Controller
The controller within the meaning of the GDPR is the person named in the <a href="/impressum">Imprint</a>.
Data we collect
When you visit the site we process technical access data (truncated IP, browser, referrer). When you log in via Discord we store display name and avatar URL. When you vote or submit a server we store timestamps and (for 30 days) IP/User-Agent hashes for fraud detection.
Legal basis
Processing rests, depending on the case, on Art. 6(1)(a) (consent, e.g. reminder notifications), (b) (contract, e.g. Discord-based server claim) or (f) GDPR (legitimate interest, e.g. security and spam protection).
Storage duration
Server status data 365 days, IP/User-Agent hashes 30 days, session tokens 14 days of inactivity, backups 7 days. Votes remain as anonymous counters indefinitely.
Third-party services
Cloudflare Inc. (CDN, USA) processes edge requests including truncated IP addresses. Discord (Discord Ireland Ltd.) processes logins via OAuth. AdSense will be listed here once activated.
Cookies and local storage
We set one required session cookie (mcvote_session). The reminder banner uses optional localStorage and the browser Notification API (opt-in). We do not set tracking cookies.
Your rights
You have the right to access, rectify, erase, restrict, object and data portability (Art. 15–21 GDPR). Consent can be withdrawn at any time. Contact via the <a href="/impressum">Imprint</a>.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority, especially in your member state of habitual residence or at the place of the alleged infringement.