Privacy Policy

This policy explains what Miney.Link collects, why, how long we keep it, and what you can do about it. The short version: we keep very little, we store no passwords or sign-in tokens, and you can export or delete your data yourself.

Zyztem runs the Service and is responsible for your data. Contact: me@zyztem.dev.

1. What we store

When you link a Minecraft account, we store one record:

Data	Where it comes from	Why
Discord ID	Discord	To know whose link it is
Java name, if you own Java	Mojang	To show it on your dashboard as your Java username, and to label your Linked Roles connection
Xbox gamertag	Xbox	To show it on your dashboard as your Bedrock username, and to label your Linked Roles connection when you have no Java name
Xbox ID (XUID)	Xbox	To stop one Microsoft account being linked to two Discord accounts
Java UUID, if you own Java	Mojang	To identify your Java profile
Two yes/no flags (owns Java; owns or has played Bedrock)	Mojang and Xbox	To report ownership to Discord
Time linked and last updated	Us	To keep the record accurate, and to tell Discord when you linked so server administrators can require a minimum time since linking

We also keep an audit log: the type and time of an event (link created, link updated, unlinked, a duplicate link refused, an administrator looking you up, an administrator changing a server's roles or syncing them), the Discord IDs involved, and for lookups and role changes the server's ID (and, for a server-wide sync, how many members were checked and updated). It holds no names, UUIDs, Xbox IDs, tokens or IP addresses.

For each server whose administrator turns on role sync, we store the server's ID, the IDs of up to three roles they chose, whether roles change automatically, and when they last changed it. This describes the server, not any member, and is kept until the administrator clears it. It is not personal data about you.

We also count visits to this website with Rybbit, software we run ourselves. For each page you open it records:

• the page's address (including anything after a ?) and its title, and the address you came from;
• your browser and operating system and their versions, your language, time zone, screen size and device type;
• a rough location (country, region and city) and the name of your network provider, both worked out from your IP address;
• a visitor code worked out from your IP address and browser together with a secret value that changes every day, so that your visits on the same day count as one visitor, while a visit on another day gets a different code that cannot be matched to the first; and
• the address of a link you click that leads to another site.

The IP address itself is not kept. It does not record what you type or click inside a page, and it does not see your Discord or Minecraft account. The sign-in steps themselves (/api/callback/discord and /api/callback/microsoft) end with a redirect and show no page, so the one-time sign-in code in their address is never on a page that is counted. These records are not connected to your link, your Discord ID or the audit log. Requests that look automated are kept separately, in a similar form, so they can be filtered out.

2. What we use but do not store

• Discord: your Discord ID, display name and avatar, and when you sign in to the dashboard, the list of servers you are in with your permissions there (to show the servers you can manage). The access token Discord gives us is used right away and then discarded.
• Microsoft and Xbox: the sign-in token Microsoft gives us is used once to ask Xbox and Minecraft services who you are and what you own, then discarded. We never receive your password, email address or Microsoft account name.
• Roles in a server (role sync): if a server's administrator has set up role sync and you have linked, our bot asks Discord which roles you hold in that server and adds or removes only the roles the administrator chose, when you link, unlink or delete your account, when you run /update, or when an administrator runs /sync. The list of roles you hold is read to decide what to change and is not stored. The bot never reads messages and does not look at members who have not linked.
• Dashboard session: while you are signed in, your name, avatar, the servers you manage and a random session code are held in memory only for up to 7 days. Restarting the Service signs everyone out.
• How a sign-in or link ended: when you finish linking, unlinking, signing in or deleting, the Service holds what the last page shows you (for example the names on the "Connected" page, or the reason something failed) in memory only, for up to five minutes, until that page opens. It is then discarded, so reloading the page shows nothing.

3. Cookies

We use only strictly necessary cookies: a short-lived one that protects the sign-in steps against forgery, one that lasts five minutes and is used once, so that the page after a sign-in or link can tell you how it went (it holds a random code and nothing about you), a session cookie while you are signed in to the dashboard, and, only if you pick a language in the footer, one that remembers your choice. That one holds a language code such as fr and nothing about you, and lasts a year. We use no analytics, advertising or tracking cookies: the visit statistics in section 1 work without any cookie. Cloudflare, which carries our traffic, may set its own security cookies.

4. Who we share data with

We do not sell your data and show no advertising. The visit statistics are collected and stored by Rybbit on our own server, and no third party receives them. We exchange data with the services you are signing in to, as described above: Discord, Microsoft (including Xbox) and Mojang. Our website runs on Cloudflare's network (Cloudflare Workers), and all our traffic passes through Cloudflare, which processes requests, including IP addresses, to deliver and protect the Service under its own privacy policy. The website keeps nothing: it asks our server for what a page shows. Administrators of a server you are in can look up your Minecraft name, editions and Java UUID with /whois, only inside that server. They can do it by choosing you from the member list, or by typing a Minecraft name: a name that only someone outside their server linked gets the same answer as a name nobody linked, so it reveals nothing about people elsewhere. Each lookup is recorded in the audit log (who looked, whom, and in which server), but a name typed into a search is not.

5. How long we keep it

Data	Kept
Your link	Until you unlink or delete your account
Audit log	90 days, then deleted automatically, or immediately if you delete your account
A server's role sync settings	Until the administrator clears them
Cooling-off record (Discord ID and end time)	Until the 48-hour cooling-off ends, then deleted
Dashboard session	Up to 7 days, in memory only
How a sign-in or link ended	Up to 5 minutes, in memory only, discarded when the page opens
Visit statistics	90 days, then deleted automatically. Requests that look automated are kept for up to 3 months.
Backups	Encrypted nightly copies of the database are kept for 14 days. Data you delete can remain in a backup until it expires.
Server logs	Short-lived operational logs. Security events, such as a blocked request, can include an IP address. Logs are rotated and discarded automatically.

6. Your choices and rights

• Access and export: download everything we hold about you from your account page.
• Unlink: use /unlink in Discord, or Unlink on your account page.
• Delete: use Delete account on your account page. We remove your link and every audit record about you, clear your Linked Roles status, and take back the roles that role sync gave you.
• Visit statistics: these are not tied to your Discord or Minecraft account, so we cannot pick out yours to export or delete; they expire on their own. A content blocker, or your browser's privacy settings, stops the script from loading, and the site works the same without it.
• Anything else: email me@zyztem.dev. Depending on where you live you may also have the right to correct your data, object to or restrict processing, and complain to your data protection authority.

If you are in the EEA or UK, we process your data to provide the Service you asked for, and for our legitimate interests in keeping the Service secure, preventing abuse, keeping the audit log, and understanding how the site is used (the visit statistics).

7. The cooling-off after deleting

When you delete your account, a 48-hour cooling-off period starts during which you cannot sign in or link an account. To enforce it, we keep your Discord ID and the time it ends. We keep nothing else about you, we use it for no other purpose, and it is deleted when the period is over.

8. Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Discord and Microsoft have their own age requirements, and Xbox child accounts need family approval before they can be linked.

9. Security

Nothing sensitive is stored: no passwords, no sign-in tokens. Connections are encrypted, access to the database is restricted, and backups are encrypted. No system is perfectly secure, but the less we hold, the less there is to lose.

10. Where data is processed

Your data is processed where the Service is hosted and by Discord, Microsoft, Xbox, Mojang and Cloudflare, which operate internationally. That means your data can be transferred to, and processed in, countries outside your own, including outside the EEA and the UK. Where the law requires a safeguard for such a transfer, such as an adequacy decision or the standard contractual clauses approved by the European Commission, the safeguard is the one that each of those companies describes in its own privacy policy. If you want to know more, write to me@zyztem.dev.

11. Changes

If we change this policy in a way that matters, we will update the date at the top of this page.

12. Contact

me@zyztem.dev, or through support.