Privacy Policy

We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your information when you use Minecraft ServerHub.

1. Controller

The controller responsible for data processing on this website is:

Luis Riedhammer
Föhrenweg 2
58638 Iserlohn
Germany

Email: [email protected]
Phone: +49 157 53331175

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Username
• Password (stored encrypted)
• Profile picture (optional)
• Minecraft username (optional)

2.2 Server Listings

When you add a server, we collect:

• Server name, IP address, and port
• Server description and images
• Website and social media links
• Voting statistics

2.3 Automatically Collected Data

When you visit our website, we automatically collect:

• IP address (anonymized/hashed for privacy)
• Browser type and version
• Operating system
• Pages visited and time spent
• Referrer URL
• Device type (desktop, mobile, tablet)

2.4 Voting Data

When you vote for a server, we collect:

• Hashed IP address (for vote cooldown)
• Minecraft username (if provided)
• Timestamp
• Browser fingerprint (to prevent fraud)

3. How We Use Your Data

We use your data to:

• Provide and maintain our service
• Process your account registration
• Display server listings and statistics
• Prevent voting fraud and abuse
• Send important service notifications
• Improve our website and user experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR) – to provide our services
• Legitimate interests (Art. 6(1)(f) GDPR) – to prevent fraud and improve our service
• Consent (Art. 6(1)(a) GDPR) – for cookies and marketing
• Legal obligation (Art. 6(1)(c) GDPR) – to comply with laws

5. Third-Party Services

5.1 Hosting

Our website is hosted by Hetzner Online GmbH (Germany). Hetzner processes data on our behalf under a Data Processing Agreement.

5.2 Content Delivery & Security

We use Cloudflare, Inc. (USA) for CDN and DDoS protection. Cloudflare is certified under the EU-US Data Privacy Framework.

5.3 Authentication

We offer login via:

• Discord – Discord Inc. (USA)
• Google – Google LLC (USA)

When you use social login, we receive your email and profile picture from these providers.

5.4 Analytics

We use Google Analytics to understand how visitors use our site. Google Analytics uses cookies and collects anonymized data. You can opt out using our cookie settings.

5.5 Advertising

We display ads through Google AdSense. AdSense may use cookies to show personalized ads based on your interests. You can manage ad personalization in our cookie settings.

5.6 Payments

For premium features, we use:

• Stripe, Inc. (USA) – for credit card payments
• PayPal (Luxembourg) – for PayPal payments

Payment providers process your payment data directly. We only receive confirmation of successful payments.

6. Cookies

We use cookies for:

• Essential cookies – required for the website to function
• Analytics cookies – to understand website usage
• Marketing cookies – to display relevant ads

You can manage your cookie preferences at any time using the cookie settings button on our website. For details, see our Cookie Policy.

7. Data Retention

We retain your data for:

• Account data – until you delete your account
• Server listings – until deleted by owner or admin
• Voting records – 30 days (for cooldown verification)
• Analytics data – 26 months
• Log files – 30 days

8. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing of your data
• Data portability – receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time

To exercise your rights, contact us at: [email protected]

9. Data Security

We implement appropriate security measures including:

• HTTPS encryption for all connections
• Password hashing with bcrypt
• IP address hashing for privacy
• Regular security updates
• Access controls and authentication

10. International Data Transfers

Some of our service providers are located in the USA. We ensure appropriate safeguards through:

• EU-US Data Privacy Framework certification
• Standard Contractual Clauses (SCCs)
• Data Processing Agreements

11. Children's Privacy

Our service is intended for users who meet the minimum age requirement to play Minecraft (typically 13+ years). We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website.

13. Contact Us

For privacy-related questions or to exercise your rights:

Email: [email protected]
Address: Föhrenweg 2, 58638 Iserlohn, Germany

You also have the right to lodge a complaint with a supervisory authority, such as the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).