Privacy Policy

Last Updated: June 21, 2026

1. Introduction

Welcome to McScan ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at mcscan.org and our Minecraft server scanning services. By using our service, you agree to the practices described in this policy.

Our servers are located within the European Union. If you are located in the EU, the General Data Protection Regulation (GDPR) applies to the processing of your personal data, and you have the rights described in Section 8 below.

2. Data We Collect

We collect and store the following information about you:

  • Email Address: Collected at registration and used to identify your account, send essential transactional communications (e.g. billing alerts), and allow you to recover access to your account.
  • Legacy Usernames: If you created an account before our current authentication system, your legacy username may be stored in our database.
  • IP Address (Server Logs): Your IP address is recorded in our server logs for security, abuse prevention, and debugging purposes. Logs are retained for a limited period and are not used for advertising.
  • Discord ID & Refresh Token: Only collected if you explicitly choose to link your Discord account through the account settings page. This data is used solely to enable the Discord integration feature.
  • Billing Information: Payment processing is handled entirely by Stripe, Inc., a separate, independent company. We do not store your full credit card number or CVV. We retain only a Stripe Customer ID and Subscription ID on our side, which are opaque identifiers used solely to manage your subscription status.

3. How We Use Your Data

  • To create and manage your McScan account.
  • To process subscription payments and manage billing through Stripe.
  • To authenticate you during login and protect your account.
  • To detect and prevent fraud, abuse, and security threats.
  • To diagnose technical issues and maintain service reliability (see Section 5 — Error Monitoring).
  • To analyse aggregate website usage and improve our service (see Section 4 — Cookies and Tracking).

4. Cookies and Tracking

We use the following cookies on our website:

  • Session Cookie: Set when you log in to keep you authenticated. This cookie is essential and cannot be disabled without breaking the login functionality.
  • Google reCAPTCHA: Used on our registration form to protect against automated bot sign-ups. Google may set its own cookies as part of this process. Their use of data is governed by Google's Privacy Policy.
  • Google Analytics: We use Google Analytics to analyze website traffic.

We do not use advertising cookies or cross-site tracking.

5. Error Monitoring (Sentry)

We use Sentry (sentry.io) to capture and monitor application errors. When an unhandled error occurs, Sentry may automatically collect technical context that could include your IP address or, in some cases, your email address if it is present in the application's session or request context at the time of the error.

This data is used solely for diagnosing and fixing software bugs. It is not used for marketing, shared with advertisers, or combined with other datasets. Sentry's data handling is governed by the Sentry Privacy Policy. Under GDPR, Sentry acts as a data processor on our behalf.

6. Third-Party Services

Certain third-party services are necessary for McScan to function. Each service receives only the minimum technical information required for it to perform its specific role. We do not share your personal data with any third party beyond what is described below, and we do not sell your data.

  • Stripe, Inc. — An independent payment processing company. When you subscribe, your payment card details are entered directly into Stripe's secure form and processed entirely on their infrastructure. McScan never sees or stores your raw card data. Stripe operates under its own Privacy Policy and is certified to the highest payment security standards (PCI DSS Level 1).
  • Google reCAPTCHA — Used on the registration form to distinguish human users from automated bots. Google receives the result of a browser-level challenge; no McScan account data is involved. Governed by Google's Privacy Policy.
  • Sentry — Error monitoring tool used to detect and diagnose application crashes (see Section 5). Sentry receives only automatic crash reports, which may incidentally contain technical context such as an IP address or email. No data is deliberately sent to Sentry. Governed by the Sentry Privacy Policy.
  • Google Analytics — Used to analyze website traffic.

7. Data Retention

We retain your account data for as long as your account is active. After you request account deletion, your personal data is retained for up to 30 days to allow for billing dispute resolution or chargebacks.

8. Your Rights

You may contact us at any time to request:

  • Account & Data Deletion: We will permanently delete your account and all associated personal data within 30 days of your request.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of McScan after such changes constitutes your acceptance of the updated policy.

10. Contact

For any privacy-related questions or data deletion requests, contact us at [email protected].