CraftRank
Legal

Privacy Policy

Last updated October 12, 2026

This policy explains what personal data CraftRank collects, why, and what you can do about it. The site is operated by CraftRank, which is responsible for your data. We collect as little as we can.

1. What we collect

  • Account data: username, email address and a securely hashed password, plus where you came from (for example a Reddit ad) if you arrived through a campaign link.
  • Server listings: the details you enter about your server, including its address, banner, links and Votifier settings.
  • Votes: the Minecraft username you enter, your IP address and the time of the vote. We need these to allow one vote per 24 hours and to stop vote fraud.
  • Purchases: the package, price, date and the reference from our payment partner. Card details are handled only by the payment partner.
  • Usage statistics: the page you visit, the referring website or campaign, your country (from Cloudflare, if used) and device type. Visitors are counted with a code made from your IP address and browser that changes every day, so we can't recognise you across days and don't store your IP for statistics.
  • Security logs: our firewall (RexOS Shield) briefly records IP addresses and browser details of requests to block attacks and abuse.

2. Why we use it

To run the service (accounts, listings, voting, sponsored placements), to prevent fraud and attacks, to understand which pages and campaigns are useful, and to contact you about your account or a purchase. We rely on performing our contract with you, our legitimate interest in a safe and working service, and your consent where the law requires it. We do not sell your data and do not use it for advertising profiles.

3. What is public

Server listings are public, including their statistics. When you vote, your Minecraft username may be shown in the “recent voters” list of that server and is sent to the server owner through Votifier so they can give you a reward. Your email and IP address are never shown publicly.

4. Cookies

  • mcl_sess: keeps you logged in; deleted when you close the browser.
  • cr_src: remembers which campaign link brought you here, for 30 days, so we can see if an ad led to a sign-up.
  • rxs_pass: set only if you solve a security check, so you aren't asked again.

We don't use advertising or tracking cookies.

5. Who we share it with

Only with services we need to run the site: our web host, Cloudflare (network and security, if enabled), our payment partner (Lemon Squeezy or Tebex) for purchases, and the owner of a server you vote for (your Minecraft username only). Pages load fonts from Google Fonts and player heads from mc-heads.net, which receive your IP address when your browser loads them. Some of these providers are outside your country, including in the United States; they protect data under their own agreements, such as standard contractual clauses.

6. How long we keep it

  • Account and listing data: until you delete your account.
  • Votes: as long as the server is listed, because they make up its ranking history.
  • Usage statistics: 90 days.
  • Security logs: up to 14 days.
  • Purchase records: as long as tax and accounting law requires.

7. Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by contacting us at the contact details on our website. You can delete your servers yourself in the panel. If you are in the EU, the UK or another region with data protection law, you can also complain to your local data protection authority.

8. Children

You can browse and vote without an account. Accounts are for people aged 13 or older. If you believe a child under 13 has given us personal data, contact us and we will delete it.

9. Changes and contact

We may update this policy and will change the date at the top when we do. Questions or requests: the contact details on our website.