Privacy Policy

Last updated: 2026-09-28

VC Servers is run by Jester Demi ("we"). This page explains what we collect, why, and what you can do about it. Questions: support@vcservers.net.

What we collect

• Account info: your username, email address and password. Passwords are stored as a one-way hash, so nobody (including us) can read them.
• Discord (if you use it): when you log in with Discord we get your Discord ID, username, avatar and email. When you list a server we also read the list of Discord servers you manage, once, only to let you pick one; we don't store that list.
• Bumps: when someone uses /bump in Discord, our bot records their Discord ID and display name with the time, to enforce cooldowns and show bump leaderboards.
• Server listings: whatever you put in a listing (name, address, description, tags, links). Listings are public once approved.
• Query API keys (optional): if you add one to get verified, it's stored encrypted and only used to read your server's name and user count.
• Two-factor login (optional): your authenticator secret is stored encrypted; recovery codes are stored as hashes.
• Votes and reports you make.
• Security data: we keep a scrambled (hashed) version of your IP address to stop spam, fake votes and brute-force logins, and a log of security events on your account (logins, password changes and similar).

Why we use it

To run the directory, keep accounts secure, count votes fairly, stop abuse, and send you emails you need (confirming your email, password resets and security alerts). We don't send marketing emails and we don't sell or rent your data. The legal bases are running the service you signed up for and our legitimate interest in keeping it secure.

Cookies

We use one essential cookie to keep you logged in. It's deleted when you log out or close your browser. We don't use advertising or tracking cookies.

Services we use

• Hosting: our web host stores the site and database.
• Discord for "Log in with Discord", the bot, and server icons and member counts (loaded from Discord's servers).
• Cloudflare Turnstile checks that sign ups and logins come from humans. Cloudflare processes technical data such as your IP address for this; see Cloudflare's privacy policy.
• Have I Been Pwned: when you pick a password we check if it has leaked in a known data breach. Only the first 5 characters of a hash of your password are sent, never the password itself.
• Email: account emails are sent from our own mail server.

How long we keep it

Account data stays until you delete your account. Rate-limit records are deleted after 2 days. Security logs are kept for up to 12 months. Deleting your account removes your profile, listings and votes right away; backups roll off within 30 days.

Your rights

You can see, download and delete your data at any time from your account page, and change your email or password there. If you're in the EU/EEA or UK you also have the right to correct your data, object to or restrict how we use it, and complain to your local data protection authority. For anything else, email support@vcservers.net.

Security

We use HTTPS everywhere, hashed passwords, encrypted secrets, optional two-factor login, rate limiting and login alerts. No system is perfect; if you think you found a security problem, please email us.

Children

VC Servers is not meant for children under 16. If you believe a child has made an account, contact us and we'll remove it.

Changes

If we change this policy in a meaningful way, we'll update the date above and, for big changes, let account holders know by email.