Privacy Policy

Last updated: January 2025

VoxelBench ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and Minecraft plugin.

Information We Collect

We collect information in several ways when you use our services:

Account Information

Email address (for account creation and communication)
Username and display name
Profile picture (if provided or from OAuth)
Information from linked social accounts (Discord, GitHub, Twitter, YouTube)

Benchmark Data

Hardware specifications (CPU model, core count, RAM amount, disk type)
Server software information (version, type, Java version, OS)
Performance metrics (TPS, MSPT, test results)
Anonymous server identifier (hashed)

Technical Information

IP address (for security and rate limiting)
Browser type and device information
Session and preference cookies

Certification Data (Hosting Providers)

Announced and detected server specifications (CPU, RAM, storage)
Server IP address and access credentials (during testing only)
Purchase documentation (order confirmations, invoices, panel screenshots)
Video recording of the benchmark process (published on YouTube)
Contestation requests and resolution details

How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain our benchmarking service
To display benchmark results on public leaderboards
To enable comparison of server performance
To ensure security and prevent abuse
To improve our services and develop new features

Information Sharing

We may share your information in the following circumstances:

Benchmark reports you choose to make public are visible on our leaderboard
Completed certifications are publicly visible by default for transparency, including: plan name, benchmark scores, specs verification results, server IP, and benchmark video
Benchmark videos are hosted on YouTube and publicly accessible
With service providers who assist in operating our services (hosting, database)
When required by law or to protect our rights

We do not sell your personal information to third parties.

Third-Party Services & Sub-processors

VoxelBench relies on the following sub-processors. Each one acts under a contractual data-processing agreement (DPA) and processes personal data only on our documented instructions:

hosting

Hetzner Online GmbH (Germany) — application hosting and database. DPA: https://www.hetzner.com/AV/DPA.pdf

stripe

Stripe Payments Europe Ltd (Ireland) — payment processing, billing, invoicing. DPA: https://stripe.com/legal/dpa

storage

Cloudflare R2 (S3-compatible storage) — user uploads (avatars, certification evidence). DPA: https://www.cloudflare.com/cloudflare-customer-dpa/

SMTP provider (transactional & notification email). DPA available on request.

oauth

OAuth providers — Discord, Google, GitHub, Twitter — for authentication only. They receive an authentication request and return your email + display name; no other data is shared with them by us.

OpenAI (USA) — text moderation only, on user-submitted content. We send the content to moderate; the response is a label, no data is retained for training (zero-retention enterprise endpoint). DPA: https://openai.com/policies/data-processing-addendum

We never sell your data and the only personal information shared with these sub-processors is the strict minimum needed to deliver the requested feature.

Data Retention

We retain your information for as long as necessary to provide our services:

Account data is retained until you delete your account

Public benchmark reports are retained indefinitely unless deleted

Certification data (including purchase proof and videos) is retained for 2 years after certification expiry for audit purposes

Security logs are retained for 90 days

Your Rights

Depending on your location, you may have the following rights:

Right to access your personal data

Right to correct inaccurate data

Right to delete your data ("right to be forgotten")

Right to data portability

Right to object to processing

To exercise these rights, please contact us using the information below.

We use cookies for the following purposes:

Essential cookies for site functionality and authentication
Session cookies to maintain your login state
Preference cookies to remember your settings (theme, language)

Security

We implement appropriate technical and organizational measures to protect your personal information. This includes encryption of data in transit (HTTPS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or our data practices, please contact us:

Email:[email protected]

Discord:discord.gg/Q84GDg2wac