Privacy Policy

Last updated: May 2026

1. Who We Are

Voidlist is a Minecraft server listing and voting platform operated by Ellie Grey, based in the United Kingdom. If you have any questions about this Privacy Policy, you can contact us at support@voidlist.xyz.

2. What Data We Collect

We collect the following types of data:

Account data

  • Username and email address when you register
  • Password (stored as a secure hash, never in plain text)
  • Optional profile information such as avatar and bio
  • Discord account ID and username if you connect your Discord

Usage data

  • IP address when you cast votes (used for cooldown enforcement only)
  • Server listings you submit
  • Votes you cast and reviews you leave

Payment data (from September 2026)

  • Payment processing is handled by Stripe. We do not store card details.
  • We retain billing history and subscription status

3. How We Use Your Data

We use your data to:

  • Provide and operate the Voidlist service
  • Enforce vote cooldowns and prevent fraud
  • Send account related emails (verification, password reset)
  • Process premium subscription payments
  • Respond to support requests
  • Improve the service based on usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Sharing

We share data only with the following third party services necessary to operate Voidlist:

  • Supabase — database and authentication hosting
  • Vercel — website hosting and deployment
  • Stripe — payment processing (from September 2026)
  • Zoho Mail — email delivery

All third party services are required to handle your data in accordance with applicable data protection laws.

5. Cookies

Voidlist uses cookies solely for authentication purposes — specifically to keep you logged in. We do not use tracking cookies or advertising cookies. You can disable cookies in your browser settings, but this may prevent you from staying logged in.

6. Data Retention

We retain your account data for as long as your account is active. Vote history and IP addresses used for cooldown enforcement are retained for 24 hours then may be deleted from active systems. If you delete your account, your personal data will be removed within 30 days, except where we are required to retain it by law.

7. Your Rights (GDPR)

As a UK or EU resident, you have the following rights under GDPR:

  • Right to access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data
  • Right to restrict processing — request we limit how we use your data
  • Right to data portability — request your data in a portable format
  • Right to object — object to certain types of processing

To exercise any of these rights, contact us at support@voidlist.xyz. We will respond within 30 days.

8. Children's Privacy

Voidlist is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Security

We take reasonable measures to protect your data including encrypted connections (HTTPS), hashed passwords, and row level security on our database. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Continued use of Voidlist after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy related questions or to exercise your rights, contact us at support@voidlist.xyz.