Privacy Policy

Last updated: April 25, 2026.

1. What we collect

When you use MSID we may collect:

• Account information if you register: email address, display name, and (if you sign in with Google or Discord) the basic profile data those providers share with us.
• Server submissions: any information you enter about a server you list.
• Voting metadata: the Minecraft username you submit, your IP address, and a short-lived cookie identifier — used only to prevent duplicate votes within the same 24-hour window.
• Usage logs: standard server logs (IP, user agent, request path, timestamp) for debugging, abuse prevention, and rate limiting.

2. How we use it

• Operate the Service: display listings, accept votes, send Votifier deliveries.
• Prevent abuse: block automated voting, spam, and impersonation.
• Communicate: send transactional email if you sign up (no marketing).

We do not sell or rent your personal data to third parties.

3. Cookies

MSID uses a small number of cookies:

• Authentication — to keep you signed in.
• Vote dedup — a short-lived ID so anonymous votes can be tied to a single browser within the daily window.
• Cloudflare Turnstile — bot protection on the vote form. See Cloudflare's Privacy Policy.

We do not use third-party advertising or tracking cookies.

4. Third-party services

• Railway — cloud hosting for the web app, API, database, and cache.
• Cloudflare — reverse proxy, CDN, and Turnstile bot challenge.
• Google / Discord OAuth — optional sign-in providers.
• Cloudflare R2 — storage for server icons and banners.
• Resend — transactional email delivery (email verification, password reset).
• Minecraft server Votifier plugins — when you submit a vote with a Minecraft username on a server that has Votifier enabled, your IP address is forwarded to that server's Votifier plugin for in-game reward verification. Anonymous votes (without a username) and votes for servers without Votifier do not forward your IP to the server. MSID does not control how that server handles this data.

When you sign in with Google or Discord, MSID receives only the profile fields those providers expose by default (email, name, avatar). We do not request access to your contacts, files, or any other data.

5. Data retention

• Account data: retained while your account is active. You can request deletion at any time.
• Vote records: retained for ~90 days for abuse analysis, then anonymised.
• Server logs: retained ~30 days.

6. Your rights

You may request access to, correction of, or deletion of your data by contacting us through the channels listed on our About page.

7. Children's privacy

MSID is not intended for users under 13. If you believe a child has registered, please contact us so we can remove the account.

8. Changes

We will post updates to this policy here. Substantial changes will be highlighted at the top of the page.

9. Contact

For privacy questions, see our About page for contact details.