Privacy Policy

1. Introduction

METIN2.GG ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

We collect the following types of information:

• Account information: Email address when you create an account via magic link authentication.
• Server submissions: Server name, description, website URL, banner image, and other details you provide when submitting a server.
• Contact messages: Name, email, subject, and message content when you use our contact form.
• Usage data: IP address (for rate limiting and anti-abuse), browser type, pages visited, and voting activity.
• Cookies: Authentication session cookies and essential functional cookies. We do not use tracking or advertising cookies.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your account and manage sessions
• Process server submissions and display listings
• Enable voting and review functionality
• Prevent abuse, spam, and fraudulent activity
• Respond to your contact messages
• Improve the Service based on usage patterns

4. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure). We use industry-standard security measures including encryption in transit (TLS) and at rest. Authentication is handled via secure, httpOnly session cookies. IP addresses used for rate limiting are stored temporarily in Redis and automatically expire.

5. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Vercel: Website hosting
• Cloudflare Turnstile: CAPTCHA protection (no tracking)
• Upstash Redis: Rate limiting

We do not sell your data to third parties. We do not use Google Analytics or any advertising tracking services.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing

To exercise any of these rights, please contact us.

7. Data Retention

Account data is retained as long as your account is active. Server listings remain until removed by the owner or an administrator. Contact messages are retained for up to 12 months. Rate limiting data expires automatically within 1 hour. You may request deletion of your data at any time.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the last update at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us.