What Isletmod does with your data
To make sure every player is a real, unique user, Isletmod links your Discord account, your Minecraft account and the computer you play on. Nothing is sent until you accept the data notice in the game. We do not collect chat, keystrokes, screenshots, files, or gameplay data, and we do not sell or share your data.
What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Discord user ID and display name | Your account; license and role management | Until you delete your account |
| Minecraft UUID and name | Prove you own the Minecraft account (via Mojang's session service); prevent account sharing | Until unlinked or your account is deleted |
| Hardware fingerprint hash | One device per license; prevent account sharing and ban evasion. Hardware identifiers are hashed on your PC and never leave it; we store only a keyed hash of that hash, which cannot be reversed. | Until you reset your devices or delete your account |
| IP address | Security (rate limiting, investigating account theft) | Encrypted, deleted after 30 days |
| License keys you redeem | Deliver your license | Keys are stored only as hashes |
| Security log (logins, device changes, license and moderation actions) | Detect and investigate abuse and account theft | Kept; it contains only an internal random ID, which no longer points to you once your account is deleted |
| Bans (reason, Discord ID, hardware hash) | Enforce bans | For the ban's duration, even if you delete your account, so deletion can't be used to dodge a ban |
We never ask Discord for your email address (we only use the identify permission), and we don't keep your Discord login token: we use it once to read your ID and name, then revoke it.
What we never collect
- Chat messages, keystrokes or anything you type
- Screenshots, files or anything else on your PC
- What you do in game or which servers you play on
- Your Discord email, friends or servers
Where your data is stored
On our own server at OVHcloud. When you log in, Discord and Mojang/Microsoft handle that part under their own privacy policies.
Security
Encrypted connections (TLS 1.3 with certificate pinning); every server response is cryptographically signed; IP addresses are encrypted in the database; login tokens are short-lived and stored only as hashes; backups are encrypted; the security log is tamper-evident.
Your choices
Use these commands in our Discord at any time:
- Get a copy of your data:
/privacy export(a file with everything we store about you). - Delete your account and data:
/privacy delete. - Reset your devices (new PC):
/reset-hwid.
Backups are kept for up to 14 days, so deleted data also disappears from backups within that time.
Questions
Ask in our Discord server: discord.gg/rFMxZrYfjq.
Changes
If we change what we collect, the game shows the updated data notice and asks for your consent again.