MonitorMC
Log inSign up

Privacy Policy

Effective: May 18, 2026

1. Who is the data controller

The data controller is Nichik Stanislav, sole proprietor (TIN 20258238), Republic of Armenia. Contact: [email protected].

2. What we collect

2.1 Account data

  • email address (and verification token);
  • display name and avatar URL provided by you or by your OAuth provider (Discord, Google, GitHub);
  • password hash (bcrypt) when you register with email;
  • preferred language.

2.2 Content you submit

  • server listings (name, address, description, screenshots, MOTD, banners);
  • reviews, ratings, votes, support tickets;
  • files you upload (banners, screenshots) under /uploads/.

2.3 Automatically collected technical data

  • IP address, user-agent, referrer, request timestamps (in server logs);
  • cookies needed for sign-in sessions (NextAuth, CSRF) and language preference;
  • page-view and click events used to compute server statistics shown on listing pages.

2.4 Payment data

Payments are processed by Lemon Squeezy. We never receive your full card number, CVV, or bank account details. We store the Lemon Squeezy subscription / order identifier, the variant purchased, billing status, customer id, and renewal/end dates — that is the minimum required to manage your subscription.

3. Why we process this data (legal basis)

  • Contract — to create your account, run your listing, and deliver paid features.
  • Legitimate interest — site security, abuse detection (rate-limiting, vote integrity, fraud), and computing the public ranking.
  • Legal obligation — tax and accounting records for paid purchases.
  • Consent — optional marketing/announcement emails (you can opt out at any time).

4. Who we share data with

We do not sell personal data. We share it only with processors who help us run the Service:

  • Lemon Squeezy (payments, invoicing) — operates as merchant of record.
  • Resend (transactional email delivery).
  • Cloudflare (DNS, CDN, DDoS protection).
  • Hetzner (server hosting).
  • OAuth providers (Discord, Google, GitHub) — only when you choose to log in via them, and only to the extent of the standard profile scopes.

We may also disclose data when required by law, or to protect rights, property, or safety.

5. International transfers

Some of the processors above are located outside Armenia (United States, European Union). They are bound by their own data-protection commitments. By using the Service you acknowledge that your data may be transferred and stored outside your country of residence.

6. How long we keep it

  • Account: while the account exists. After deletion, the email, password hash and personal identifiers are removed; aggregated stats and moderation logs may be retained for up to 24 months for abuse prevention.
  • Payment records: 5 years (Armenian accounting rules).
  • Server query logs (player counts, uptime samples): up to 365 days, then aggregated.
  • Server logs (IP, user-agent): up to 90 days.

7. Your rights

Subject to applicable law, you have the right to access, rectify, port, restrict, or delete your personal data, and to object to processing. To exercise any right, write to [email protected]. We respond within 30 days. If you believe we mishandle your data you may also complain to the data-protection authority in your country.

8. Security

We use HTTPS (TLS 1.3) for all traffic, bcrypt for password hashes, Cloudflare WAF and rate limiting, signed-cookie sessions, and authenticated origin pulls between Cloudflare and our origin server. No service is perfectly secure — if you suspect a vulnerability please email [email protected].

9. Cookies

We use only strictly-necessary cookies (auth session, CSRF token, language preference). We do not run third-party analytics or advertising trackers. Cloudflare may set its __cf_bm cookie for bot-management — see their privacy policy.

10. Children

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has registered an account, contact us and we will delete the account.

11. Changes

If we change this policy we will update the "Effective" date and announce material changes on the homepage.

12. Contact

For privacy questions: [email protected].