VoidCraft · Privacy
Privacy and data handling.
VoidCraft website accounts store a username, email address, a salted password hash, account timestamps, and server-side session hashes. Passwords are never stored as plain text.
What this website stores
- Username and email you submit when registering.
- A per-account salt and PBKDF2-SHA-256 password hash for sign-in.
- Hashed session tokens and expiration timestamps so the website can keep you signed in.
- Short-lived rate-limit keys derived from the request IP to help protect sign-in and registration routes.
- Cloudflare may process standard connection and security metadata to deliver the site.
Cookies and retention
A secure, HttpOnly, SameSite session cookie is used for up to seven days. Sign out removes the current server-side session. Expired sessions are cleaned up during authentication requests.
Important limits
Email verification, account recovery, deletion requests through a self-service control, payments, Microsoft/Xbox/Minecraft sign-in, and launcher-linked accounts are not connected yet. Please do not reuse another service's password.
Contact and policy updates
This is a community project and this policy should be reviewed before opening registration broadly or adding more account features.