Legal
Privacy Policy
Last updated: June 12, 2026
We're a community project, and we only collect what we actually need to run the site and the bot. Here's a straight explanation of what data we touch and why.
1. What we collect and why
When you sign in, Discord sends us your user ID, display name, and profile picture via their OAuth flow. That's what we use to create your session and identify you while you're logged in. We never see or store your Discord password.
When someone uses /mmd to look up a player, we log the Discord user ID, the server it was used in, the player IGN, and the timestamp. When someone files a /report, we record the player IGN, violation category, evidence description, and the reporter's Discord ID. This feeds into staff reviews and helps us catch bot abuse.
Like any web server, we log IP addresses, browser info, and which pages were visited. These are kept for roughly 30 days for debugging and abuse prevention, then discarded.
2. Public Minecraft data
Player usernames, UUIDs, and skins are fetched from Mojang's public API. Game stats come from the public Hypixel API. This information is already publicly available and isn't linked to your MMCO account unless you explicitly claim a player profile.
3. Cookies
We set a single session cookie to keep you logged in. That's all. No ad trackers, no third-party analytics scripts, no fingerprinting.
4. Who we share data with
We don't sell your data. We don't share it for advertising. The only parties that receive data from us are the ones needed to run the site:
- Our hosting provider, which runs the servers that serve the site
- Discord, which handles authentication and community features
- Hypixel and Mojang, whose public APIs we query to fetch player data
We may also share information if required by law, or to protect the community from serious abuse or illegal activity. (Hopefully it will not be that serious)
5. How long we keep data
Account data stays around as long as your account is active. Request logs are cleared after about 30 days. Player profiles submitted to the directory may be kept for historical integrity even if the original submitter removes their account. If you want your account data deleted, message us in Discord and we'll take care of it within 30 days.
6. Your rights
You can disconnect MMCO from your account entirely via Discord's Authorised Apps settings — this revokes our access and ends your session.
7. Updates to this policy
If we change how we handle data, we'll update the date at the top of this page and post a notice in our Discord for significant changes.
8. Contact
Questions about your data or this policy? Join us at discord.gg/mmco.