Privacy Policy

What we collect when you sign in

Signing in is done through Discord using the identify permission only. We never see your Discord password or email address. From Discord we store:

• Your Discord user ID and username, so we know which account is yours.
• Your Discord avatar (a reference to the image, not the image itself), shown in the navigation bar.

After signing in you're asked for your Minecraft username. It's shown publicly next to anything you do on the site (for example a fantasy team or a coaching role), and it's used to show your skin from Minotar.

What you create on the site

Anything you add is stored against your account so it can be shown back to you and, where relevant, to everyone else:

• Hockey fantasy teams, manager game saves and bets.
• Head coach activity such as training plans and roster requests.
• Mod tokens you create for the civdb mods. We only keep a one-way hash of each token, never the token itself.
• Staff-only records (admin and permission flags, who granted them, and match reviews).

Game data

Much of the site is built from public in-game information about CivMC players, not from your account:

• Hockey stats (lineups, goals, penalties, results) entered by staff or recorded by the civdb Hockey mod and the hockey server, including in-match movement used for replays and advanced stats.
• Practice server matches, recorded with the player names that took part.
• Pearl records (who is pearled, by whom, and when), reported by trusted staff using the pearl tracker mod.
• Shop listings from TradeX and account join dates from CivInfo, both public CivMC community services.

If something about you is wrong or you'd like it removed, ask a staff member.

Cookies and local storage

• One session cookie keeps you signed in and protects forms against forgery. It's HttpOnly, never shared with anyone else and expires when your session ends.
• Local storage in your own browser remembers small preferences such as wide layout, shop bookmarks and filters. It never leaves your device.

We don't use advertising or cross-site tracking cookies, and our visitor statistics (below) don't use cookies at all.

Visitor statistics

To see how many people use the site and which pages are popular, we count page views ourselves. No third-party analytics service is involved. For each page view we record:

• the page address and title, the time, and whether you were signed in;
• the website that linked you here, if any (just its domain);
• your device type, browser and operating system, worked out from your browser's user-agent;
• your approximate country and region (for example "England, United Kingdom"), never your city or street.

We never store your IP address. To count you once per day, we combine your IP address and browser with a secret value that changes daily and keep only a scrambled code. It can't be turned back into your IP address, and it can't link your visits on different days.

To work out your country and region, we use location information from our network provider (Cloudflare) when it's available. Otherwise our server asks ipwho.is, sending them your IP address only. The result is cached for 30 days under a scrambled code, not your IP address. Page view records are deleted after about 13 months.

Server logs and abuse protection

Like any website, our server sees your IP address when you visit. Some API endpoints use it (or your account ID) to rate-limit requests; those counters only hold timestamps from the last few minutes. Errors are written to a private log, identified by a short reference code, so we can fix bugs. Logs are only seen by the people who run the site.

Third-party services

Some content on the site is loaded straight from other services, which means your browser contacts them and they can see your IP address. Each has its own privacy policy:

• Discord: sign in and avatars.
• Minotar: Minecraft skin heads and bodies.
• Google Fonts: the Inter typeface.
• unpkg: the map and 3D skin viewer libraries.
• TradeX, CivInfo, Nara, the CivMC territory map and mc.nerothe.com: shop data, maps and item icons.
• YouTube: highlight videos, embedded in privacy-enhanced mode where possible.
• ipwho.is: approximate country and region for visitor statistics. This is a server-to-server request, so your browser doesn't contact them.

See the credits page for the full list of what we use.

Your choices

• You can change your Minecraft username at any time in Settings.
• You can sign out and clear the site's cookies and local storage from your browser whenever you like.
• To have your account and everything linked to it deleted, contact a member of staff. Deleting your account removes your sign-in details and the things you created; public hockey history may remain under your Minecraft name.

Changes

If we start collecting something new, we'll update this page first.