Privacy Policy for serverlist.cc

Effective Date: August 26, 2025

1. Introduction and Definitions

Welcome to serverlist.cc ("we," "us," "our"). This Privacy Policy explains how we, as the Data Controller, collect, use, and protect your information. It also describes your data protection rights under applicable laws, including the EU General Data Protection Regulation (GDPR).

* "Personal Data" means any information that identifies or can be used to identify a natural person (a "Data Subject"). * "Usage Data" is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself. * "Data Controller" is the natural or legal person who (alone or jointly with others) determines the purposes and means of the processing of personal data. For this policy, serverlist.cc is the Data Controller. * "Processing" means any operation performed on Personal Data, such as collection, recording, storage, use, disclosure, or erasure.

By using our Site and services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our service to you.

* Account Information: When you create an account, you provide us with Personal Data including your username, email address, and a hashed password. * Server Information: When you list a server, you provide its IP address, name, and description. * Third-Party Login Information: If you register or log in via Google or Discord, we receive Personal Data from these services, which may include your username, email address, and profile picture, as permitted by your privacy settings on those platforms. * Communications Data: When you contact us for support at [email protected], we collect your email address and the content of your communications. * Server Performance Data: We automatically query public information from listed servers, including player count, version, and MOTD. We log this data to create historical performance metrics. * Voting Data: We collect your IP address when you vote to prevent fraud. We may process this IP address to check if it originates from a proxy or VPN network. * Usage and Analytics Data: We and our third-party partners (like Google Analytics) automatically collect information your browser sends, such as your IP address, browser type, device information, pages visited, and the time and date of your visit.

3. Lawful Basis for Processing Data (GDPR)

We process your Personal Data based on the following lawful bases:

* Performance of a Contract: We process your data to fulfill our contractual obligations to you. This includes: * Creating and managing your account. * Listing your server and displaying its information. * Providing you with access to our services. * Legitimate Interest: We process your data when it is in our legitimate interest to do so, and when these interests are not overridden by your data protection rights. This includes: * Operating our voting system and protecting it from fraudulent activity (our interest in maintaining a fair platform). * Analyzing user behavior with tools like Google Analytics to improve our Site and services (our interest in enhancing our product). * Serving and measuring our internal advertisements (our interest in operating a sustainable business). * Ensuring the security of our network and information systems. * Legal Obligation: We may process your data to comply with a legal requirement, a court order, or other legal process. * Consent: Where required by law, we will ask for your consent to process your data (for example, for placing certain non-essential cookies).

4. How We Use Your Information

The purposes for which we use your information are directly tied to our lawful bases for processing:

* To provide, operate, and maintain our Site. * To manage your account, authentication, and provide customer support. * To display public server lists and historical performance graphs. * To operate and secure our voting and advertising systems. * To communicate with you regarding your account or services (transactional emails). * To monitor and analyze trends to improve user experience and for business intelligence. * To enforce our terms and conditions and prevent abuse.

5. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

* Account Data: We retain your account information for as long as your account remains active. Upon account deletion, this data is permanently removed, subject to any legal obligations to retain data for a longer period. * Voting IP Addresses: IP addresses collected for voting purposes are retained for a maximum of 30 days to prevent abuse, after which they are deleted or anonymized. * Log Files: Server and security logs are retained for the period necessary to ensure the security, integrity, and performance of our services. The exact retention period for these logs varies based on operational needs. * We may retain Usage Data for longer periods if the data has been fully anonymized or if we are legally required to do so.

6. Sharing and Disclosure of Information

We do not sell your Personal Data. We may share it with the following parties under limited circumstances:

* The Public: Your username and server information are displayed publicly. * Service Providers: We engage third-party companies to perform services on our behalf (e.g., website hosting, email delivery). They are contractually bound to protect your data and may not use it for other purposes. * Analytics and Authentication Providers: We share data with Google (for Analytics and Login) and Discord (for Login). We recommend reviewing their respective privacy policies. * Legal Requirements: We may disclose your data if required by law, subpoena, or if we believe in good faith that such action is necessary to comply with the law, protect our rights or property, or ensure the safety of our users. * Business Transfers: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers

Our service is hosted in the United States. If you are accessing the Site from the European Economic Area (EEA), the UK, or Switzerland, your Personal Data will be transferred to, stored, and processed in the United States.

We take all reasonably necessary steps to ensure that your data is treated securely. When we transfer your Personal Data from the EEA, UK, or Switzerland to the US, we do so in reliance on appropriate safeguards, such as the EU-U.S. Data Privacy Framework, the UK Extension to the DPF, the Swiss-U.S. DPF, and/or by using Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your Data Protection Rights (GDPR)

If you are a resident of the EEA, you have the following data protection rights. We extend these rights to all our users wherever feasible.

* The right to access: You have the right to request copies of your personal data. * The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. * The right to erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions. * The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions. * The right to object to processing: You have the right to object to our processing of your personal data based on our legitimate interests. * The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions. * The right to withdraw consent: You have the right to withdraw your consent at any time where we relied on your consent to process your personal information. * The right to lodge a complaint: You have the right to lodge a complaint with a data protection authority about our collection and use of your Personal Data.

You can exercise most of these rights directly through your account settings (e.g., for access, rectification, portability, and erasure). For other requests, please contact us at [email protected].

9. Cookies and "Do Not Track" Signals

Our use of cookies is detailed in a separate Cookie Policy or a dedicated section in our Terms of Service. In summary, we use essential, advertising, and analytics cookies.

* Cookies and Similar Technologies: We use cookies to operate and administer our Site. You can learn about Google's practices at www.google.com/policies/privacy/partners/, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

* "Do Not Track" ("DNT") is a privacy preference that users can set in certain web browsers. We do not currently respond to or honor DNT signals or similar mechanisms.

10. Children's Privacy

Our Site is not intended for use by children under the age of 13. We do not knowingly collect Personal Data from children under 13. If we become aware that we have collected such data, we will take steps to delete it immediately.

11. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the State of Florida and the United States, without regard to its conflict of law provisions.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date." For significant changes, we may also notify you via email.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Controller: serverlist.cc Email: [email protected]