Privacy Policy

McRank (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://mcrank.net or use our services. By accessing or using the Service, you agree to the practices described here.

1. Information we collect

• Account information — username, e-mail address, and password. Passwords are stored only as a salted hash, never in readable form.
• Server listings — details provided by server owners, such as server name, address, description, images, and the status information we obtain by pinging that address.
• User content — reviews, replies, and reports you submit.
• Usage data — IP address, browser and device information, pages visited, and actions taken such as votes and logins.
• Payment data — processed securely by third-party providers, currently Paddle. We do not store full card details.
• Cookies and similar technologies — session cookies and preference cookies used to keep you signed in and remember your language and theme.

2. How we use your information

• To provide, maintain, and improve the Service.
• To manage accounts and server listings.
• To process payments and subscriptions.
• To prevent fraud and abuse, in particular vote manipulation.
• To send service notifications, support responses, and the notification e-mails you have enabled.
• To comply with legal obligations.

We rely on the legal bases described in section 3 for each of these purposes.

3. Legal basis for processing (GDPR)

If you are located in the EU or EEA, we process your data under the following legal bases:

• Contract performance — to provide you the Service.
• Legitimate interests — to maintain security, improve functionality, and prevent fraud.
• Legal obligations — to comply with applicable laws, including tax and accounting rules.
• Consent — for optional features such as notification e-mails.

4. Sharing of information

We may share your data with:

• Payment processors, currently Paddle, to handle transactions.
• Infrastructure providers, currently Cloudflare, which hosts the Service and stores its data.
• Endpoints you configure yourself, such as a Votifier server or a Discord webhook. Data sent to those endpoints leaves our control and is then governed by the operator of that system.
• Legal authorities, if required by law or in response to lawful requests.

We do not sell your personal data to third parties.

5. Cookies and tracking

We use cookies to keep user sessions, remember your language and theme preference, and record votes so that the monthly count stays fair. You can manage or disable cookies in your browser settings, but the Service will not be able to keep you signed in without them.

To tell people apart from automated scripts on sign-up, voting, and other sensitive actions, we use Cloudflare Turnstile. It receives technical signals about the request in order to score it.

6. Data retention

• Account data — until your account is deleted.
• Server listings — until removed by the owner or by us.
• Payment records — retained as required by financial and tax laws.
• Logs and security data — retained for up to 12 months.

7. Your rights (GDPR / CCPA)

If you are an EU or EEA resident, you have the right to access, correct, or delete your personal data; to restrict or object to processing; to receive your data in a portable form; and to withdraw consent at any time. Notification e-mails can be turned off in your account settings without contacting us.

California residents have the right to know what personal information is collected and to request its deletion. We do not sell personal information.

To exercise any of these rights, write to support@mcrank.net.

8. Data security

We implement industry-standard security measures, including hashing of passwords, HTTPS for all traffic, and regular monitoring and updates. However, no method of transmission is completely secure, and we cannot guarantee absolute security.

9. Children’s privacy

The Service is not directed at children under 16 years old. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.

10. International data transfers

Your information may be stored and processed outside your country, on infrastructure located in the EU or the USA. We take measures to ensure adequate protection, including Standard Contractual Clauses where required.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We encourage you to review it periodically. Your continued use of the Service after any change constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this policy, contact us at support@mcrank.net.

By using McRank, you confirm that you have read, understood, and agree to this Privacy Policy.