Privacy Policy

1. Who this is

Quickdown is a small, free Minecraft server hosting project — not a company, just someone running a server to help other Minecraft players out. This policy explains what data we collect when you use the site, why, and what you can do about it.

2. What we collect

To create and run your account and Minecraft server(s), we store:

• Your email address and a securely hashed password (we never store your password in plain text).
• A two-factor authentication secret, if you turn 2FA on — encrypted at rest, not just hashed, since unlike a password we sometimes need to read it back to verify a code.
• Your server's configuration (name, software, Minecraft version) and whatever you put on it — worlds, plugins, config files, and console commands you run.
• Player names, whether they're opped, and ban records for your own server — this is standard Minecraft server data (usercache/ops/bans files), used to show you a moderation list in the Players tab.
• Basic technical logs (like IP addresses) generated automatically by the web server and hosting infrastructure, kept briefly for security and abuse prevention — not something we actively mine or build profiles from.

3. Cookies

We use exactly one cookie: a session cookie that keeps you logged in. It's strictly necessary for the site to function — there's no analytics, tracking, or advertising cookie here, so there's nothing else to consent to.

4. Third parties we rely on

We're a small operation, not a data-sharing network. The few places data flows outside our own server:

• Gravatar— your account avatar is fetched directly by your browser from Gravatar (Automattic) using a hash of your email address. That means Gravatar sees the request (and your IP) when your dashboard loads, the same as it would for any site that shows Gravatar avatars. We don't send Gravatar your email itself, only its hash, and if you don't have a Gravatar account it just shows a generic icon.
• Modrinth— the Plugins tab searches and installs plugins via Modrinth's public API. Searches are relayed through our own server, not sent directly from your browser, but the plugin name you search for is visible to Modrinth as part of that request.

We don't sell your data, run ads, or share it with anyone else. Some of the above are US-based services, so using them can mean data crosses borders as a normal part of how the internet works — we don't have a special data-sharing arrangement with them beyond using their public products.

5. Why we process this data

To actually provide the service you signed up for (create your account, run your server, show you its console/files/players), and to keep the shared hardware secure and usable for everyone (abuse prevention, spam/attack mitigation). We don't use your data for advertising or profiling, and we don't sell it.

6. How long we keep it

For as long as your account exists. If you delete your account (Settings → Delete account) or ask us to, we delete your user record, your server(s) on Pterodactyl, and everything on them — this can't be undone, so back up anything you want to keep first.

7. Your rights

You can see and change your own account details from Settings at any time, and delete your account (and all its data) yourself, whenever you want, no need to ask us. If you'd rather we handle a request for you — access, correction, deletion, or anything else — email finn@quickdown.nl and we'll sort it out.

8. Security

Passwords are hashed with bcrypt, two-factor secrets are encrypted at rest, and the whole site runs over HTTPS. That said, we're a free, single-server hobby project, not an enterprise with a dedicated security team — treat your password as you would for any other account, and enable 2FA if you want the extra protection.

9. Age requirement

You must be at least 13 years old to create an account. We don't knowingly collect personal information from children under 13, and if we learn an account belongs to someone younger, we'll delete it.

10. Changes to this policy

We may update this policy as the service evolves. Continuing to use Quickdown after a change means you accept the updated policy.

11. Contact

Questions about this policy or your data? Email finn@quickdown.nl. See also our Terms of Service.