This policy explains what data RadarMC (radarmc.org) collects, why and for how long we keep it, who we share it with and how you can control it. We process data under the data protection law of Ukraine and follow generally accepted principles, including those of the EU General Data Protection Regulation (GDPR): we collect only what we need, for clear purposes and on a lawful basis.
1.Data operator
The personal data controller is Мормуль Евгений Олегович, an individual; country of residence: Ukraine. For any question about your data, message RadarMC support on Telegram.
The policy covers the radarmc.org website, its subdomains and the APIs the service runs on. By creating an account - with email or through Google, Discord or Telegram - you consent to the processing described below.
2.What we collect
Account. Email (an account created through Telegram may have none), username, display name, avatar, profile bio, social links, privacy settings, sign-up and last-visit dates, and when you accepted the Terms of Service and this Policy - at sign-up with email or through Google, Discord or Telegram. Accounts have no passwords: you sign in with a one-time code from an email or through Google, Discord or Telegram.
Sign-in with Google, Discord and Telegram. Your account ID at the provider, email (if the provider shares it; Telegram does not), name and avatar. We do not store the provider’s access or refresh tokens: they are used only during sign-in and then discarded. On sign-up the provider’s avatar becomes your profile avatar.
Sessions and security. IP address, user agent and device type of each session; sign-in attempts (IP address, email, user agent, result) and temporary lockouts after failed attempts. When you sign in from a new device we send a notice with the IP address and device type.
Voting. Minecraft username, IP address, subnet (/24 for IPv4, /64 for IPv6), a vote fingerprint (SHA-256 hash of the username and IP address), vote time and delivery result. We need this to limit vote frequency and detect vote manipulation.
Activity and content. Reviews, ratings and replies, “helpful” marks, reports, favourites, server subscriptions, submitted places, comments and videos, notifications and notification settings.
Server owners. Server data (address, description, links, images), Votifier, reward and webhook settings, API keys. If the RadarLink plugin is installed on the server, we keep its status: the platform and its version, the RadarLink version, the number of players online and the reward settings (streak thresholds, number of commands and the owner’s labels, never the command text). Votifier, reward and webhook secrets are stored encrypted, API keys only as a hash. For a server listed in the catalogue, we send its name, description and up to 10 latest imported posts from its public Telegram and VK channels to AI services to suggest tags and slogan drafts to the owner (see “Who we share data with”).
Wallet and payments. Balance, transaction history (top-ups, Signal Boost purchases, bonuses, referral rewards), payment orders: amount, payment method and provider, status, the provider’s transaction ID. We never receive or store card or crypto wallet details - payment providers handle them.
Technical data. To count unique server page views we keep a marker with your user ID or IP address for up to 25 hours; the database keeps only daily counters without personal data. Rate limiting temporarily uses your IP address, email or user ID.
3.Copy statistics
When you copy a server address, we record the time, the page you copied it on and the server’s place in the list, along with your country and device type. We look up the country from your IP address in the MaxMind GeoLite2 database and the device type (computer, phone or tablet) from your browser’s User-Agent.
We do not store your IP address. To count unique visitors we keep a one-way code made from the IP address and a random key. A new key is created every day and deleted after two days. After that the code can no longer be linked to the address, and copies made on different days can no longer be linked to each other. The code is different for each server, so it does not show that the same person copied several servers.
So that repeated copies are not counted again, we keep a marker for 1 hour. It is made from the same code and does not contain the IP address.
If a server owner installs the RadarLink plugin, RadarLink sends us your nick, UUID and IP address when you join that server. We do not store the nick or the UUID. The IP address is used only at the moment it arrives: it is turned right away into the same daily code as for copies, and the address itself is never stored or written to logs. The code tells us whether the person who copied the server address in the previous hour joined it. Join records (the code, the time and whether the player uses Bedrock) are deleted after 90 days, and the server owner sees only the number of joins.
Individual records are deleted after 90 days, daily totals after 25 months. Site-wide copy totals for each hour (by country and device type) are kept just as long and hold no personal data. Server owners see totals, countries, device types and generated visitor names, and for each copy its time, page and place in the list. They never see IP addresses.
The public analytics pages show everyone the number of copies, the daily chart, unique visitors per day and each server’s place in the catalog. If the owner turns on “Open stats”, sources, countries, device types and the copy feed (time, page, generated visitor name, country and device) become public there too. IP addresses are never shown.
The “on the site” counter. To show how many people are on RadarMC right now, an open page tells us once a minute that the tab is open. We turn the IP address (or your account ID if you are signed in) into the same daily code with a random key as for copy statistics and keep it for at most 10 minutes, so a person with several tabs counts once. The IP address itself is not stored. We keep only the total number of people on the site in 5-minute steps, for 30 days. For the breakdown on the Analytics page the counter also notes the country (found from the IP, only the country code is kept) and the device type (computer, phone, tablet); next to the daily code they stay for the same 10 minutes, and the database keeps only the sums for each 5 minutes, also for 30 days. For the yearly stats these sums are added up into totals for each hour (overall, by country and by device), which are kept for up to 400 days. They hold no personal data. The counter uses no cookies.
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
4.Telegram notifications
If you connect the RadarMC bot in your notification settings, we store your Telegram chat ID and user ID, your @username (if you have one), language, the date you connected it, the state of the link (working, or the bot cannot reach you) and whether notifications are on.
The one-time code in the bot link is stored only as a hash and deleted within a day. Notification texts we send to Telegram stay in the delivery queue for up to 7 days after sending, and technical update IDs from Telegram for 2 days.
The notifications you turn on pass through Telegram (Telegram Messenger Inc.), and Telegram’s own privacy policy applies to that part.
You can disconnect the bot at any time in notification settings or by sending /stop to the bot. This deletes the link.
5.Why we use it
We process data only to run the service:
- sign-up, sign-in and account protection, including sign-in codes and links and new-device notices;
- the server catalogue, profiles, reviews, favourites, subscriptions and notifications;
- Telegram notifications, if you connect the bot;
- copy statistics for server owners and the public analytics pages;
- counting joins to a server after its address was copied, if the owner installed the RadarLink plugin;
- AI-generated tag suggestions and slogan drafts for server owners;
- counting votes, delivering votes to servers through Votifier and protecting the ranking from manipulation;
- wallet top-ups, Signal Boost purchases, bonuses and refunds;
- moderation and handling of reports;
- answering support requests;
- complying with the law.
The legal grounds are performance of the contract (the Terms of Service and the offer for paid services), your consent, our legitimate interests (keeping the service secure, protecting the ranking from manipulation and payments from fraud) and legal obligations. We do not sell data, show ads or use web analytics.
8.What other users see
- your username and avatar - next to your reviews, replies and other content;
- your profile at /user/username: display name, bio, social links, sign-up and last-visit dates if the profile is public; a private profile hides these fields, and the last-visit time can be hidden separately;
- your Minecraft username, number of votes and last vote time - in a server’s top voters list;
- your Minecraft username and the time of each counted vote - in the latest votes list on the server page; your account and IP address are not shown there;
- your username, the points and the boost dates - in the “Boosted by” list on the server page, if you chose to show your nickname when buying a Signal Boost; otherwise the list says “Hidden”;
- server details - for server owners.
Your email is never shown to other users.
9.Cross-border transfer
The services listed above (SpectraIP B.V., Resend, Lava.top, Plisio, Google, xAI, Discord, Telegram) may process data outside your country of residence and the operator’s country. We share with them only the data the related feature needs and use services that commit to protecting data under their policies and contractual safeguards.
10.How long we keep data
- account data - while the account exists. When you delete the account, your profile, email, connected accounts, sessions, notifications and sign-in history are erased immediately, and your reviews, favourites, subscriptions, places and videos are deleted;
- sessions - until they expire, plus 30 days, then they are deleted;
- sign-in codes and links and confirmation codes are valid for 10 minutes and work only once;
- rate-limit counters - from 1 minute to 24 hours, unique view markers - up to 25 hours;
- sign-in attempts (IP address, email, user agent, result) - 90 days;
- copy statistics - individual records for 90 days, daily totals and site-wide hourly totals for 25 months;
- the “on the site” counter - the daily code, the country code and the device type for up to 10 minutes, the total number of people on the site and the sums by country and device for each 5 minutes for 30 days, the same sums for each hour for up to 400 days;
- the Votifier delivery log (the player nick from the vote, time, result) - 30 days; when you delete your account, your nick is erased from the entries for your votes at once;
- tag suggestions and slogan drafts, including rejected ones (so we do not offer them again) - while the server is on the site; they are deleted when the server moves to another owner;
- notifications - 180 days after you read them, unread ones - 365 days;
- the Telegram link - until you disconnect it or delete your account; the one-time link code - up to a day (only its hash is stored), notification texts in the delivery queue - 7 days after sending, Telegram update IDs - 2 days;
- support chats in Telegram - 1 year after the last message, then deleted;
- votes - for server statistics, vote totals and ranking protection. When you delete the account, votes stay only in anonymised form: without your user ID, Minecraft username, IP address, subnet or fingerprint;
- reviews, reports, favourites and subscriptions - until you delete them or your account;
- wallet transactions and payment orders - 5 years from the transaction, including after account deletion: we need them to account for payments, refunds and disputes.
An unpaid top-up order expires after 24 hours but stays in your order history.
11.How we protect data
- connections to the site and the API use HTTPS;
- there are no passwords, sign-in works only with a one-time code or through Google, Discord or Telegram;
- the session token lives in a cookie scripts cannot read, and the access token lives only in the tab’s memory for 15 minutes;
- server owners’ secrets are encrypted, API keys are stored as a hash;
- after 10 failed sign-in attempts the account is locked for 30 minutes;
- administrative functions are available only to a small group of administrators.
12.Your rights
You can:
- view and edit your profile and privacy settings under “Settings”;
- view your active sessions and end them, including on all devices at once;
- configure on-site and email notifications;
- delete your account in the settings (transfer or delete your servers first) - your data is erased or anonymised at once as described in “How long we keep data”;
- access your data and get a copy in a machine-readable format, have inaccurate data corrected, ask for erasure or restriction of processing, and object to processing based on legitimate interests - by messaging RadarMC support on Telegram;
- withdraw your consent at any time - this does not affect processing carried out before the withdrawal;
- lodge a complaint with the data protection supervisory authority of your country of residence if you believe your rights were violated.
We answer requests within 10 working days. After account deletion we keep only anonymised votes and wallet and payment records for the period given in “How long we keep data”. After you withdraw consent you may no longer be able to use the service.
13.Children
Users under 14 may use the service only with the consent of a parent or legal guardian, and users under 18 may top up the wallet only with such consent. If you believe a child has given us data without this consent, contact us and we will delete it.
14.Changes to this policy
We may update this policy when the service or the law changes. The new version is published on this page with its effective date; we announce material changes in advance on the site or by email.
15.Contact
For any question about personal data, message RadarMC support on Telegram. The operator’s details are below.
Operator details
- Full name
- Мормуль Евгений Олегович
- Country
- Ukraine
- Support
- Telegram @radarmc_bot