Privacy Policy

From Discord (when you sign in): your Discord user ID, username, and avatar. We receive this via Discord OAuth. We never see or store your Discord password.

From you directly: anything you submit through forms, applications, support requests, or Discord messages.

Automatically: standard request logs including IP address, user-agent, referrer, and the pages you visit. These are retained for a short period for security, abuse prevention, and debugging.

Cookies: a single session cookie issued by our authentication library to keep you signed in. We do not use advertising or tracking cookies.

Seraph displays statistics sourced from the public Hypixel API and Minecraft profile services. This data is about Minecraft accounts, not Seraph users, and is already public. It is not linked to your Seraph account unless you explicitly save or pin it.

• to sign you in and maintain your session;
• to provide features like dashboards, pinned players, and admin tools;
• to prevent abuse, debug issues, and protect the Service from malicious activity;
• to communicate with you about the Service when necessary;
• to comply with legal obligations.

We do not sell your personal data. We do not use it for advertising. We do not share it with data brokers.

We share data only with the third parties needed to run the Service:

• Our hosting provider, which processes requests on our behalf;
• Cloudflare, which fronts the site for DDoS protection and caching;
• Discord, which provides authentication and community features;
• Hypixel and Mojang, when we fetch public Minecraft data on your behalf;

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of Seraph, our users, or the public.

Account data is kept for as long as your account is active. Request logs are kept for a short period (typically 30 days) and then deleted or anonymised. When you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us through our Discord. You can also revoke Seraph's access to your Discord account at any time from Discord's Authorized Apps settings.

We protect your data with industry-standard measures including TLS 1.3 with AES-256 encryption in transit, HMAC-SHA256 signed session cookies, and strict access controls on our backend. No system is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to prevent unauthorised access.

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page and, for material changes, post a notice on the site.

Questions about this policy or your data? Reach out through our Discord server.