Privacy and security

What we keep, and what we don't

• SFTP details are used for one connection while you install or uninstall, then forgotten. They're never saved or logged. Your browser only remembers the non-secret parts if you ask it to.
• Chat passes straight through and isn't kept. Messages waiting to reach your world are held only until it collects them.
• Statistics are counts per day, such as messages, joins and deaths, not the messages themselves.
• Linked accounts store which Discord account goes with which Minecraft name in that world, and nothing else. Anyone can undo their own link with /relay link.
• Player details: the last snapshot of each player's inventory, health and position is kept for the owner's dashboard, replaced each time they leave or are viewed, and deleted when the world is removed for good.
• The moderation log keeps the name of each player kicked from the dashboard, the reason given and when, until the world is removed for good.
• Your account: your Discord user ID, name and picture, and when you signed in. We never see your Discord password or email address.
• Your Microsoft sign-in, if you connect a Realm, is kept encrypted until you sign out. See Your Microsoft sign-in.

Nothing is sold or used for advertising. The full details are in the Privacy Policy.

Pack tokens

The pack proves which server it is with a token that's built in when it's installed. Tokens are stored only in scrambled form, so they can't be read back, even by us. Each install issues a new one.

If your pack zip or its config files may have been seen by someone else, choose Revoke all pack tokens… under Security on the server's Settings tab. The pack stops connecting straight away, until you reinstall it, which issues a new token.

Who can change what

• Only the person who set up a Minecraft world can connect it to channels, change its channels, allow commands, manage its plugins and players, or remove it.
• Anyone with Manage Server in a Discord server can always disconnect a world from that Discord server, from the dashboard or with /relay disconnect, or stop everything there with Disconnect everything.
• Changes made to BedrockRelay in a Discord server are listed, with who made them, on that Discord server's Activity tab, for everyone who can manage it.
• Every change on the dashboard checks your Discord permissions again, so losing Manage Server takes effect at once.