Skip to content

Privacy Policy

Version of 15 October 2026

A translation for convenience. The Russian version is the binding one: https://nodemp.com/ru/legal/privacy.

1. General

1.1. This policy describes the personal data [ФИО оператора] (the "Operator") collects and processes when you use https://nodemp.com, the NodeMP launcher, the client mod and the server directory (the "Service"), under Russian Federal Law No. 152-FZ "On Personal Data".

1.2. Account data is processed to perform the Terms of Use and on the basis of your consent (https://nodemp.com/en/legal/consent).

2. What we process

  • Account: username, e-mail address, password (stored only as a cryptographic hash), sign-up date, roles, the history of name changes.
  • Profile: avatar, banner, banner colour, the "About" text, links to Discord, YouTube, Twitch and GitHub — what you enter yourself. They are visible to everyone on your public page.
  • Linked accounts: your Discord id and name, your GitHub login — if you link them.
  • Security: the two-factor secret (if enabled), sessions and sign-in devices — IP address, approximate location from the IP, browser, operating system, time; a log of actions on the account.
  • Play: the servers you joined and when; the name you play under. Your public page lists the servers without dates.
  • Server owners: server keys, and the address, name, description and links a server reports to the directory. These are public.
  • Technical: IP address, browser and request data needed to run and protect the site; a random browser id to count visitors online.

3. Why

To create your account and let you into the site, the launcher and the servers; to protect accounts and the Service (two-factor, suspicious sign-ins, spam, cheating, attacks, bans); to send service e-mails (address confirmation, password reset, address change); to show your profile and run the directory; to answer your requests; to meet legal obligations. The Operator sends no advertising.

4. Cookies and local storage

Only necessary cookies: nmp_access and nmp_refresh — the sign-in session (HttpOnly, unreadable to scripts), nmp_lang — the language you chose. Local storage holds a random id, nmp_visitor, to count visitors online, and nmp_cookie_notice, a mark that you closed the cookie notice. No third-party analytics or advertising cookies. Without cookies, signing in does not work.

5. Where data is kept and who receives it

5.1. The Service, its database included, runs on servers in the Netherlands: [hosting provider], the Netherlands. This is a cross-border transfer; the Netherlands is a party to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

5.2. Data is also processed with: Resend, Inc. (USA) — service e-mails, which sees your address and the message; Cloudflare, Inc. (USA) — bot protection for forms (Turnstile), which sees your IP address and browser data; Discord Inc. and GitHub, Inc. (USA) — only if you link those accounts.

5.3. The Operator does not sell personal data or pass it on for advertising. Data may be disclosed to public authorities where the law requires it.

6. Retention and security

6.1. Account data is kept while the account exists. Deleting the account deletes the name, e-mail, password, pictures, roles and your servers.

6.2. Sign-in sessions with their IP address and device are kept up to 30 days after the session was last used. In the action log an IP address is erased 12 months after it was written, and so are the e-mail and name of a sign-up that was never finished. The entries themselves (for example, which servers you joined) are kept longer; deleting the account erases the names and e-mail addresses in them.

6.3. Measures: encrypted connections (HTTPS), hashed passwords, access control, action logs.

7. Your rights

You may learn what data is processed, correct it (most of it under Account), have it deleted or delete the account yourself, withdraw your consent, and complain to Roskomnadzor or a court. Write to [e-mail для обращений]; the Operator answers within 10 working days.

8. Changes

The Operator may change this policy; the new version is published here and applies from its publication.

9. Operator

[ФИО оператора]. Address: [адрес для почтовых обращений]. E-mail: [e-mail для обращений].