Privacy Policy

This Privacy Policy explains what personal data Krak Multiplayer processes when you use the Krak Multiplayer apps for Android, iPhone, iPad and Windows, the website krak-mp.cc and related services (together "Krak Multiplayer"), why we do it, who helps us, how long we keep it and what you can do about it. We try to collect as little as we can, and we never sell your data.

The short version

• We need a nickname to create your account. Email, Google sign-in, a profile picture and everything else are up to you.
• Game traffic goes through our relay so that players never see each other's IP addresses. Minecraft encrypts that traffic and we do not read it.
• Private messages are encrypted in our database. Pictures and videos in chats are deleted from our servers 7 days after sending.
• We use Claude, an AI by Anthropic, to translate texts when you ask for it and to help check reports. Anthropic does not use this data to train its models.
• World reviews and the texts of player ratings you write are public, with your nickname, unless you post them anonymously.
• No advertising or analytics trackers, no personalised ads, no selling of data.
• You can delete your account in the app at any time.

1. Who we are

The operator of Krak Multiplayer and the controller of your personal data ("we", "us"):

• Тимофій Соломенцев
• Email for privacy questions and requests: support@krak-mp.cc

2. What we collect and why

Your account

• Nickname, account ID and friend code; your confirmation that you are 13 or older (older accounts may also have a birth year); your language; which version of our documents you accepted and when.
• If you add them: an email address, a password (stored only as an argon2id hash, never in readable form) and the identifier of your Google account with its verified email address (we never get your Google password).
• For accounts without email ("device accounts"): a random identifier of the app installation and a hash of a secret the app keeps on your device. On Android the app also keeps a copy of this identifier and secret in Google's Block Store on your phone, backed up to your Google account only with end-to-end encryption, so a guest account survives reinstalling the app or moving to a new phone; we cannot read that copy.

Why: to create your account, sign you in and apply the age limit. Legal basis: our contract with you (these are needed to provide Krak Multiplayer).

Profile and friends

• What you choose to show: avatar, banner, profile background, bio, status, country flag, Xbox gamertag, badges and level.
• Friends, friend requests, follows, blocks, mutes and ignored players; your privacy and notification settings.
• If you link them: your Twitch account (ID, login, display name, picture) and Discord account (ID, username, display name, avatar). We do not keep access tokens. While your Twitch channel is live we read its public stream status (title, game, viewers) and count your streaming time for the Streamer badge. If you are on our Discord server, we give your Discord account the roles you qualify for (Krak Plus, Streamer, team); for that Discord only receives your Discord user ID.

Images are resized and their metadata (such as where a photo was taken) is removed. A replaced or removed image is deleted at once. Why: to run the social features you use. Legal basis: contract; linking Twitch or Discord happens only at your request.

Worlds, chats and posts

• Worlds you create (name, description, settings, pictures), the times you host or join a world, the Minecraft version, how the connection was made and how much traffic it used, invites, bans in your worlds, favourites, the world reviews you write and the ratings you give players: stars, text and whether you posted them anonymously (section 4 says who sees them).
• Messages in direct, group, community and world chats, with reactions. Pictures, voice messages and round video messages you send (the app uses the camera and microphone only while you record). GIFs are links to KLIPY (see section 4); we do not store the GIF itself.
• Posts, comments, wall comments, polls, likes, reposts, files attached to posts and the communities you join or run. We note which posts you have seen, to count views; nobody can see who viewed what.

Why: these are the features of Krak Multiplayer. Legal basis: contract.

Coins and Krak Plus

Your coin balance, the history of coins you received, sent or spent (with the note you add to a gift), the items you own and your Krak Plus periods. Coins are virtual; we do not process any payment data. Legal basis: contract.

Safety and moderation

• Reports you send or that concern you: the reason, your note, a frozen copy of the reported content and any screenshots you attach.
• Moderation decisions (warnings, hidden content, restrictions, bans), the reasons for them and a log of what our team did and when.
• The results of automatic checks (see section 3).

Why: to keep Krak Multiplayer safe, especially for younger players, to handle reports and appeals and to recognise repeated violations. Legal basis: our legitimate interests in a safe service and, where the law requires, legal obligations.

Technical and security data

• Device platform and model, operating system and app version, Minecraft version, whether the Android app was installed from Google Play, a random installation ID and the push notification token of the Android app. The iPhone and iPad app does not use push notifications and sends no push token.
• Your IP address is used in memory to route connections and limit abuse; our apps and relay do not write it to their logs. Our web server keeps access logs with IP addresses and browser details for up to 90 days to protect against attacks.
• Network fingerprints: when you sign in or the app renews your session, we store a keyed hash (HMAC) of your IP address and of its network range, with the country and network provider, for 30 days. Without our secret key the hashes cannot be turned back into an IP address.
• Sign-in alerts and the sign-in code: when your account is signed in to, we tell you in the app and, if your email is verified, by email; if you turn on two-step sign-in, we also email you a code at every sign-in. These messages say when the sign-in happened, on what (platform, device model or browser, app version) and roughly where: the country, and the city and region when known, looked up from the IP address of the sign-in on our own server. We do not store the IP address for this: the place is kept only in the notice in the app, encrypted, as long as notifications are kept (section 6), and a code only as a hash, for a day. We tell you the same way when two-step sign-in or the sign-in emails are turned off. You can turn off the sign-in emails and the code in Settings, Account; the notices in the app stay on.
• Hardware fingerprint: the Android and Windows apps send a one-way hash of your device's hardware identifier (Android ID, or the Windows machine ID), never the identifier itself. We keep only a keyed hash of it for 90 days. The iPhone and iPad app sends no hardware fingerprint.
• The days on which you used the app (about 13 months), for usage statistics.
• Relay statistics: connection times, amount of traffic and ping.
• Connection quality: the result of a connection check you run and a short summary of each world you host or join (how the connection was made, ping, packet loss). With these we store only the country and network provider derived from your IP address, never the address itself. The app also sends your device's time zone (for example Europe/Kyiv); of it we keep only its country, to recognise connections through a VPN or a data centre in our statistics.

Why: to make connections work, to protect accounts and the service, to enforce bans (including bans that survive reinstalling the app) and to find and fix network problems. Legal basis: legitimate interests (a secure and working service) and contract.

Bug reports, diagnostics and support

• Bug reports and diagnostics you choose to send: your description, app logs (with passwords, tokens, email and IP addresses removed), device details and screenshots you attach. You see our replies in the app and, if your email is verified, by email unless you turn that off.
• Emails you send to an address at krak-mp.cc: your address and name, the subject and text, attachments, technical headers and our replies. If the email comes from the verified address of an account, we link the conversation to that account.

Legal basis: your request (contract) and our legitimate interest in fixing problems.

What we do not collect

We do not collect your phone number, contacts, precise location, the photos on your device (only what you choose to send), your Microsoft account or the advertising ID. The Android app can see which apps on your phone have an icon so that you can choose your Minecraft app; that list stays on your device. We use no advertising, analytics or crash-reporting SDKs and do not show personalised ads.

3. Automatic checks and AI

We use Claude, an AI model by Anthropic, PBC (USA), in four places. We send only what each task needs, without your email or account ID.

• Translation, only when you tap Translate or turn on automatic translation in Settings (off by default): the text, the writer's nickname and, for chat messages, up to 6 earlier messages of that chat (each with its author's nickname, shortened to 300 characters) so that the translation fits the conversation; for comments, the post they belong to. Translations are cached on our server, encrypted, for 30 days.
• Report checks, when someone reports content: the report reason and note, the reported text (a message, post, comment, review, player rating, nickname and bio, world name and description, or community name, description and rules) and the names of attached files. For a reported chat message, up to 6 messages around it are sent with the senders replaced by labels such as "user1". We also send up to 4 pictures, plus a comment's GIF: the reported item's own pictures (post and comment pictures, a profile's avatar, banner and background, a world's or community's pictures, the picture of a reported chat message) and the screenshots the reporter attached.
• Automatic check of public content, before anyone reports it: every new or edited post, comment and profile wall comment that has a picture, a GIF or a link (its text, up to 4 pictures, a comment's GIF and the links as text; we never open the linked pages), and the public pictures you upload (avatar, banner, profile background, world and community pictures, group photos). It keeps porn, scams and malware out. Pictures in private chats are never sent, unless someone reports a chat message with a picture. A comment's GIF is sent as its link on KLIPY, from where Anthropic loads it; our server never downloads it.
• Player rating reasons: the number of stars and the reason text of a low rating, to check that it describes behaviour.

For clear violations the automatic check may hide or remove content (sexual content is removed at once), give a warning or a temporary restriction (by default from a few minutes up to a week), which our team reviews. Bans are always decided by a person, and you can ask a person to review any automatic decision (see the Community rules). Anthropic processes this data for us under its commercial terms, does not use it to train its models and deletes it after a short period, normally within 30 days, unless it must keep it longer to investigate abuse of its service or by law. Legal basis: legitimate interests (a safe community and translation you ask for); you can object to this processing by contacting us.

Spam and abuse limits, word filters for nicknames and world names, and ban checks also run automatically.

4. Who receives data

• Other players see your public profile (nickname, friend code, pictures, bio, status, country, badges, level, linked accounts unless you hide them), your worlds, your posts and comments, and the messages you send them. They also see your world reviews and the texts of the ratings you give players, with your nickname and picture, or as "Anonymous player" if you choose that for the review or rating (you can change it while you can still edit it); our moderation team always sees who wrote them. Ratings you gave before rating texts became public keep their text private: others see only their stars, without your name. Everyone sees your rating as a host (from the reviews of your worlds) and as a player. Friends see when you are online unless you hide it. Players never see your IP address, unless you choose to show your local server's address in its world's details (off by default).
• Our moderation team sees what it needs to handle reports and keep Krak Multiplayer safe: account details, devices, network fingerprints (never IP addresses) and reported content. When a message in a direct or group chat is reported, a moderator can read the conversation around it (up to 50 messages before and after). Chats are opened only from a report and every view is logged.
• Service providers that process data for us under contract:
  • Hetzner Online GmbH, Germany: our main server, where your data is stored.
  • HostZealot (Georgia) and Timeweb Cloud (Russia): forwarding servers in Tbilisi and Moscow. If our main address is unreachable or slow from your network, or you choose one of these routes, the app connects through them. They pass encrypted traffic on without decrypting it and see your IP address; they may keep short technical connection logs.
  • Anthropic, PBC, USA: AI translation and checks (section 3).
  • Google LLC, USA: Google sign-in and, in the Android app, Firebase Cloud Messaging for push notifications (a notification carries the sender's nickname and, if you allow message previews, up to 100 characters of the message).
  • Resend, USA: sending our emails and receiving email sent to krak-mp.cc.
• Services you use through Krak Multiplayer, under their own privacy policies:
  • KLIPY (klipy.com): GIF search. When you open the GIF picker, your device sends your search words, language and a random identifier (not your nickname, ID or email) directly to KLIPY and loads the GIFs from its servers, which see your IP address.
  • Twitch and Discord: when you link your accounts, and Discord for the server roles above. In the Windows app, while the Discord app is running on your computer, Krak shows what you are doing (for example the world and the number of players) in your Discord status; you can turn this off in Settings.
• Authorities, when the law requires it, or when someone's life or safety is at risk.
• A new operator, if Krak Multiplayer is transferred (for example to a company). We will tell you in advance.

IP geolocation uses the DB-IP Lite databases (db-ip.com, licensed under CC BY 4.0) on our own server; no data is sent to DB-IP.

5. International transfers

Your data is stored in the European Union (Germany) and managed from Ukraine. Some providers process data in other countries: Anthropic, Google, Resend, KLIPY, Twitch and Discord mainly in the USA, and the forwarding servers in Georgia and Russia. For transfers out of the European Economic Area we rely on the safeguards in the providers' terms, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework where a provider is certified. The forwarding servers only pass on encrypted traffic. Contact us for a copy of the safeguards.

6. How long we keep data

• Direct, group and community chat messages: 12 months. World chats: 30 days. Deleted messages are blanked at once.
• Pictures, videos and voice messages in chats: 7 days after sending (if they are part of an open report, up to 30 days more for the moderators).
• World reviews and player ratings: until you remove the review, a moderator removes it, or your account (for a rating, also the rated player's account) is deleted.
• Posts, comments and profile content: until you or a moderator delete them, or until your account is deleted. A deleted post or comment disappears at once for everyone; its text stays in our database for moderation until your account is deleted.
• Notifications: 90 days (important notices until you confirm them).
• Translations: 30 days. Network fingerprints: 30 days. Hardware fingerprints: 90 days. Days of use: about 13 months.
• Bug reports with their logs and screenshots, diagnostics and connection reports: 90 days.
• Support emails: 2 years after the last message (spam: 30 days).
• Screenshots attached to reports: 90 days after the report is closed. Reports, moderation decisions and the log of our team's actions are kept as long as they are needed for safety, to recognise repeated violations and to handle appeals.
• Coin history and Krak Plus records: kept as a record of the virtual economy.
• Records of the worlds you hosted or joined: kept for statistics.
• Krak Server: the record of each server you paired until your account is deleted; its status only in memory (section 11).
• Website sign-ins: each session at most 90 days, its record 30 days more (section 12).
• Web server access logs: up to 90 days. Backups: normally about one month (a few backups made before updates of our server may be kept longer).

When you delete your account it is deactivated at once: you are signed out, removed from friends lists, your pictures, posts, comments, bug reports, linked accounts and support conversations are deleted, and within 30 days the rest of your personal data (sign-in data, devices, fingerprints, settings, social connections) is erased. What must stay (chat messages until their normal deletion, reports and moderation records, coin and world records) is then linked only to an anonymous "Deleted user".

7. Children and teens

Krak Multiplayer is for people aged 13 and older, and we do not knowingly allow younger children. If you are under 18, please use Krak Multiplayer with the knowledge of a parent or guardian. A new account starts with direct messages from everyone, which you can limit to friends or turn off in Settings. If your account has a birth year that makes you younger than 16, players who are not your friends cannot message you and you cannot change that. We do not show personalised ads and do not use your data for profiling. If you believe a child under 13 uses Krak Multiplayer, contact us and we will delete the account. How we protect younger players and act against child sexual abuse is described in our Child safety standards.

8. Your rights

Depending on where you live (for example under the Law of Ukraine "On Personal Data Protection" or the EU General Data Protection Regulation), you have the right to:

• know what data we have about you and get a copy of it;
• correct it (most of it you can change in the app yourself);
• have it deleted (delete your account in the app or as described on the account deletion page);
• restrict or object to processing based on our legitimate interests, including the automatic checks;
• receive the data you gave us in a machine-readable format;
• withdraw a consent you gave, for example for push notifications in your device settings;
• ask a person to review an automatic decision;
• complain to a data protection authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua); in the EU, the authority of your country.

Write to us from the email address of your account, or include your nickname and friend code. We answer within 30 days and may ask you to confirm that the account is yours.

9. Security

All connections use TLS. Passwords and device secrets are stored only as argon2id hashes, sign-in tokens are short-lived and stored as hashes, and private texts (chat messages, wall comments, rating reasons, bug report and support texts, report copies, gift notes, notification previews and translations) are encrypted in our database, as are chat pictures and videos. Access to our servers is restricted, and the moderation team's access to private data is logged. No system is perfectly secure: if you find a vulnerability, please tell us. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

10. App permissions

The Android app asks only for what its features need: notifications; display over other apps (the floating Krak button over Minecraft); running in the background without battery limits during a game session; the camera and microphone (only to record a video or voice message). The version downloaded from our website also asks for the VPN feature (used only for the Minecraft app's local game traffic, so that worlds appear in Minecraft's LAN list; Krak sees no other traffic) and for installing updates; the version from Google Play has neither. The iPhone and iPad app, from the App Store or TestFlight, asks for two things only: the microphone, used only while you record a voice message, and adding to Photos, used only when you save a picture. It does not use your location, contacts or camera. You can refuse or revoke them in your device settings; some features then will not work.

11. Krak Server

Krak Server is our program for hosting your own Minecraft server through Krak Multiplayer around the clock: you install it on a Linux or Windows machine, pair it with your account using a code it shows (never your password) and control it from the app (the + button, Host a remote server, or My worlds, My servers). If you use it, this section applies in addition to the rest of this policy.

• What we store about each server: its name (by default the machine's host name; you can rename it), the operating system and its version, the processor type, the Krak Server version, a public key that Krak Server created for itself (the private key never leaves the machine), when it was paired and last connected, which of your worlds it hosts (the edition, the game server's port and connection type, and whether hosting is on) and, for a removed server, when and why it was removed. Worlds hosted through it are recorded like the other worlds you host (section 2).
• What we use only in memory: while Krak Server is connected it reports its state for remote control: the Minecraft servers it finds on the machine (name, version, port, number of players), the connection of each hosted world (relay, ping, packet loss), Krak players by a join number with their ping, its processor and memory use, uptime, update state and its last 20 warnings (with IP addresses removed). Only you see this, in the app, and we do not store it. The same goes for a pairing request that waits for your approval and for the country and network provider of the server's connection, which the app shows you.
• IP address: the machine's IP address is handled like yours (section 2): it is used in memory to route connections, and each time Krak Server gets a new sign-in token we store the same keyed network fingerprint as for your devices, for 30 days, so that network bans apply to servers too. Krak Server never sends us its address. Players do not see it, unless you turn on the server's public address for a public world without a password or join approval: then signed-in players who can see the world see the address and port. We check that the address answers as your server and keep it in memory only.
• Players: Krak players' IP addresses never reach Krak Server, and its logs name them only by a join number. Krak Server does not read the game server's files and does not send them to us; what your game server itself records about players stays on your machine.
• Logs and diagnostics: Krak Server's logs stay on the machine and contain no tokens, keys or players' IP addresses. On the machine it keeps its key, its server ID, the state of the worlds it hosts and your nickname, which its status and log show so that whoever runs the machine can see which account it is paired to. Only when you ask in remote control does it send us a connection check or a diagnostics report (its status and connection statistics, without logs, keys or addresses), kept 90 days like other diagnostics.
• Your account stays private: Krak Server can only host the worlds you assign to it and report on them. It cannot see your profile, chats, friends, notifications or coins, and it does not make you appear online or as hosting. From the app you can only tell it what to host, start, stop or restart hosting, reconnect to the relay, scan the machine again, update itself, change its log level, run a connection check or send diagnostics; none of this runs programs, reads files or changes the game server.
• Notifications and our team: we tell you in the app when a server is paired, with its name, system and the country and network provider the pairing came from (and by email, if your email is verified), when it is offline while it should host, when its update fails and when it seems to be used from two networks at once. Pairing, removing and updating servers are noted in our security log, kept as long as it is needed for security. Our moderation team can see your servers (name, system, version, dates) and can remove a server.
• Removing a server and how long we keep it: remove it in the app (My worlds, My servers, the server, Remove server) or run krak-server unpair on the machine. It is signed out at once, stops hosting, its world assignments are deleted and it cannot sign in again until you pair it anew; krak-server uninstall --purge also deletes its settings and key from the machine. Changing or resetting your password, signing out everywhere and a ban also sign out every server of your account. The record of each server, including removed ones, is kept until your account is deleted and is then erased with it.

Legal basis: our contract with you (you ask us to host your server) and our legitimate interests in a secure service and in preventing abuse.

12. Website and web app

On krak-mp.cc you can also sign in to the Krak Multiplayer web app with the account you use in the app (new accounts are created only in the app). This section adds to the rest of this policy: the web app works with the same data as the apps.

• The session cookie: when you sign in, the site sets one cookie, __Host-krak_session. It holds a random session key, is sent only to krak-mp.cc and cannot be read by scripts on the page. We store only a hash of the key, with the browser and system (for example "Chrome on Windows") and when the session started and was last used. The session ends 30 days after its last use and at the latest 90 days after you signed in, when you log out, and when you change or reset your password, are signed out everywhere, remove the browser from your devices in the app's settings, are banned or delete your account. Your signed-in browsers are listed among your devices. We delete the record of an ended session after 30 days. The cookie is strictly necessary to keep you signed in, so it needs no consent.
• Other cookies: the site also remembers a language you pick and, while downloads need a tester code, that you entered one. We use no analytics or advertising cookies, so the site shows no cookie banner.
• Your browser's storage: the web app keeps your settings (such as the language and theme), small notes of what you have already seen or chosen in this browser (such as notices you closed and your recent reactions) and a random browser ID in your browser's local storage. The browser ID tells your browsers apart in your devices list, like the installation ID of the app (section 2). Your messages and chat pictures, bug reports waiting to be sent and the app's log stay only in the memory of the open tab: they are gone when you close the tab or log out. Public pictures such as avatars may stay in your browser's cache, as on any website. Clearing the site's data in your browser deletes everything stored.
• Google sign-in: the sign-in page contacts Google only when you press "Continue with Google". Then your browser goes to Google's sign-in page at accounts.google.com, where you choose your account, and Google receives your IP address and the usual browser details under its own privacy policy; Google then sends your browser back to our sign-in page. For that trip the site sets a second cookie, __Host-krak_google: a random value that ties Google's answer to your browser. It is deleted as soon as the sign-in is done, and at the latest after 15 minutes. We receive the same as in the app: your Google account's identifier and verified email address, never your Google password.
• Everything else as in the apps: the web app, its fonts and your pictures and messages come from our own servers, and GIFs load as in the apps (section 4). Your IP address is handled as described in section 2, including the network fingerprint stored when the web app renews your session.

Legal basis: our contract with you (signing you in and keeping you signed in) and our legitimate interests in a secure service.

13. iPhone and iPad addresses

Minecraft on iPhone and iPad cannot reach some servers by their own address. For such a server listed in Krak Multiplayer, we can give it a Krak address (for example k7q4m2xp.j.krak-mp.cc) that a player adds in Minecraft, without the Krak app. This section applies in addition to the rest of this policy.

• What passes through us: when Minecraft shows the server in its list or joins it, it sends its status request and its join request to the Krak address; we pass them on to the server and pass the server's answer back. The join request contains the device's connection details and the Xbox sign-in token Minecraft makes for that server. We do not keep the requests, the answers or the token. The game traffic then goes directly between the device and the server, so the server sees the device's IP address, as on any direct join.
• IP address: the device's IP address is used only in memory, to limit abuse; requests to these addresses are not logged. When a limit is reached, our log keeps a keyed fingerprint of the address that changes every day.
• What we store: for each address, the server it belongs to and when it was created, replaced or turned off. The address is shown to everyone who can see the server in Krak Multiplayer. The server's owner can turn it off or replace it at any time, and an old address stops working at once. The record is deleted with the server.
• Worlds hosted with Krak: a world hosted with Krak Multiplayer (for example by Krak Server) can have a Krak address too: a public world its own, and anyone invited can make a personal address on the invite page. Such a join goes through our servers: we check that the Xbox sign-in token in the join request was made by Microsoft's sign-in service, then run a connection for the device on our server, which carries the game traffic through our relay to the world, as for every Krak guest. The host and the world see our relay's address, never the device's.
• Xbox account: from the token we keep only a keyed code of the Xbox account number, never the number, the gamertag or the token. The code is stored with the join (when it started and ended, as for every guest), with a personal address after its first game (so that it works for that account only) and with a ban by the world's owner. The owner sees the player as "iPhone guest" with a short tag that is different in every world. Joins are kept as long as other guests' joins; a ban until the owner lifts it or the world is deleted.
• Personal addresses: we store the world, the invite it was made from, when it was made and when it was last used, never the address itself in readable form. It stops working 7 days after its last game, 30 days after it was made at the latest, or when the invite ends.

Legal basis: our legitimate interests in letting players reach servers listed in Krak Multiplayer and in preventing abuse; for the server's owner, our contract with them.

14. Changes

We update this policy when our processing changes and show the date of the latest version at the top. We tell you about significant changes in the app before they apply.

15. Contact

Questions or requests about your data: support@krak-mp.cc.

Krak Multiplayer is not an official Minecraft product. Not approved by or associated with Mojang or Microsoft.