MineOpsServer operations

LEGAL

Privacy Policy

Effective October 17, 2026

This policy explains what MineOps (“we”, “us”) collects when you use mineopsdash.com and the MineOps agent, why, who else handles it, and the choices you have. We collect only what the service needs, and we do not sell personal data or use it for advertising.

What we store

  • Account: email address, display name, a password hash (Argon2id), sign-in sessions, two-step sign-in settings and security events. With Sign in with Google, the Google account identifier and email address Google returns.
  • Organizations: members and roles, invitations, machines and servers, alert rules and channels (Discord or Slack webhook addresses, encrypted), schedules, status pages and an audit log of changes.
  • What your agents report: machine and server details, configuration values needed to run the servers, status, metrics (kept 48 hours as samples and 30 days as five-minute summaries), and command history. Log lines are shown live while you watch them and kept at most one hour, with IP addresses and secrets removed.
  • Players on your servers: the names of players online, and each player name's play sessions (kept 90 days). For this data the organization running the server decides what is collected; we process it on its behalf.
  • Backups stay on your own machines; we store only their details (time, size and checksum).
  • Billing: your plan, subscription status and Stripe's customer and subscription identifiers. Card details stay with Stripe.
  • Email: account email (confirmations, sign-in codes, password resets, invitations and plan notices) is kept in our outbox for a week, with whether it was delivered. We keep a one-way hash of addresses that bounced or reported spam, so we stop writing to them. Alerts go to Discord or Slack, never email.
  • Diagnostics: warnings and errors of the service, kept 30 days, without message contents, request bodies or addresses.

Why we use it

To provide the service you signed up for (our contract with you), to keep it secure and prevent abuse, to bill paid plans and keep financial records (legal obligations), and to improve it from aggregated, anonymous counts (our legitimate interest). We email you only about your account, your organizations and the service.

Who else handles it

  • Stripe: payments, invoices and the billing portal.
  • Resend: delivering account email.
  • Cloudflare: domain name service, the secure connection to our servers, and forwarding mail sent to our addresses.
  • Google: only if you choose Sign in with Google.
  • Discord and Slack: alerts your organization chooses to send there.

Each handles data under its own terms and only for these purposes. The service runs on servers we control in the United States, so your data is stored and processed there.

Cookies and analytics

We use only the cookies needed to keep you signed in and protect your session. We count product events per day (for example “organization created”) without recording who, which organization, or any address. There are no third-party trackers or advertising cookies.

Support access

Support staff see an organization's details only through a time-limited grant with a recorded reason. Each grant and each view appears in your organization's audit log.

How long we keep it

Account and organization data is kept while they exist. Deleted organizations are removed after a 30-day grace period, and deleted accounts at once; audit and security records keep only an anonymous reference and are removed after 400 days. Billing records are kept as long as financial law requires.

Your choices and rights

Owners can export all organization data as JSON and delete the organization. You can correct your details in account settings and delete your account; your personal data is then removed. Depending on where you live, you may also have the right to access, correct, delete or receive your data, object to or restrict its use, and complain to your data protection authority. To use them, write to [email protected]; we answer within 30 days.

Security

Connections use HTTPS, passwords are hashed, secrets such as webhook addresses and authenticator keys are encrypted, and agents authenticate with their own keys. Two-step sign-in is available for every account.

Children

MineOps is for people who run Minecraft servers and is not directed at children under 13. If you believe a child gave us personal data, write to us and we will delete it.

Changes and contact

We will post changes here with a new effective date and email account owners about important ones. Questions or requests: [email protected].