Privacy policy

Last updated 2 November 2026. Short version: we keep what an account needs, nothing more, and we never sell it.

What we store

• Account: username, email, country, and a scrypt hash of your password (never the password itself). If you sign in with Steam: your public SteamID and Steam name.
• Account emails: we email you only to confirm your address, reset your password or warn you about changes to your account. We don't send newsletters.
• Session cookie: one cookie, ms_session, that keeps you signed in. We set no tracking or advertising cookies (reCAPTCHA's are Google's, see below).
• Favorites and recently played stay in your browser's local storage, not on our server.
• Your IP address is used in memory to estimate ping, show your country and rate-limit sign-ins and server checks. We don't write it to disk.
• Player names on servers: every listed server tells anyone who asks which nicknames are playing. We record, per nickname, how many minutes it was seen on each server and when, and show that on a public player page that search engines are asked not to index. Servers don't give us Steam accounts or IP addresses of players, so we don't have them.

Who sees it

Account data: nobody outside masterserver.gg. Player pages are public, built from names the servers publish. The site runs behind Cloudflare, which processes requests to protect and deliver it. Account emails go out through Resend, which receives your address and the message. The sign-in, sign-up and add-server forms use Google reCAPTCHA to stop bots: on those pages Google receives your IP address and browser data and may set its own cookies, under Google's Privacy Policy and Terms. IP locations come from the DB-IP Lite database, stored on our server.

Your rights

You can ask for a copy of your data or for your account to be deleted at any time, or delete your account yourself in Settings. You can also ask us to remove the player page of a nickname you use. We act within 30 days.