Privacy policy

What we store

• Accounts: username, email address and a salted password hash (bcrypt). Your email is never shown publicly and never shared with third parties.
• Votes: a one-way hash (HMAC-SHA256) of your IP address per vote, used only to enforce the 12-hour cooldown and detect abuse. Raw IP addresses are not stored with votes; hashes older than ~35 days are deleted automatically.
• Rate limiting: the same one-way IP hash with a timestamp for login/registration abuse protection, deleted after 2 days.
• Cookies: one session cookie (MOTSESS) for login state and CSRF protection. No tracking cookies, no analytics scripts, no ad networks.

Server listings

Listings are public by design: the server name, website, rates, season, country, Discord link, banner and description you submit are shown to every visitor. Vote totals are public. Outbound clicks are not tracked per user.

Your rights

You can edit or delete your servers from your account at any time. To delete your account and its data entirely, contact us via the contact page from the email you registered with.

Third parties

Server banner images may be loaded from the URL a server owner provided (their own domain or our sister site mutop100.com), which means those hosts see the usual browser image request. Nothing else leaves this site.