Privacy Policy

Voidlist is a Minecraft server listing and voting platform operated by Ellie Grey, based in the United Kingdom. If you have any questions about this Privacy Policy, you can contact us at our contact form.

We collect the following types of data:

Account data

• Username and email address when you register
• Password (stored as a secure hash, never in plain text)
• Optional profile information such as avatar and bio
• Discord account ID and username if you connect your Discord

Usage data

• The Minecraft username you enter when voting (passed to the server you vote for so it can deliver in-game rewards)
• IP address when you cast votes, used to enforce vote cooldowns and to help detect automated abuse
• Server listings you submit
• Votes you cast and reviews you leave
• Messages you send us through the contact form
• Anonymous, aggregate usage analytics: page and server views, link clicks, live visitor counts, device type, approximate country (no IP stored), the site you arrived from, and whether you are a new or returning visitor

Payment data (from September 2026)

• Payment processing is handled by Stripe. We do not store card details.
• We retain billing history and subscription status

We use your data to:

• Provide and operate the Voidlist service
• Forward your vote and Minecraft username to the server you voted for so it can issue rewards
• Enforce vote cooldowns and detect automated voting, including through a captcha
• Send account related emails (verification, password reset)
• Display aggregate server statistics such as players, votes, uptime, and views
• Process premium subscription payments
• Respond to support requests
• Improve the service based on usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We share data only with the following third party services necessary to operate Voidlist:

• Supabase: database and authentication hosting
• Vercel: website hosting and deployment
• Cloudflare: bot protection and captcha (Turnstile) on the voting form
• Stripe: payment processing (from September 2026)
• Namecheap Private Email: email delivery

When you vote for a server, the Minecraft username you provide is sent to that server (via the Votifier protocol) so it can deliver any in-game rewards. We have no control over how an individual server handles that username once it is delivered.

All third party services are required to handle your data in accordance with applicable data protection laws.

Voidlist uses cookies solely for authentication, specifically to keep you logged in. We do not use advertising or cross-site tracking cookies. For anonymous, aggregate analytics we store a randomly generated visitor identifier in your browser (using local storage, not a cookie) so we can tell new visitors from returning ones, together with your device type (mobile or desktop), approximate country (provided by our hosting platform without ever storing your IP address), and the site you arrived from. None of this is linked to your real identity. You can clear it any time by clearing your browser storage, and disabling cookies will stop you staying logged in.

We retain your account data for as long as your account is active. Vote history and IP addresses used for cooldown enforcement are retained for 24 hours then may be deleted from active systems. Anonymous usage analytics are kept only in aggregate form and are not linked to your account. If you delete your account, your personal data will be removed within 30 days, except where we are required to retain it by law.

As a UK or EU resident, you have the following rights under GDPR:

• Right to access: request a copy of the data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data
• Right to restrict processing: request we limit how we use your data
• Right to data portability: request your data in a portable format
• Right to object: object to certain types of processing

To exercise any of these rights, contact us at our contact form. We will respond within 30 days.

Voidlist is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

We take reasonable measures to protect your data including encrypted connections (HTTPS), hashed passwords, and row level security on our database. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Continued use of Voidlist after changes constitutes acceptance of the updated policy.

For any privacy related questions or to exercise your rights, contact us at our contact form.