Privacy Policy

When you create an account, we store:

• Your Minecraft username (IGN)
• Your email address
• Your password (cryptographically secured via hashing — never stored in plain text)

While you use the site, we also store what you create or do on it yourself: chat messages, journal entries, event and project sign-ups, votes, friendships and your notification history.

If you choose to donate, the payment itself is handled entirely by PayPal — we never see or store your bank or card details. We only keep what the donation generates on our side (for example a thank-you record linked to your account, if you tell us who you are), and donor names or emails are never shared beyond the project team.

The Iekcorbar app shows this same website. On top of the data above, the app only uses:

• A push notification token — a random identifier for your device, issued by Google Firebase Cloud Messaging, linked to your account when you log in and removed when you log out.
• Your notification settings — which kinds of push notifications you want (Profile page).

Push notifications are delivered through Google Firebase Cloud Messaging, which processes the token and the notification content (for example the sender and text of a chat message) solely to deliver it to your device. The app does not collect your location, contacts or advertising ID, and contains no ads.

You can switch push notifications off entirely or per category on your Profile page, or in your phone's Android settings.

To see how the website and app are used, we keep simple usage statistics in our own database — no Google Analytics or other third-party trackers, and no cookies:

• Which pages are opened, when, and from what kind of device, browser and app version.
• The website that referred you here (for example Discord), if any.
• If you're logged in, this is linked to your account so staff can see who uses the website and app. If you're not logged in, visits are only counted per day using an anonymous code that can't be traced back to you or your IP address.
• How often the Android app is downloaded.

Only staff can see these statistics. They are never sold or shared, and are deleted automatically after 90 days.

Your personal data is used exclusively for the operation and security of our services:

• Verifying and whitelisting your account on our Minecraft server.
• Letting you log in to the website and app, and managing your player profile.
• Sending you the notifications you've chosen to receive.
• Preventing abuse, account theft, and unauthorized registration under someone else's name.

Passwords are hashed with a per-account random salt and are never stored or logged in plain text. Your account data is stored in a database run by our hosting provider, who processes it only on our behalf. We don't sell your data or hand it to anyone else. Your data is kept as long as your account is active, or until you delete it (see below).

You have the right at all times to inspect, correct, or completely delete your data (Right to be Forgotten). You can delete your own account, whitelist entry, and associated data (journal, friendships, notifications, push settings and device tokens) yourself at any time from the Danger Zone on your Profile page — in the website and in the app. If you'd rather have staff do it for you, contact the server administrators via our official Discord server.

We don't use tracking, advertising, or marketing cookies. We only use what's needed to keep you logged in: a secure session cookie and your browser's local storage. The app additionally stores its push notification token on your device.

Registering requires you to meet the age requirement in our Terms of Service.