At Mineuniverse, accessible from mineuniverse.net, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Mineuniverse and how we use it. This policy is not applicable to any information collected offline or via channels other than this website.
Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.
Information We Collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When you register for an Account, we may ask for your contact information, including items such as name, email address, and telephone number.
How We Use Your Information
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, including for customer service, updates and marketing purposes
- Send you emails
- Find and prevent fraud
Log Files
Mineuniverse follows a standard procedure of using log files. These files log visitors when they visit websites. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any personally identifiable information.
Our own visitor statistics do not store IP addresses; see Visitor Statistics.
Visitor Statistics
We count page views on our own server, without cookies and without storing IP addresses. For each request our server derives a one-day pseudonym from your IP address and browser identification, using a random key that changes every day and is deleted after 48 hours. This lets us count unique visitors per day and recognise automated traffic; after the key is deleted the pseudonym cannot be linked to you any more.
We keep only aggregated daily counts per page (views, visitors, the kind of source such as "search engine", coarse country provided by our CDN, phone or desktop). Raw request lines containing the one-day pseudonym are kept for at most 7 days to find errors. Search terms entered in our site search are stored only in aggregate and only when at least three different visitors used them on a day.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring the use of our pages and preventing abuse). We also import aggregated search statistics (clicks and impressions per page) from Google Search Console and Bing Webmaster Tools; they contain no data about individual visitors.
Log Analyzer & Pastes
When you paste or upload a Minecraft log or crash report to our Crash Log Analyzer (or send one through our public log API), we store the following so that you can share the log and get troubleshooting help:
- The log text, redacted before it is saved. IP addresses, access tokens, session IDs, passwords and keys, e-mail addresses and user names inside file paths are removed automatically; on request also player names. The original, unredacted text is never stored.
- Technical details read from the log, such as Minecraft, loader and Java versions, the mod or plugin list and the problems we detected.
- A pseudonymised hash of your IP address (a keyed hash that cannot be turned back into the address without our secret key) to limit abuse, and your user ID if you are logged in.
- A delete token, stored only as a hash. The token itself is kept in your browser so that you can delete the log later.
Purpose and legal basis: sharing logs and analysing crashes at your request (Art. 6(1)(b) GDPR) and protecting the service against abuse (Art. 6(1)(f) GDPR, legitimate interest). Using "analyse only" processes the text in memory without saving it; only anonymous daily counters are kept.
Visibility and retention: logs are unlisted (only people with the link can open them) and excluded from search engines. You choose how long a log is kept (1, 7, 30 or 90 days); opening a log can extend it by the same period, but never beyond 90 days after the last view. Expired logs, including the IP hash, are deleted automatically within an hour.
Deletion: delete a log at any time with the delete button (or the API and your token). To have a log removed that contains your personal data, use "Report" with the reason "personal data" or contact support with the log ID — we remove it promptly (Art. 17 GDPR).
Embeds
Server banners and project badges that owners embed on other websites are plain images. They set no cookies and do not track visitors; our server only receives the technical request data described under "Log Files", which is not used to identify anyone.
Minecraft Player Profiles
Our player lookup and skin pages show public Minecraft: Java Edition profiles, similar to other Minecraft lookup services. This section explains what we process about Minecraft players, whether or not they use MineUniverse.
Source: the public Mojang APIs (profile lookups by name or UUID and the textures.minecraft.net image server) and OptiFine's public cape server. Only our server contacts these services, never your browser. We never ask players to sign in with Microsoft or Mojang.
What we store about a player:
- the account's UUID and its current name;
- every name, skin and cape we have observed, with the dates we first and last saw it. Mojang no longer publishes name history, so the history only covers the period since we first saw a profile;
- copies of the skin and cape images and the 2D pictures we render from them;
- counters: page views (daily totals, kept 35 days, plus a running total), how often a profile was looked up and how many members follow it.
We do not store visitor IP addresses with player profiles. Abuse limits on lookups use short-lived keyed hashes that are deleted within hours. Skins and players can be reported, and our moderators hide inappropriate skins.
Legal basis: our legitimate interest in offering a public player and skin lookup (Art. 6(1)(f) GDPR). In our balancing of interests we considered that Mojang makes this data public on purpose and shows it in the game; that it is pseudonymous (a game name, a UUID and pictures, but no real name, e-mail address or location); that players expect such lookups to exist; and that many players are young. We therefore collect nothing beyond what Mojang and OptiFine publish, never use profiles for advertising or sell them, and honour every objection quickly without asking for identity documents.
Your right to object (Art. 21 GDPR) and to erasure (Art. 17 GDPR): use the profile removal form. You can hide your whole profile, only your name history or only your skin history. To prove that the account is yours, you wear a verification skin for a moment (no login needed, an e-mail address is optional); if you cannot change your skin, you can ask for a manual review instead and we answer by e-mail.
What happens after a removal: for a hidden profile we delete the name history, skins, capes, counters and the generated pictures that show the name. We keep only a minimal record: the account's UUID and its name at that time, marked as removed. This record is necessary so that we never collect the profile again, and the old profile address then only says that it was removed at the owner's request. A hidden name or skin history is deleted except the current entry, and later changes are not recorded.
Retention: profile data stays while the profile is public at Mojang. We re-check profiles from time to time, and accounts that no longer exist are marked as deleted. Removal requests (the player, the chosen option, the optional e-mail address and message, and a keyed hash of the requester's IP address for abuse prevention) are kept for 24 months as proof that we handled them, then deleted. Requests that are never verified expire after 14 days. Reports about players or skins are deleted together with any e-mail address they contain.
Follows & Notifications
With an account you can follow projects, servers, creators, Minecraft players and skins. We store what you follow (your user ID, the followed item, the date and whether you want to be notified) and the notifications we create for you, for example about a new file of a project you follow. Notifications are shown in your account only; read notifications are deleted after 90 days. Nobody else can see what you follow.
Optional emails: we only email you about followed things if you choose instant, daily or weekly emails in your notification settings. Every email contains an unsubscribe link (also as a one-click unsubscribe header). To avoid duplicate emails and to handle bounces we keep a mail log for 30 days that contains a hash of the address (never the address itself), the type of email, its status and the time. Addresses that unsubscribe, bounce repeatedly or complain are kept only as a hash on our suppression list, so that we never email them again.
Legal basis and deletion: providing the features you choose to use (Art. 6(1)(b) GDPR). Unfollow or switch emails off at any time; deleting your account removes your follows, notification settings and notifications.
Invite Program
Members can share a personal invite link (/r/…) from their dashboard. Both get bonus points when the invited friend creates an account, verifies their email address and is active on a few different days.
- Cookie
mu_ref: when you open an invite link without being logged in, we store the inviter's code in this cookie for 30 days so that the invite can be credited if you register. It is set only after you open an invite link and removed when you register. - Cookie
mu_did: a random device ID (12 months) that can be set in invite flows only, to detect people who invite themselves from the same browser. This cookie is currently switched off and not set. - Click log: when an invite link is opened we record the inviter, the time and a keyed hash of the visitor's IP address (at most once per day), for the inviter's click count and fraud prevention. These entries are deleted after 180 days.
- The invite record: who invited whom, the status of the invite, the points paid and the dates, plus, for fraud checks, a keyed hash of the IP address used for the registration, a hash of the normalised email address (to spot self-invites with address variants) and, if the device cookie is used, a hash of the device ID. The hashes are removed 180 days after the invite was completed or rejected; the record itself is kept as long as the accounts exist, as proof of the points paid.
- What the inviter sees: the username of the friend who joined, the date and the progress of the invite (for example "active on 2 of 3 days") — never the friend's email address. The friend sees the inviter's username on the registration page.
Fraud checks: an invite is checked against the inviter's own email address, IP addresses the inviter used in the last 30 days, the number of sign-ups from one IP address and a list of disposable email providers. Suspicious invites are checked by a moderator or receive no points; this affects only the bonus points, never your account. Hashed IP addresses are compared only when we can see a real visitor address.
Legal basis: running the invite program you take part in (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse of the points system (Art. 6(1)(f) GDPR). Activity days come from the login records described under "Login Streak". You can object to the processing at any time through support; you then no longer take part in the program.
Login Streak
When you are logged in, we record each calendar day (Europe/Berlin time) on which you visit MineUniverse. These login days power your daily streak and its bonus points, and they count as activity days in the invite program.
With each login day we store a keyed hash of your IP address (and a hash of the device cookie, if it is used) to prevent abuse. These hashes are removed after 30 days; the login days themselves are deleted after 400 days. Your streak counters (current, best and total days) are kept with your account.
Legal basis: providing the streak feature and its points (Art. 6(1)(b) GDPR) and, for the hashes, our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Deleting your account removes your streak and all login days.
Server Pages & Votes
When you open a server page or vote for a server, we count the view or the vote at most once per day. For this check we store the view or vote with a keyed hash of your IP address (it cannot be turned back into the address without our secret key), never the address itself, and with the country reported by our CDN. The hashes of page views are removed after about two days; the hash stored with a vote is kept for up to 30 days to detect vote manipulation and then removed. The votes themselves are kept with your user ID for the vote counts and the monthly ranking.
If the owner of a server has connected in-game rewards (Votifier), we forward your vote to that server with the Minecraft name you entered and your IP address, the fields the Votifier protocol uses. What the server does with them is the responsibility of its owner.
Legal basis: voting and in-game rewards at your request (Art. 6(1)(b) GDPR) and our legitimate interest in fair counts and in preventing abuse (Art. 6(1)(f) GDPR).
Server of the Month
Every month we rank the listed servers by the votes they received in that calendar month (Server of the Month). Only aggregates are published: the number of votes, the number of unique voters and the uptime of each server. Individual votes and the identity of voters are never shown. The winner and the monthly top 10 are kept as a public archive, and the owner of the winning server receives bonus points and a notification in their account.
Advertising Partners
Some advertisers on our site may use cookies and web beacons. Our advertising partners include:
- Google – Privacy Policy
- Snigel (AdEngine, consent management via AdConsent) – Privacy Policy
Third Party Privacy Policies
Mineuniverse's Privacy Policy does not apply to other advertisers or websites. We advise you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. You can choose to disable cookies through your individual browser options.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, California consumers have the right to:
- Request that a business disclose the categories and specific pieces of personal data collected about consumers.
- Request that a business delete any personal data about the consumer that a business has collected.
- Request that a business that sells a consumer's personal data, not sell the consumer's personal data.
If you make a request, we have one month to respond. Please contact us to exercise any of these rights.
GDPR Data Protection Rights
- Right to access — You have the right to request copies of your personal data.
- Right to rectification — You have the right to request that we correct inaccurate information.
- Right to erasure — You have the right to request that we erase your personal data, under certain conditions.
- Right to restrict processing — You have the right to request that we restrict the processing of your personal data.
- Right to object — You have the right to object to our processing of your personal data.
- Right to data portability — You have the right to request that we transfer your data to another organization.
Children's Information
Mineuniverse does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, please contact us immediately and we will do our best efforts to promptly remove such information from our records.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted.
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.
Contact Support