Privacy Policy
Last updated:
What VoxelRank collects, why, how long we keep it, and how to make us delete it.
Written in plain language by the people who run VoxelRank. It describes what this site actually does · it is not legal advice, and it does not replace advice from a qualified lawyer in your country.
On this page
Who we are#
VoxelRank (https://voxelrank.com) is a game server list. Players browse servers and vote for them; server owners list their servers and receive those votes in-game. We are the controller of the personal data described on this page. Written questions go to privacy@voxelrank.com and we answer within 30 days.
If you run a listed server, note that you are the controller of whatever happens on your own server - this policy only covers what happens on this website.
What we collect and why#
| Data | Where it comes from | Why we need it | Lawful basis (GDPR Art. 6) |
|---|---|---|---|
| Account · username, e-mail address, password (stored only as a scrypt hash with a per-user random salt), interface language, role, sign-up date | You, at sign-up | To create your account, sign you in, let you manage listings and contact you about your account | Contract (Art. 6(1)(b)) |
| Server listings · server name, address, description, links, banner URL, Votifier keys and API key | You, when you add or edit a server | To publish the listing, ping the server for a live player count and deliver votes to it | Contract (Art. 6(1)(b)) |
| Votes · the in-game username you type, the server, a timestamp and the IP address the vote came from | You, when you vote | To count the vote, deliver the reward to the server, and enforce the one-vote-per-24-hours cooldown so the ranking is not trivially botted | Legitimate interests (Art. 6(1)(f)) · running a ranking that is not fraudulent |
| Reviews, server updates, reports · the text you write, your account (if signed in) and the reporting IP | You | To publish reviews, and to investigate reports of broken, fake or abusive listings | Contract for reviews; legitimate interests for abuse handling |
| Vote reminders · the in-game name you subscribe with and the server it is for; for browser notifications, the push subscription your browser generates (an endpoint address at Google, Apple or Mozilla plus two public keys) and your time-zone offset, so quiet hours are your quiet hours; for e-mail reminders, your e-mail address | You, when you switch a reminder on | To send you one notification at the moment your 24-hour cooldown on that server ends, and nothing else. The time-zone offset and the name are what make "the moment" the right one for you | Consent (Art. 6(1)(a)) · you switch it on, and switching it off deletes the record |
| Join intent · when you press "copy IP and join" on a listing and this browser already has an in-game name on file, the server and that name, plus a salted hash of your IP address. The address itself is never written down, and the hash cannot be turned back into it | You, when you press join | So that if the server you join asks us "did the person now connecting from this address press join on my listing?", we can answer yes or no. That is the whole use: a server can offer a welcome gift to players who genuinely came from here instead of to anyone who types a name. The server is told yes or no and never sees an address, a hash, or anything derived from one | Legitimate interests (Art. 6(1)(f)) · letting a server recognise a genuine arrival without either side learning anything about you |
| Technical logs · IP address, request path, user agent, timestamp, error traces | Automatically, by our web server | Security, rate limiting, debugging and abuse investigation | Legitimate interests (Art. 6(1)(f)) |
| Payment records · plan, amount, invoice reference, the account it belongs to | Tebex, when you buy a premium listing | To activate what you paid for and keep the books | Contract, and legal obligation for tax records (Art. 6(1)(c)) |
We do not ask for and do not want special-category data (health, beliefs, biometrics and so on). Please do not put any in a description, review or report.
Your card details never reach us. Payments for premium listings are planned to run through Tebex, which acts as merchant of record and handles the card data itself. We receive only the fact that a payment succeeded and what it was for.
Voting, IP addresses and anti-fraud#
A vote is only useful if it is hard to fake. When you vote we record the in-game name you entered, the server, the time, and the IP address the request came from, so that the same address cannot vote for the same server again for 24 hours. We also run a simple maths captcha and per-IP rate limits.
Vote IP addresses are stored as a salted hash rather than in the clear, and the vote log is purged after 90 days. Aggregate vote counts (how many votes a server got in a month) are kept indefinitely - they are the ranking itself and contain no personal data.
Publicly, a vote shows only the in-game username and how long ago it happened, on the server's page. Choose an in-game name you are happy to see there. If you want a vote removed, write to privacy@voxelrank.com with the server and the username and we will delete it.
Pressing "join" on a listing
This is the shortest-lived thing we store, and the most tightly held. If you press "copy IP and join" on a server here while this browser already has an in-game name on file, we keep one row: the server, that name, and a salted hash of your IP address · for thirty minutes. Not seven days, not ninety. After that it is deleted, and it is deleted the moment it is read past its window.
It exists so a server can tell the difference between somebody who actually came from here and somebody who typed a name into a box. When you connect, the server's plugin asks us whether the address now connecting matches the one that pressed join, and we answer only yes or no. The server never receives your IP address, the hash, or anything that could be turned back into either. Nothing about this is shown on any owner-facing page.
It fails in the safe direction. A VPN, a mobile carrier, or a browser on IPv6 while the game connects over IPv4 all produce a "no" · you miss a welcome gift, which is the harmless outcome. We would rather that than a stranger collecting something meant for you. If you never press join, no such row is ever created.
Vote reminders#
Reminders are entirely optional and off unless you switch them on. There are two channels and they hold different things.
- Browser notifications. Your browser creates a push subscription: an endpoint address hosted by your browser vendor's push service (Google for Chrome, Apple for Safari, Mozilla for Firefox) and two keys. We store that, the in-game name the reminder is for, the server, and your browser's offset from UTC. We do not store your device, your user agent or your location. The content of every notification is encrypted for your browser alone · the push service relays bytes it cannot read.
- E-mail. Double opt-in: we send exactly one confirmation mail and nothing else ever unless you click the link in it. An address that never confirms is deleted after 7 days. Every reminder carries a one-click unsubscribe that needs no login and deletes the address on the spot.
We use it for one thing: telling you that your cooldown on a particular server has ended. It is never used to market anything, and it is never shared with the server you vote for or with anyone else.
Turning it off deletes it. Switching the toggle off removes the subscription here, not just the display. If you revoke notification permission in your browser instead, the push service tells us the subscription is gone the next time we use it and we delete it then. See how reminders work.
We deliberately do not offer SMS reminders. That would mean holding phone numbers for an audience that includes minors, for a message that a free channel already delivers.
Cookies and similar storage#
We set a small number of strictly necessary cookies (sign-in, language, theme, one-off messages, the in-game name you last voted with, and your cookie choice itself). Nothing optional is set until you accept it, and the default until you choose is essential only. The full table, with durations, is in the Cookie Policy, and you can change your mind at any time at /cookies/consent.
Advertising. This site carries advertising, which is how it stays free to use and free to list on. Ads are served by Google AdSense and are labelled wherever they appear. While your choice is essential only, no ad script loads at all. If you accept all cookies, ads load in non-personalised mode · they are chosen from the page you are on, not from a profile of you - because we do not operate a certified consent platform and will not serve personalised ads without one. Google may still set cookies for frequency capping, fraud prevention and reporting; those are listed in the Cookie Policy.
We do not run cross-site trackers or fingerprinting scripts of our own, and we never pass your account details, email or vote history to an advertiser.
Who else sees your data#
- Our hosting provider · runs the servers this site sits on and therefore processes everything above as our processor, under a data processing agreement.
- Avatar images · player heads next to recent votes are loaded from a third-party skin-render service (minotar.net). Your browser contacts them directly, so they see your IP address and the username in the image URL. If you would rather not load them, block third-party images for this site · the pages work fine without.
- Tebex · payment provider for premium listings, once payments go live. They are an independent controller for the payment itself; see their own privacy notice before you buy.
- The server you vote for · receives the in-game username you voted with, the timestamp and, over the Votifier protocol, the address the vote came from, so it can hand you the reward. That is the entire point of voting, but it does mean the server operator learns you voted.
- Your browser's push service · if, and only if, you switch on browser notifications. Google (Chrome/Android), Apple (Safari/iOS) or Mozilla (Firefox) relays the notification to your device and therefore sees your device's address and the timing. It cannot read the message: the content is encrypted end-to-end for your browser. We never choose that service · your browser does.
- Discord · only for servers whose owner has connected a Discord webhook to their listing. When they have, we post a vote leaderboard, a milestone or a monthly-reset notice into that owner's own Discord channel, and a leaderboard carries in-game usernames and their vote counts · the same names already shown publicly on the listing page and on player pages here. Nothing else is ever sent: no email address, no IP address or hashed address, no anti-fraud signal and none of the listing's visitor counters. Discord is an independent controller for whatever ends up in that channel. If you would rather your in-game name did not appear there, ask us at privacy@voxelrank.com and we will exclude it.
- Authorities · only where we are legally obliged, or where we must defend a legal claim.
We do not sell personal data, and we do not share it for anyone else's marketing.
How long we keep things#
| What | Kept for |
|---|---|
| Account and server listings | Until you delete the account or ask us to; listings can be removed at any time |
| Vote records (including hashed IP) | 90 days, then deleted; monthly totals survive as anonymous counters |
| Sessions | 30 days, or until you log out |
| Reviews and server updates | Until removed by their author, the listing owner or us |
| Push subscription for reminders | Until you switch reminders off, or until the push service tells us the subscription is gone · we delete it that same run |
| E-mail reminder subscription | Until you click unsubscribe, which deletes it immediately. Never confirmed? Deleted after 7 days |
| Queued and sent reminders | One reminder is queued at a time per player and server; a sent one is deleted after 7 days (that week is what enforces the daily limit) |
| A listing's Discord webhook, and its delivery log | Until the owner disconnects it, which deletes it immediately; the delivery log keeps the last 20 entries and nothing over 30 days. The log records what we sent and what Discord answered · it holds no player data |
| Abuse and DMCA reports | 12 months after the case is closed, so repeat offenders can be recognised |
| Web and error logs | Up to 30 days, except entries kept longer for a specific security investigation |
| Payment and invoice records | As long as tax law requires (typically 7-10 years, depending on country) |
Your rights and how to use them#
If you are in the EU/EEA or the UK, the GDPR gives you the rights below. We apply them to everyone, wherever you live, because keeping two standards is more work than keeping one.
- Access · a copy of the personal data we hold about you.
- Rectification · fix anything wrong. Most of it you can edit yourself in your dashboard.
- Erasure · delete your account and its data. Published reviews are anonymised or removed; aggregate vote counters stay, because they no longer identify you.
- Portability · your account and listing data as a machine-readable JSON export.
- Restriction · freeze processing while a dispute is open.
- Objection · object to anything we do on the basis of legitimate interests, including the vote anti-fraud logging. Bear in mind that if we cannot log the vote we cannot accept the vote.
- Withdraw consent · for anything you consented to, including optional cookies, with effect for the future.
To use any of them, e-mail privacy@voxelrank.com from the address on your account, or write from another address and be ready to prove the account is yours. We reply within 30 days; if a request is genuinely complex we may take up to 60 and will tell you why. There is no charge unless a request is repetitive or excessive.
If you think we got it wrong you can complain to your national data protection authority. We would rather you told us first · most of these are misunderstandings we can fix the same week.
Player head images#
Where we show the little Minecraft head next to an in-game name, your browser only ever talks to us. We fetch the image from minotar.net from our own server, cache it for about a week, and serve it from VoxelRank. The alternative · pointing the image straight at that service · would hand it your IP address and the name being displayed every time any page showing a head was loaded, and we are not doing that.
What minotar.net receives is a request from our server for a username. It does not receive your address, your cookies, or anything identifying you personally. If it is unreachable we draw a plain placeholder locally instead.
A head is not evidence that anybody owns anything. A name with no Mojang account simply gets the default Steve or Alex skin, which is what a cracked or offline name should look like · we pass that through unchanged, and nothing on this site claims a name is a verified account.
Listing statistics for server owners#
Owners can see how their listing performs: how often it was shown, opened, had its address copied, and how many of those copies turned into a confirmed arrival on their server. These are counters only - one number per server, per stage, per day. There is no visitor identifier of any kind in them, no address, no hash, and no way to work backwards to a person. That is also why they have no deletion schedule: there is nothing personal in the table to delete.
Obvious crawlers are excluded so the figures describe people rather than robots. The counts are approximations and are labelled as such where owners see them: copies are an upper bound on interest, and confirmed arrivals are a lower bound on reality.
Invitation links we send to server operators#
Some listings here were created by us, not by their owners: we found the address publicly, connected to the server the way a player would, and published what it sent back. When we write to the operator of one of those listings to tell them it exists, the message contains a short link of the form https://voxelrank.com/c/….
That link counts opens and nothing else. The code in it identifies which batch of messages it belongs to and which listing it points at · it does not identify you, and there is nothing in our records it could be joined against to work out who you are. Opening it adds one to a single number for that listing, and you are then immediately redirected to a normal page on this site, so the code is gone from your address bar before the page loads. It cannot end up in a bookmark, a shared link, or a referrer header.
We do not set a cookie for it, do not record your IP address, browser, or the time you personally arrived, and do not build any profile. There is no per-visit record to delete, because none is created. We also do not count recognised link previewers, so that the number describes people rather than chat software.
The page that link leads to states plainly that the listing is an unclaimed stub we built ourselves, and carries a form for asking us to take it down. That form stores only what you type into it, including a reply address if you choose to give one · which is optional, and used only to answer that one message. It is deliberately the one report form on this site that does not record the sender's IP address: we listed you without asking, so getting back out again cannot cost you an address.
How we protect your data#
- Passwords are hashed with scrypt and a random per-user salt. We never store or log the password itself, and we cannot tell you what it is.
- Session cookies are HttpOnly and SameSite=Lax, and are marked Secure over HTTPS.
- The site is served over TLS; the database sits on the application server and is not publicly reachable.
- Sign-in, registration, voting and reporting are rate limited to blunt brute-force and spam.
- Only a small number of administrators can read reports and account records, and only to do their job.
No system is perfect. If a breach puts your rights at risk we will notify the competent supervisory authority within 72 hours and tell affected users without undue delay. Found a hole? Please tell security@voxelrank.com before telling anyone else · we will not take legal action over a good-faith report.
Children#
VoxelRank is not directed at young children, and you must be at least 13 to create an account. Where local law sets a higher age for consenting to online services · up to 16 in parts of the EU · that higher age applies to you, unless a parent or guardian gives permission.
You do not need an account to vote. If you are a parent or guardian and believe a child has given us personal data, write to privacy@voxelrank.com and we will delete the account and its data promptly.
International transfers#
Our servers are in the EU. Some of the third parties above (payment processing, avatar images) may process data outside the EEA. Where they do, transfers rely on an adequacy decision or on the European Commission's Standard Contractual Clauses. Ask privacy@voxelrank.com for the current list of processors and their locations.
Changes to this policy#
When we change how we handle data we update this page and move the "last updated" date at the top. For changes that materially affect you · a new processor, a new purpose · we also put a notice on the site for at least 14 days before they take effect. Old versions are available on request.
Trademarks and affiliation#
VoxelRank is an independent, community-run listing site. It is not affiliated with, endorsed by, sponsored by, or in any way officially connected to Mojang Studios, Mojang AB, Microsoft Corporation, or any other publisher, developer or rights holder of a game listed here. All game names, logos and trademarks are the property of their respective owners and are used here only to describe the servers being listed.