MMCO | Murder Mystery

1

What we collect and why

Discord login

When you sign in, Discord sends us your user ID, display name, and profile picture through its OAuth flow. We use them to create your session and identify you while you're logged in. We never see or store your Discord password.

MMD bot activity

When someone uses /mmdto look up a player, we log their Discord user ID, the server it was used in, the player's IGN, and the time. When someone files a /report, we record the player's IGN, the violation category, the evidence description, and the reporter's Discord ID. This supports staff reviews and helps us catch bot abuse.

Standard request logs

Like any web server, we log IP addresses, browser info, and which pages were visited. These are kept for roughly 30 days for debugging and abuse prevention, then discarded.

2

Public Minecraft data

Player usernames, UUIDs, and skins are fetched from Mojang's public API. Game stats come from the public Hypixel API. This information is already publicly available and isn't linked to your MMCO account unless you explicitly claim a player profile.

3

Cookies

We set a single session cookie to keep you logged in. That's all. No ad trackers, no third-party analytics scripts, no fingerprinting.

4

Who we share data with

We don't sell your data. We don't share it for advertising. The only parties that receive data from us are the ones needed to run the site:

Our hosting provider, which runs the servers that serve the site
Discord, which handles authentication and community features
Hypixel and Mojang, whose public APIs we query to fetch player data

We may also share information if required by law, or to protect the community from serious abuse or illegal activity. (Hopefully it will not be that serious.)

5

How long we keep data

Account data stays around as long as your account is active. Request logs are cleared after about 30 days. Player profiles submitted to the directory may be kept for historical integrity even if the original submitter removes their account. If you want your account data deleted, message us in Discord and we'll take care of it within 30 days.

6

Your rights

You can disconnect MMCO from your account entirely via Discord's Authorised Apps settings. This revokes our access and ends your session.

7

Updates to this policy

If we change how we handle data, we'll update the date at the top of this page and post a notice in our Discord for significant changes.

8

Contact

Questions about your data or this policy? Come find us in Discord.

discord.gg/mmco