Privacy Policy

Version 2026-10-23. Last updated October 23, 2026.

This policy explains what personal information JetRift collects when you use the website and hosting service, why, who it is shared with, how long it is kept and what choices you have. Contact: [email protected].

1. Short version

• We collect only what we need to sign you in, run your server and keep the service safe.
• We do not sell your personal information, we do not show advertising, and we do not use your worlds or messages to train anything.
• You can download your worlds, delete your servers and delete your account at any time.

2. What we collect

• Google Drive connection (only if you connect it for backups): we ask Google for permission to create files in your Drive (the “drive.file” permission, which cannot see anything JetRift did not create). We keep the long-term access token encrypted, use it only to save, restore and delete your backup files, and revoke it when you disconnect or delete your account. You can also remove JetRift at any time in your Google account’s third-party access settings.
• Account data from Google sign-in: your Google account identifier, email address, name and profile picture, plus the username you choose. We never see your Google password.
• Server data: server names, addresses (<name>.jetrift.com), settings, whitelists, operator and ban lists, access you grant to other people, backups, world files and files you upload or edit, and the console log of your server.
• Player data: when someone joins a server we see their Minecraft username and UUID, the server they are joining and, as with any internet service, their IP address. Minecraft sign-in is verified with Mojang’s authentication service. Your server’s world also contains whatever players do in it, such as their inventory and positions.
• Technical data: connection logs, IP addresses, request logs, error logs and resource usage (memory, processor, storage, network) used to run, limit and protect the service.
• Visit counts: when you open our home page we count one anonymous visit (ignoring crawlers and scripts). To count each visitor once a day we hash your IP address and browser string together with a random value that changes every day and is never stored. Nothing that identifies you is kept, no cookie is set, and the same person cannot be recognised from one day to the next.
• Bug reports: what you write in the “Report a bug” form, the page you were on and, if you leave the box ticked, your browser and server status, plus your account name and email if you are signed in and allow a reply. We keep reports until they are handled and delete them within a year or when you delete your account.
• Support data: what you send us if you email us.

3. Why we use it (and our legal bases)

• To provide the Service — sign you in, store and run your worlds, route players to the right machine (performance of our contract with you).
• To keep the Service secure and fair — preventing abuse, enforcing limits, debugging, rate limiting (our legitimate interests).
• To answer you and to send essential notices about your account or the Service (contract and legitimate interests).
• To comply with law and to establish or defend legal claims (legal obligation and legitimate interests).
• With your consent where the law requires it — for example any optional email you agree to. You can withdraw consent at any time.

4. Cookies and local storage

We use one essential cookie, jr_session, to keep you signed in. It is HttpOnly, SameSite and (on the live site) Secure, and expires after a limited time. It is strictly necessary, so no consent banner is needed for it. We do not use advertising or analytics cookies. If you choose “Continue with Google”, Google’s sign-in script loads from Google and Google may set its own cookies under Google’s privacy policy. The website loads fonts from Google Fonts, which means your browser contacts Google when a page loads.

5. Who we share it with

• Infrastructure providers that process data for us under their terms: Google Cloud (the public website and routing machine), Cloudflare (DNS and traffic protection for jetrift.com), and the computers that store and run worlds. Storage and compute machines may be operated by JetRift or by trusted hosts on our behalf; worlds on such machines are transferred and stored there for as long as they are needed to run your server.
• Google (sign-in) and Mojang/Microsoft (Minecraft sign-in verification), each under their own privacy policies.
• People you choose: other members you give access to your server can see the server’s settings, lists and (depending on the permissions you give) console and files. A server’s public status shows its name, player count and message of the day to anyone who pings it.
• Authorities and others where required: if the law, a court or a valid legal request requires it, to protect people from serious harm, or to report illegal content such as child sexual abuse material to the proper authorities.
• Successors if JetRift is merged, sold or reorganised, under the same promises as here.
• We do not sell or “share” personal information as those terms are defined in California law, and we do not use it for cross-context advertising.

6. How long we keep it

• Account and server data: until you delete the server or your account. After deletion, worlds and files are removed from our systems promptly (normally immediately; at most within 30 days if a storage machine is offline at the time).
• Operational and security logs: kept only as long as needed to run and secure the service, intended to be no more than 30 days, unless needed for an investigation or to meet a legal obligation.
• Backups you create: they are files in your own Google Drive, kept until you delete them there or here. We do not keep our own hidden backups of your worlds.
• Support email: as long as needed to help you and handle follow-ups, up to 2 years.
• Inactive free servers may be deleted after a long period of inactivity (see the Terms).

7. Where it is processed

JetRift is operated from and may process data in the United States and other countries where our providers operate. When data about people in the EEA, UK or Switzerland is transferred abroad we rely on lawful transfer mechanisms such as the standard contractual clauses used by our providers.

8. Your rights

Depending on where you live (including under the GDPR/UK GDPR and the California Consumer Privacy Act), you may have the right to: access your data, correct it, delete it, receive a portable copy, object to or restrict some processing, withdraw consent, and complain to your data-protection authority. We will not discriminate against you for using these rights. You can do most of this yourself in the dashboard (edit your profile, download worlds and backups, delete servers and delete your account); for anything else email [email protected]. We may need to verify that a request really comes from you, and we answer within 30 days (or the shorter period the law requires).

9. California disclosures

Do Not Track: we do not track you across other websites and do not use advertising or cross-site analytics, so we treat all browsers the same and there is nothing for a Do Not Track signal to switch off. Shine the Light: we do not disclose personal information to third parties for their own direct marketing. CCPA/CPRA: in the past 12 months we have collected the categories listed in section 2 (identifiers, internet activity, and content you store) for the purposes in section 3; we have not sold or shared personal information; and we do not knowingly sell or share the data of anyone under 16. You may use an authorised agent to make a request, and we may ask you to confirm it with us.

10. Children

JetRift is not directed at children under 13 and we do not knowingly collect personal information from them. Google accounts and Minecraft accounts have their own minimum ages. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it. Players under 18 should use the Service only with a parent or guardian’s permission where the law requires it.

11. Security

We use encryption in transit on the public internet, authenticated and rate-limited internal connections, access controls and isolation of servers from each other. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires. Please report vulnerabilities to [email protected] — we welcome responsible disclosure and will not take action against good-faith research.

12. If you run a server

If you invite other people to your server you decide what happens in it and are responsible for how you treat their information (for example, chat and player data in your world). JetRift processes that data for you to run the server, and you should not use JetRift to collect more data from players than you need.

13. Changes

We may update this policy. We will change the date at the top, and tell you in the dashboard or by email if the change is material.

14. Contact

Privacy requests, questions and complaints: [email protected].