Draft for legal review. Last updated July 14, 2026.
Profile lookups and cache
Submitted usernames and UUIDs are used to request public profile data. Responses may be held in server storage for performance, normally for minutes and as an unavailable-provider fallback for up to 24 hours. Search terms are never published in a public recent-search list.
Technical logs
Hosting infrastructure may process short-lived route, timestamp, status, browser and network information needed for security and rate limiting. Rate-limit identifiers are one-way hashed and rotate daily.
External providers
Core lookups use Mojang public profile and session services. Textures are proxied through MCIdentity, so browsers do not directly call provider APIs.
Requests
Before launch, the operator should add a monitored privacy contact address here for privacy, correction or removal requests.