Personal Data Protection
Briefly and without legalese: what we know about you, why we need it, and what you can do about it. Effective from 29 September 2026.
Who processes the data
The personal data controller is the website operator. MinecraftList.eu. For all matters concerning personal data, contact us via contact form — We respond within one month at the latest.
What data do we process and why
When you create an account
- Nickname, e-mail and password — without it, you can’t log in. We store passwords only as an irreversible hash, never in readable form.
- In-game nickname (optional) — so that we know it's you for votes and reviews.
- Sign in with Google or Discord — from the provider we receive your user ID, name, and email so that we recognize you next time. We do not see the password to these accounts.
- Where did you come from? (UTM parametry,
fbclid, referring page) — just so we know which campaign brings people to the website. It is stored with the registration, not with your behavior.
When you vote for a server
For voting, we store. just an unreadable fingerprint of your IP address (an unreadable code from which the IP address cannot be recovered), the nickname you voted for, and the time. It serves a single purpose: so that voting happens only once every 2 hours and cannot be bypassed. We do not store a readable IP address.
When you write a review
We store the review text, rating, nickname, and whether you are a verified player of the given server. We publish reviews with the nickname; the email is never displayed with them.
When you add a server and are not logged in
From the form we process the server name and address, and from the account section the email and nickname — from a single submission, this creates both an account and a server.
Server and Statistics Measurement
For servers, we only measure technical data: whether it responds, how many players it has, what version, its MOTD and the icon that the server itself sends. For visits to server pages, we keep only the daily total of views — without IP addresses, without browser identification, and without any information about who viewed. We also count views and clicks for premium placements in aggregate.
Server status is measured by our servers and a measuring computer in the Czech Republic; we do not process any personal data for third-party servers.
Where the visitor comes from (country and city)
Our own visit counter determines only the country and city a visit came from, using a public GeoIP database directly on our server — the IP address is never sent anywhere and only an aggregate daily count is stored. It serves to show where visitors come from, not to identify a person. Location data: IP Geolocation by DB-IP.
To recognise that the same browser is pretending to be several visitors (a scraper), we keep an irreversible fingerprint of the browser and the address for 7 days. The IP address or browser cannot be recovered from it.
When we address the server operator
For servers that we have included in the list from public sources, we are looking for publicly published contact for the operator — e-mail on the server's website (contact page, link
mailto:) or an invitation to his Discord. We just want to let him know that his server is in the list and that he can claim the profile for free. In doing so, we store the address, the address of the page we took it from, and the status of the outreach (when we wrote and how it turned out).
The legal basis is legitimate interest (Article 6(1)(f) GDPR) — to inform the operator that their server is in the list. We use the contact only for this communication; every message contains an unsubscribe link and Anyone who unsubscribes, we never write to them again.. We keep contact for no more than 2 years from the last message, and upon request we will delete it even earlier.
Cookies and advertising measurement
Necessary We always use cookies — they keep you logged in and protect forms. Without them, the website doesn't work, so we don't need consent for them.
Measurement and advertising (Google Analytics 4 and the Meta pixel for Facebook and Instagram) are active on every visit — the site has no cookie bar. You can turn them off yourself in your browser (by blocking cookies for this site or in private mode) — we won’t see such a visit.
Measurement status — what exactly your browser sent, and whether the site outputs verification tags, is shown by measurement check (the data is collected as the page loads).
Custom visitor counter. To know how many people visit the site, where they come from, and what they view, we keep our own anonymous counter. It stores only daily totals — where the visit came from (search engine, link, advertising campaign), which page, from mobile or desktop, and how many views there were. It does not store the IP address; no specific person can be identified from it. and nothing is sent to any third party. It stores nothing on your computer and sends nothing about you anywhere, which is why it also sees visits for which you turned the measurement off in your browser.
Who will receive the data?
- Poskytovatel hostingu — servers are in the European Union.
- Google (Analytics) — receives visit statistics (anonymised IP address, pages opened). We use a Google account only when you sign in with it.
- Meta (Facebook and Instagram) — receives an anonymous signal about the visit for ad measurement and remarketing.
- Discord — when you log in with Discord or are on our Discord server; there Discord processes data according to its own policies.
- Email service provider — so that we can send you account verification and voting notifications.
We do not sell or share data with anyone for third-party advertising.
How long do we keep them?
- Account — until you delete it. Deleting your account will also remove your reviews and the data associated with it.
- Unreadable IP fingerprint for a vote — for as long as the vote exists (for limits and statistics).
- Measured server data and aggregate statistics — long-term, but without any personal data.
Your rights
You have the right to access your data, to rectify or erase it, to restrict processing, to data portability and to object. Just write to from the address you registered with. If you are dissatisfied with the answer, you can contact Office for Personal Data Protection (uoou.cz).
Younger players
The website is also intended for younger players. If you are under 15 years old, create an account only with the knowledge of a parent or legal guardian. If we discover that an account belongs to a child without such consent, we will delete the account.
Changes to these policies
When something on the website changes that relates to your data, we will also update this page — the effective date at the top will be moved. We will notify you about material changes on the website.