Effective 29 September 2026

Privacy Notice

YourMCBrowser uses only the information needed to run the directory, support users and protect fair access.

• No advertising profileWe do not use advertising or analytics cookies and we do not sell personal information.
• Private account detailsEmail addresses, password records, sessions and security settings are never displayed in public listings.
• Practical controlsYou can edit listings, delete your account and contact us about your privacy rights.

Who controls your data

YourMCBrowser operates this service and is the controller for the processing described in this notice. Use the privacy contact form to reach us or exercise a privacy right.

Information we use

• Account data: username, email address, securely hashed password, activation, password-reset and session records. If you choose to connect Discord, we store your Discord user ID, display name and owners-role status so Crafty can assign or withdraw access. Private linking codes are hashed and expire after ten minutes; ownership challenge values are encrypted and expire after twenty minutes. When you publish a listing, its public “Added by” label shows your account username.
• Listing and vote data: submitted server details and banners, public Minecraft status results, votes, ownership and reward settings, and moderation records.
• Safety and support data: messages sent through the contact form and pseudonymous identifiers derived from a connection, account, listing, protected browser vote identity or Minecraft player name to enforce fair-use limits.
• Vote and reward data: the exact Minecraft player name entered for a vote is not stored in our database, server logs or browser storage. We keep a non-reversible keyed code derived from it for up to 48 hours to stop repeat votes. The exact name is sent only to the selected Minecraft server when its owner has activated automatic rewards. Protected Votifier connection settings supplied by a server owner are stored only while that reward connection remains configured.

Where information comes from

Account, listing, vote and support details come from you. Public server-status information is requested from the Minecraft endpoints that are submitted, and pseudonymous safety records are generated when protected actions are used. Required account fields are needed to create and secure an account; optional listing links and reward settings can be left empty.

Why we use it and our legal bases

• To provide the service you request: create and secure an account, activate or recover access, publish and edit listings, record votes and deliver configured rewards. This is necessary to perform our agreement with you or take requested steps before it.
• To operate a safe and reliable directory: check public Minecraft endpoints, prevent duplicate or abusive listings, keep voting fair, moderate content, diagnose faults and answer support. We rely on our legitimate interests in service security, integrity and support while limiting the data used.
• To meet legal obligations and handle claims: we may use or preserve limited information where applicable law requires it or where necessary to establish, exercise or defend legal claims.

Security and automated checks

We use appropriate technical and organisational safeguards. Protected actions use human-verification, request controls and short-lived pseudonymous safety identifiers. VPN, proxy, Tor, privacy-relay and hosting connections are permitted for account access, server management and voting; changing a connection does not reset a vote cooldown. Raw visitor addresses used for registration, server submission and voting are not stored in the application database. Automated anti-abuse checks may refuse or temporarily pause registration, submission or voting. If you believe a check is wrong, use the contact form so it can be reviewed. We do not use personal data for advertising profiling.

Cookies and browser storage

When you sign in, we use a strictly necessary secure session cookie. When a vote security check begins, we use a separate signed, secure first-party vote-device cookie for up to 400 days so the same browser remains subject to the 24-hour cooldown after an IP or VPN change. Only a non-reversible keyed code from that cookie is attached to a vote, and that link is removed after 48 hours. Local and session storage keep acknowledged view-expiry times to reduce repeat requests. Listing views include visible directory cards and profile visits, not unique people: the same IP address counts at most once per server in a rolling 24-hour window. IP-copy counts follow a separate rolling 24-hour window per IP address and server; the copy button remains available during that window. The website stores separate short-lived, per-server keyed network codes to deduplicate views and IP copies, not raw IP addresses or browser identities. These codes expire after 24 hours and are removed from the live database by routine cleanup. When you choose Favorite, your optional favorite-server IDs are stored only in this browser and are not automatically synced to an account or another device. Minecraft player names entered for voting are not saved in browser storage. Account deletion also instructs the browser to clear YourMCBrowser cookies and storage. We do not use advertising or analytics cookies.

Automatic vote rewards

If a server owner enables automatic vote rewards, we store the protected connection settings needed to deliver a vote to that server. When you vote, the entered Minecraft username is sent only to the selected Minecraft server. The server owner's own plugins decide whether and how to issue a reward.

Public community reviews

When you explicitly publish a review, its star rating, plain text, account username and publication/update dates are publicly visible. Do not include private information in a review. You can edit or remove your own review through the review controls. Deleting your account removes its authored reviews from the active website, including reviews of other people's servers. Deleting a server listing removes reviews of that listing. Ratings are community opinions; we do not claim to verify reviewers' gameplay.

Sharing and international processing

We do not sell personal information. Necessary information may be processed by providers that supply hosting, email delivery or human-verification services; shared with the selected Minecraft server for an enabled vote reward; or disclosed when lawfully required. Some providers may process information outside the country where you live, including outside the European Economic Area. Where applicable data-protection law requires safeguards for an international transfer, we use an approved mechanism, such as an adequacy decision or standard contractual clauses. Use the privacy contact form above to ask about the location and safeguard relevant to your information.

How long we keep information

• Unconfirmed accounts expire after 24 hours, password-reset links after one hour, normal browser sessions after 14 days and sessions created with “Remember me” after 30 days.
• Login-throttle records are kept for no more than 24 hours and pseudonymous abuse-prevention events for no more than 30 days.
• Owner setup observations contain only random, unlinked attempt hashes and step timestamps. They expire after 48 hours and are removed by periodic privacy maintenance. Short-lived spotlight receipt hashes expire within 30 minutes or when Premium ends, whichever comes first; anonymous view/open totals may remain with the listing. A local browser preference prevents repeated spotlights; it is not an advertising identifier.
• Account and listing information remains while the account or listing is active. Deleting an account removes the account, active sessions and tokens, owned listings, private reward settings and uploaded banners.
• Account, network, browser-vote and player-name identifiers attached to a vote are removed after 48 hours. The anonymous vote total and delivery result may remain with the listing.
• The signed vote-device cookie may remain in the browser for up to 400 days, unless it is cleared sooner.
• Structured administrator diagnostics use only a short pseudonymous network reference, never a raw connection address, and are deleted within 48 hours. They are excluded from the seven-day website backup.
• Support correspondence and limited legal or moderation records are kept only while reasonably needed for the request, security, dispute or legal obligation.
• Website access logs exclude visitor addresses, query strings, referrers, browser identifiers and form contents and rotate after 14 days.

Children

We do not ask for a date of birth or intentionally request sensitive information from children. If local law requires a parent or guardian to approve a young person's use of an online service, that permission should be obtained before an account is created or personal information is submitted. A parent or guardian can use the privacy contact form to ask us to review or remove information.

Your privacy rights

Depending on the law that applies where you live, you may ask to access, correct or delete your personal information, restrict or object to certain processing, receive a portable copy, or withdraw consent where processing relies on consent. These rights may have lawful limits. You may also complain to the privacy or data-protection authority responsible for your location. We may need to verify that a request relates to you before completing it.

Third-party links and servers

Listings can link to independent websites, Discord communities and Minecraft servers. Their operators control their own services and privacy practices, so review their notices before sharing information with them.

Changes and contact

We update the effective date when this notice materially changes. Send questions or requests through the privacy contact form.