Privacy Policy
Last updated: May 2026
1. Who We Are
Voidlist is a Minecraft server listing and voting platform operated by Ellie Grey, based in the United Kingdom. If you have any questions about this Privacy Policy, you can contact us at support@voidlist.xyz.
2. What Data We Collect
We collect the following types of data:
Account data
- Username and email address when you register
- Password (stored as a secure hash, never in plain text)
- Optional profile information such as avatar and bio
- Discord account ID and username if you connect your Discord
Usage data
- IP address when you cast votes (used for cooldown enforcement only)
- Server listings you submit
- Votes you cast and reviews you leave
Payment data (from September 2026)
- Payment processing is handled by Stripe. We do not store card details.
- We retain billing history and subscription status
3. How We Use Your Data
We use your data to:
- Provide and operate the Voidlist service
- Enforce vote cooldowns and prevent fraud
- Send account related emails (verification, password reset)
- Process premium subscription payments
- Respond to support requests
- Improve the service based on usage patterns
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Data Sharing
We share data only with the following third party services necessary to operate Voidlist:
- Supabase — database and authentication hosting
- Vercel — website hosting and deployment
- Stripe — payment processing (from September 2026)
- Zoho Mail — email delivery
All third party services are required to handle your data in accordance with applicable data protection laws.
5. Cookies
Voidlist uses cookies solely for authentication purposes — specifically to keep you logged in. We do not use tracking cookies or advertising cookies. You can disable cookies in your browser settings, but this may prevent you from staying logged in.
6. Data Retention
We retain your account data for as long as your account is active. Vote history and IP addresses used for cooldown enforcement are retained for 24 hours then may be deleted from active systems. If you delete your account, your personal data will be removed within 30 days, except where we are required to retain it by law.
7. Your Rights (GDPR)
As a UK or EU resident, you have the following rights under GDPR:
- Right to access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data
- Right to restrict processing — request we limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to certain types of processing
To exercise any of these rights, contact us at support@voidlist.xyz. We will respond within 30 days.
8. Children's Privacy
Voidlist is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
9. Security
We take reasonable measures to protect your data including encrypted connections (HTTPS), hashed passwords, and row level security on our database. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Continued use of Voidlist after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy related questions or to exercise your rights, contact us at support@voidlist.xyz.