Privacy Policy

Last updated: July 20, 2026

Overview

MC Server Manager ("the App") is developed by Natchland. We are committed to protecting your privacy. This policy explains what information we collect when you use the App and our online services, why we collect it, and how it is used.

The desktop App itself works fully offline. You only share data with us when you choose to use online features: creating an account, buying a licence, topping up credits, or using Relay Pro.

Information We Collect

Account data

When you register an account on mcservermanager.com we collect:

  • Your email address
  • Your password, stored as a one-way hash with a unique salt, so we cannot see or recover your password
  • The date your account was created
  • An email verification status and a temporary 6-digit verification code (the code expires after 15 minutes)

Payment data

All card payments are processed by Stripe. We never see, store, or transmit your card number, CVV, or expiry date. We store Stripe customer references and session IDs so that your payment history can be linked to your account and refunds can be processed if needed.

Billing and usage data

When you use paid features we record:

  • Account balance (credits)
  • Transaction history (top-ups and charges), capped at the most recent 200 entries per account
  • Relay Pro subscription details (server name, allocated subdomain, next billing date)
  • An audit log of account events (logins, IP address at login, Relay Pro start/stop, manual verifications, balance adjustments) capped at the most recent 300 entries per account

This data is needed to operate billing, resolve disputes, investigate abuse, and provide support.

Licence key activations

When you activate a licence key in the App, a hashed machine identifier is stored alongside the key so we can enforce the per-key device limit and detect duplicate activations. We do not store any personally identifiable hardware information, only a one-way hash.

Session tokens

When you sign in we issue a session token that is stored on your device and on our servers. Tokens expire automatically after 30 days of inactivity, are cleared when you sign out, and can be invalidated by us in response to a support or security issue.

Admin notes

Our support team may add internal notes to your account to track support interactions or known issues. These notes are not visible to you and are never shared with third parties.

Affiliate program data

If you apply to join our affiliate program at mcservermanager.com/affiliates, we collect additional information needed to legally pay you out:

  • Your full legal name (must match your Stripe Connect details)
  • Your date of birth (used to confirm you are 18 or older, which Stripe Connect requires)
  • Your country of residence (affects tax and which Stripe payout methods are available)
  • An optional description of where you plan to share your referral link
  • Your Stripe Connect account ID once you onboard, all bank details and tax info are held by Stripe directly
  • Records of every commission you earn, refund clawback, and payout, kept for accounting and tax purposes

This information is only visible to MC Server Manager admin staff and Stripe. It is never shared publicly or with other affiliates. You can request deletion of your affiliate record by emailing [email protected], although we may retain anonymised payout records as long as required by HMRC for tax compliance.

When a customer clicks an affiliate referral link on mcservermanager.com, we set a cookie named mcsm_ref that stores only the affiliate's referral code. The cookie expires after 3 days and is used solely to attribute commissions. If a user clicks more than one affiliate's link in that window, only the most recent one counts. We do not use it for advertising or cross-site tracking.

Beta testing data

If you apply to join our beta testing programme at mcservermanager.com/testers, we collect the answers you give on the form: your Discord username (if you provide one), your date of birth, which edition and server types you run, how often you can test, your experience level, and anything else you choose to tell us. Your date of birth is used only to check you are old enough to agree to the tester terms.

Beta ("tester") builds of the app also report two things to us that the normal release does not, so we can protect unreleased builds from being leaked:

  • Your public IP address.
  • A device identifier, a one-way hashed value derived from your Windows installation ID. It is not your name and does not identify you personally, it just lets us recognise the same machine.

We use this only to detect and stop leaks of pre-release builds. If a tester build is leaked, we may permanently block the device identifiers and network addresses involved from using our products, and we may end the responsible tester's access. This data is visible only to MC Server Manager admin staff and is never shared publicly or sold. Tester application data is kept while you remain in the programme and is removed on request.

How We Use Your Information

  • To operate your account and deliver paid services
  • To process billing and send receipts, low-balance warnings, and service notifications
  • To verify your identity when you contact support
  • To investigate abuse, billing disputes, and chargebacks
  • To send transactional email like verification codes, billing alerts, and maintenance notices

We do not use your data for advertising or marketing, and we do not sell it.

Third-Party Services

Cloudflare

Account data, billing history, and Relay Pro subscription records are stored on Cloudflare's infrastructure (Workers, KV, and Durable Objects). Data may be processed in their global network, including EU and US regions. Cloudflare Privacy Policy.

Stripe

All payments are processed by Stripe. Card data is handled solely by Stripe (PCI DSS Level 1 certified). Affiliate payouts are sent through Stripe Connect Express, which means Stripe collects identity, tax, and bank information directly from affiliates during onboarding, we never see or store that data. Stripe Privacy Policy.

Resend

Transactional email (verification codes, billing notifications, support replies) is delivered through Resend. Your email address is shared with Resend each time we send you a message. Resend Privacy Policy.

Support chat assistant (DeepSeek)

The support chat on this website and inside the app is powered by DeepSeek, a third-party AI provider, which generates the replies. To protect your privacy, we automatically redact personal data such as email addresses, IP addresses, and usernames from your messages before they are sent to DeepSeek. DeepSeek may process this data on servers outside the UK, including in China, so do not share passwords, payment details, or other sensitive personal information in the chat. We store support conversations so we can review them and improve our help and the app. If you need to share account or personal details with us, the assistant will point you to open a ticket on our Discord instead. DeepSeek Privacy Policy.

Relay infrastructure (Hetzner & Kamatera)

Relay Pro game traffic is routed through relay servers we operate in multiple regions. Minecraft game packets pass through these servers during Relay Pro sessions in order to reach your server. The region is chosen by you when you start Relay Pro:

  • EU region uses Hetzner in Nuremberg, Germany. Hetzner Privacy Policy.
  • AU region uses Kamatera in Sydney, Australia. Kamatera Privacy Policy.

IP addresses involved in connections are not logged beyond what the operating system requires for routing.

Network Requests Made by the App

The App makes the following outbound requests:

  • api.mcservermanager.com, for account management, licence validation, Relay Pro management, and billing
  • api.ipify.org, displays your public IP address in the networking tab, no personal data is sent
  • Cloudflare tunnel APIs, for establishing your web dashboard tunnel
  • Mojang and Adoptium, for downloading Minecraft server JARs and Java runtimes
  • CurseForge API, for browsing and downloading mods and plugins
  • Relay nodes (Hetzner in Germany, Kamatera in Australia), for game traffic when Relay Pro is active, region is selected by you

The normal release of the App does not phone home to report usage, collect analytics, or transmit any data beyond what is described above. The one exception is beta tester builds, which send a device identifier and your IP address on launch to protect unreleased builds, as described under Beta testing data above.

Local Data Storage

All Minecraft server files, world data, automatic backups, and local application settings are stored on your computer. These files never leave your device and are not transmitted to Natchland or any third party.

Data Retention

  • Email verification codes, kept 15 minutes
  • Session tokens, up to 30 days, cleared on logout or session invalidation
  • Billing history, up to 200 entries per account
  • Audit log, up to 300 entries per account
  • Support chat conversations, kept for review and to improve support, with personal data redacted before it reaches the AI provider
  • Relay Pro records, kept while a subscription is active and deleted when cancelled
  • Account data, retained until you request deletion
  • Affiliate records, retained while you remain in the program, with payout records kept longer where required by HMRC for tax purposes
  • Beta tester application data and device/IP records, kept while you remain in the programme and removed on request, except where a device or address was blocked for leaking a build

Your Rights (GDPR / UK GDPR)

If you are based in the UK or EU, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Object to processing of your data
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected] or via our Discord. We aim to respond within 30 days.

Children's Privacy

You must be at least 13 years old to create an account. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it. Beta testing involves agreeing to the tester terms, so testers are reviewed for age and normally need to be 18 or older.

Changes to This Policy

We will notify users of significant changes via email or an in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions or concerns about this policy can be sent to [email protected].

© 2026 Natchland. All rights reserved.