Privacy policy

Data controller

MYROLAME, 10 avenue Maréchal Foch, 21000 Dijon. Contact for any question about your data: [email protected] or the contact page.

Data processed

• Account: username, email address, password (stored only in hashed form), optional Minecraft username, ID of your Google, Apple or Discord account if you use it to log in, two-factor authentication settings. Legal basis: performance of the service.
• Votes: Minecraft username, date, and IP address, which is never stored in plain text: only a fingerprint computed with a secret key is kept, to block duplicate votes and fraud. To spot automated voting, we also keep a fingerprint of the address range (/24 or /48) and of the browser (cookie “vd”), and look for telltale patterns (votes around the clock, votes timed to the minute, many usernames from the same device): a suspicious vote is still delivered to the server but may be left out of the ranking. Fingerprints are deleted after 180 days, and the votes themselves after 25 months. Legal basis: legitimate interest (integrity of the ranking).
• Login sessions: IP address and browser, shown under “Connected devices”; the IP address is deleted after 90 days. Legal basis: account security.
• Servers, reviews, reports, contact messages: content you publish or send. Legal basis: performance of the service.
• Purchases: orders and invoices, kept for 10 years (accounting obligation). Bank card and PayPal account data is processed directly by Stripe and PayPal; the site never receives it.
• Listing statistics: number of visits, IP copies and clicks, counted in aggregate with no individual profile.

Recipients and processors

• Site host: PulseHeberg (SERVERD SAS).
• Payment: Stripe and PayPal.
• Login: Google, Apple or Discord, only if you choose this login method.
• Anti-bot: Cloudflare Turnstile, if it is enabled on the vote page.
• The avatars of top voters are loaded from mc-heads.net, based on the Minecraft username.
• Your profile picture is the image you upload, cropped and re-encoded by our servers; if you choose your skin’s head, it is fetched from Mojang based on your Minecraft username. You can remove it at any time.
• The servers you vote for receive your username (and your IP address if they use Votifier), so they can give you your reward.

Some of these providers are located in the United States; transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses of the European Commission.

Cookies and local storage

The site uses no advertising or audience measurement cookies. It only sets essential cookies: your login session, the security of logins with Google, Apple or Discord, your language choice (cookie “lang”, kept for one year; also saved on your account if you are logged in), and an anti-fraud identifier set by the vote page (cookie “vd”, kept for one year, used only to detect automated voting). Your browser also keeps your last vote username locally, to prefill it. None of this requires consent.

Your rights

You can access your data, correct it, delete it, restrict its processing, object to processing based on legitimate interest, and get your data in a readable format. From your account: Profile → “Download my data” or “Delete my account”. For any other request, write to us. You can also file a complaint with the CNIL (cnil.fr), the French data protection authority.

Security

Hashed passwords (bcrypt), secrets encrypted in the database (AES-256-GCM), encrypted connection (HTTPS), and two-factor authentication available to everyone and required for the site team.