Privacy Policy

1. Who is responsible

LogicByte Studios is the controller of the personal data described in this policy. For anything about your data, write to legal@mineshire.com.

2. What stays on your computer

Your servers, worlds, backups, console logs, settings and the files you add are stored on your computer, in Mineshire’s data folder and in the folders of your servers. We do not receive them. When you sign in, the token that keeps you signed in is stored in your computer’s credential store, not in a file we can read.

3. What we receive, and when

• Your account. You can use Mineshire without one. An account is created the first time you sign in with GitHub or Discord. From that service we receive the basic details it shares with apps you sign in to, such as an identifier, the email address linked to it and your name or username. We never receive your GitHub or Discord password. Your profile holds a username, an optional display name and an optional Minecraft name. Other people who are signed in to Mineshire can read these three details.
• Your computer and your servers, while you are signed in. The app tells your account which computer it runs on (the computer’s name, the Windows version, the Mineshire version and when it was last online) and keeps a list of your servers on the account: each server’s name, what it runs, its version and its small picture. Nothing else about your servers leaves your computer, not their folders, ports, addresses or players. The list is replaced whenever it changes, so a server you delete disappears from your account too.
• Friends and shared servers. If you add friends, we keep the requests and who is friends with whom. If you share a server, we keep the share (who it is shared with and which permissions you gave), the commands your friend runs on it, and a log of who did what. While a friend has the console open, recent console lines of at most 500 characters each are passed to them through your account. You and your friend can both read the log of the share.
• Remote control from the website. This is off until you turn it on in the app’s Settings. While it is on and a console is open on the website, recent console lines are sent to your account with player addresses hidden. They are removed when the server stops or after an hour.
• The website and downloads. When you visit mineshire.com or download the installer, the providers that host them receive your IP address, the page or file you asked for, the time and your browser’s user agent, and keep them in server logs. We use those logs to run and protect the site. The website uses no advertising or analytics cookies or trackers. It keeps your sign-in session, and two preferences (animations and the ready sound), in your browser’s local storage.
• Updates and announcements. The app asks cargo.mineshire.com, which is served through Cloudflare, whether a newer version exists, and asks mineshire.com for the announcements in its side panel. Those are ordinary web requests, so they reach us and our providers together with your IP address.
• Our API service. When you browse CurseForge in the app, the request goes through our API service, which holds our CurseForge access key so that it is never stored on your computer. Your search words and the projects you open pass through it to CurseForge. Connecting Google Drive works the same way: the authorisation code or refresh token passes through the service on its way to Google, and the service doesn’t keep it.
• Messages to us. If you write to us, we keep your message and your address so that we can answer you.

4. Features that involve other services

Some features send data to services we don’t run. They do it when you use the feature, and what they do with the data is described in their own privacy policies.

• Downloads. When Mineshire downloads server software, Java or an add-on from Mojang, PaperMC, Purpur, Fabric, Quilt, Forge, NeoForge, Spigot, Sponge, Modrinth, CurseForge or another source, that source sees your IP address, as with any download.
• Player faces. Mineshire builds a player’s face from Mojang’s skin service and falls back on mc-heads.net, so player names are sent to Mojang and, when needed, to mc-heads.net.
• Discord. If Discord is open on your computer, Mineshire can show on your Discord profile that it is open and how many servers and players you have. This is on by default and can be switched off in Settings. Server names are shown only if you turn that on, and an address is never shown.
• Tunnels. If you use a tunnel, a program from playit.gg relays the traffic between your players and your computer. playit.gg handles the connection data of you and your players, including their IP addresses.
• Google Drive backups. If you connect Google Drive, Mineshire asks for the permission that only covers the files it creates itself. Backups go to your own Drive, and the sign-in tokens are stored on your computer.
• Log sharing. When you share a console log, its text is uploaded to minelog.org, or to the address you chose in Settings. Read a log before you share it. You can delete an upload from the app for 60 minutes after you create it.
• MOTD editor. When you choose to edit a server’s MOTD on motd.gg, the MOTD text and the server’s picture are sent to motd.gg.

5. Why we use personal data, and on what basis

Where the UK GDPR or the EU GDPR applies, we rely on these legal bases:

• Contract. To create your account, show your servers on it, and run friends, sharing and the other features you ask for.
• Legitimate interests. Keeping the Services secure, preventing abuse, fixing faults and looking into problems you report. We have weighed these interests against your rights and use only what is needed.
• Consent. Optional features you switch on, such as remote control or server names on Discord. Switching the feature off withdraws your consent, and what happened before stays lawful.
• Legal obligation. Cases where the law obliges us to keep or hand over information.

We don’t use personal data for advertising or profiling, and no automated decision about you has legal or similarly significant effects.

6. Who receives personal data

We use providers to run the Services, and they process personal data on our behalf: Supabase for the database and sign-in, Vercel for hosting the website, Cloudflare for our domain and for routing requests, and GitHub for hosting installers and updates. GitHub and Discord also receive the information that is part of signing in with them.

We never sell personal data. We hand it over only when the law requires it, for example in answer to a valid order from a court or an authority, or when it is needed to protect people from harm or to protect our legal rights.

7. Transfers abroad

We work from Türkiye, and our providers handle data in other countries too, the United States among them. When personal data goes to a country without an equivalent level of protection, the UK GDPR and the EU GDPR require safeguards, and we rely on adequacy decisions or the standard contractual clauses, with the UK addendum where it applies.

8. How long we keep personal data

• Account data stays until you delete your account. In the dashboard on mineshire.com you can delete it yourself. Deleting it removes your profile, your computers and server list, your friendships, and your shares with their logs.
• Console lines sent for remote control are removed when the server stops, or after an hour.
• Server logs at our hosting providers are kept for the period each provider sets, which is normally short.
• Messages to us are kept for as long as we need them to answer you and to keep a record of the question.
• Copies of deleted data can remain in our providers’ backups for a limited time until those backups expire.

9. Your rights

Which rights you have depends on where you live. Typically you can ask us for a copy of your personal data, have it corrected or erased, restrict or object to how we use it, receive it in a portable format, or withdraw consent you gave. To use one, write to us at the address below. We answer within one month, and we may first ask you to confirm who you are.

You can also complain to the authority that supervises data protection where you live: the Information Commissioner’s Office in the United Kingdom, the authority of your own country in the European Union, and the Personal Data Protection Board (KVKK) in Türkiye. We’d like the chance to put things right first.

10. Children

Mineshire is not meant for children under 13, and we do not knowingly collect personal data from them. If you think a child under 13 has an account, write to legal@mineshire.com and we will delete it.

11. Security

Everything the app and the website send to us travels over encrypted connections. The token that keeps you signed in is stored in your computer’s credential store. Our database restricts each person to their own data and to the shares they take part in. No system is completely secure. If a breach affects your personal data, we will tell you and the authorities where the law requires us to.

12. If you are in Türkiye

For people in Türkiye this policy also serves as our information notice under Law No. 6698 on the Protection of Personal Data. You have the rights listed in Article 11 of that law, and you can use them by writing to legal@mineshire.com.

13. Changes to this policy

When the way we handle personal data changes, this policy changes with it. The date at the top shows the last change. Each new version goes on mineshire.com, and material changes are noted in the changelog.

14. Contact

LogicByte Studios, legal@mineshire.com.