party analytics company.

We also use Google Analytics 4 to understand how the site is used — pages visited, approximate region, device and browser type, and referral source. Google Analytics sets cookies (for example _ga) and processes the data on Google's infrastructure. For visitors in the European Economic Area, the UK, and Switzerland it starts with consent denied and only measures after consent is given through our consent message.

Analytics are used in aggregate: which guides and tools help people, and where the site is slow or broken.

Advertising

The free tier is funded by ads. When advertising is enabled, third-party ad networks may collect information such as your IP address, device and browser details, and may set cookies or similar technologies to select and measure ads.

Google is one of the third-party vendors that serves ads on this site. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. These cookies may be associated with the doubleclick.net domain or Google domains.

You can opt out of personalized advertising by visiting Google Ads Settings at https://adssettings.google.com. You can also opt out of some third-party vendors' use of cookies for personalized advertising at https://optout.aboutads.info. Opting out does not stop ads from appearing; it means the ads you see are not tailored using your browsing history.

Other third-party vendors and ad networks may also serve ads on this site under their own privacy policies. Where a provider offers an opt-out for personalized advertising, you can use its tools, or use the industry opt-out page linked above.

Those providers handle that data under their own privacy policies; we do not receive your individual ad profile.

We also run a local check for whether an ad blocker is active so the free tier can be gated correctly. The check runs in your browser; it does not report which extensions you have installed.

How we use your data

• Create and secure your account, sign you in, and recover access.
• Provision and operate your Minecraft server, including through our hosting panel and infrastructure.
• Run the fair-use queue so servers start and stop in turn.
• Set up optional server addresses through our DNS provider.
• Answer support requests and diagnose problems.
• Protect the Service: detect abuse, attacks, spam, and violations of our Terms of Service.
• Understand which content and features are useful, using aggregate analytics.
• Show advertising that keeps the free tier free.
• Meet legal obligations and enforce our agreements.

Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (keeping the platform secure, preventing abuse, and improving the Service), consent (where required for personalized advertising or optional features), and legal obligation (when we must retain or disclose something by law).

You can withdraw consent at any time for the parts of the Service that rely on it, without affecting your ability to use the core free hosting.

Who we share data with

We share data only with service providers that make the platform work, and only as far as they need it:

We do not sell your personal information, and we do not rent or trade it. If we are ever required to disclose data by law, we will do so only to the extent required and, where allowed, let you know. If the project changes hands, data may transfer to the successor under this same policy.

• Authentication and database hosting (Supabase) for accounts, sessions, and platform records.
• The game hosting panel and infrastructure that actually run your Minecraft server.
• DNS and network providers (Cloudflare) for optional server addresses and SRV records.
• Email delivery providers, for account and security emails.
• Advertising networks, when ads are enabled and shown to you.
• Google Analytics (Google), for aggregate traffic and usage statistics.
• Analytics software running on our own infrastructure.

Cookies and similar technologies

• Essential: a login session cookie or token. The Service cannot work without it.
• Analytics: our self-hosted Umami analytics are cookieless. Google Analytics may set cookies such as _ga; for the EEA, the UK, and Switzerland they are only set after you consent through our consent message.
• Advertising: third-party ad networks, including Google, may set cookies when ads are enabled. The Advertising section explains how Google uses these cookies and how to opt out. We do not set ad cookies ourselves.

How long we keep data

Account data is kept while your account exists. Server files and worlds are kept until you delete them or ask us to delete your account. We do not delete server data merely because a server has been inactive or stopped for a long time.

When you request deletion, we remove account data, server files, and associated records, and remove or anonymize data from active systems. Residual copies may remain in backups for a short period before they age out, and we may retain limited records where the law requires it or where needed to resolve an ongoing dispute or abuse case.

Security and request logs are kept for a limited time, long enough to investigate incidents, then deleted or aggregated.

Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, email [email protected] from the address linked to your account. We may ask you to verify that you control the account before acting. We will respond within the time required by applicable law.

• Right to know and access the personal data we hold about you.
• Right to correct inaccurate data.
• Right to delete your account and associated data.
• Right to a portable copy of data you provided.
• Right to object to or restrict certain processing.
• Right to opt out of personalized advertising, and of the sale or sharing of personal information for targeted advertising, where those laws apply. We do not sell personal information; opt-outs can be exercised through the links in the Advertising section or by emailing us.
• Right to lodge a complaint with your local data protection authority.

Security

We protect data with measures that include encrypted connections (HTTPS), hashed passwords, access controls and least-privilege accounts, and monitoring for abuse and intrusion. Only people who need access to operate or support the Service have it.

No online service can promise perfect security. If you discover a vulnerability or a suspected breach, please tell us at [email protected] so we can act quickly.

Children

The Service is not directed at children under 13, and you must be at least 13 to create an account. If we learn that we hold personal data from a child under 13, we will delete the account and associated data. Parents and guardians can contact [email protected] to request removal.

International processing

We and our providers may process and store data in countries other than yours, including where our servers and infrastructure operate. Where required, we rely on appropriate safeguards for those transfers, such as standard contractual clauses with our providers.

Changes to this policy

We may update this policy as the Service or the law changes. The updated date at the top of the page always shows the current version. For material changes, we will announce the update on the site or by email before it takes effect.

Contact

Privacy questions, data requests, and security reports: [email protected]. Include your account email and, if relevant, the server name, so we can find your data quickly.