What this site keeps, and who sees it

Plain words, no small print. If something here is unclear or wrong, tell the admin in the Discord.

What is stored about you

• Your Discord user ID and display name, from the moment you first sign in, with the time of your first and your last sign-in, and whether you had the Member role at your last sign-in (the only role the site looks at; your other roles are not kept).
• Your sign-ins. Your browser gets a random sign-in cookie. The site stores only a scrambled form of it (a SHA-256 hash), so a copy of the database cannot be used to sign in as you. A sign-in ends after 14 days without use, and after 60 days in any case.
• Your whitelist requests and name changes: the Minecraft name you entered, its Minecraft account ID, the old name of a change, whether it is waiting, done or refused, and the times. Each is also posted to a private admin channel in the Oasis Discord and written to the admin's private record.
• The link between your Discord account and your Minecraft account, once you confirm it in the game with /link, and your choice of who may see your live position.
• A scrambled form of your internet address, only while you sign in, to limit sign-in attempts. Those rows are deleted after two days.
• A count of requests per day for the whole site, with nothing about who made them.

What is not stored

• No password. There is no password field anywhere.
• No Discord token. Sign-in asks Discord who you are and whether you are a member of Oasis. The token Discord hands over for that is used for those questions and then revoked and thrown away. Nothing else from Discord is kept.
• No email address, no avatar, no messages. The site cannot read your Discord messages, see your other servers or post for you.
• No analytics, no ads, no tracking cookies, and no scripts or fonts from other companies.
• No chat from the game, no inventories, and no internet addresses of players.

Who sees what

• Anyone: whether the server is online, how many players are on (a number only), the pack and its version, the restart time, the join guide, the rules and the notices.
• Everyone who is signed in: the server address, and the names of everybody playing right now. Names only: no team, no position, no world.
• Members (signed in, with a linked Minecraft name that is on the whitelist): their own team's map, live positions, waypoints, last deaths and explored land, and the claims of every team with the team's name and colour, as on the in-game map.

Your position on the team map

• Your team always sees where you are while you play.
• A player of another team sees you only while one of them is within 128 blocks of you (measured flat, in the same world), the same rule as the in-game radar. When you move apart, you disappear from their map with the next update.
• You can choose to show your position further: to your team's allies, or to all members. The default is your team only, and you can change it back at any time.
• Your team's waypoints, death spots and explored land are seen by your team only.

What the admin can see

The admin can see where every player is right now, and where players were. The game server records positions while people play and sends them to this site every hour. They are kept without a time limit, so the admin can look back as far as needed. This is there to deal with griefing and cheating.

The admin can also see, for every player: when they joined and left, their deaths with the cause and the killer, the names of the commands they used (never what they typed after the command), how many blocks they broke and placed and how many containers they opened in each chunk and when, how many rare ores they mined and how long they played, and short notes the admin writes. Simple automatic checks mark unusual movement or mining for the admin to look at; a mark is a reason to look, not a verdict. The admin can also see every team's claims, the list of everyone who has signed in, all whitelist requests and changes, and a private record of admin actions.

None of this is shown to any member, and the admin looking at it leaves no trace that members can see. The admin also runs the game server itself and holds its world files and logs. No website setting can change what that person can look at there.

Where the data lives

The site runs on Cloudflare (pages, two databases and the live connection). Sign-in goes through Discord. A whitelist request checks the name with Mojang, which only sees the name. The game server sends the site who is online, team membership, claims and the whitelist; it never receives anything from the site except approved whitelist names.

Cookies

Two, both needed for signing in: a short one that lives for ten minutes while Discord sign-in is in progress, and your sign-in cookie. Neither is readable by scripts, and neither is sent to any other site.

Deleting your data

Your account page has "Delete my account". It removes your Discord ID and name, your sign-ins, your link and your whitelist requests from this site at once. "Unlink" removes the link and your sharing choice. "Sign out everywhere" ends every sign-in you have. Position history and the admin's moderation records are about the Minecraft account, not your Discord account, and stay with the server. Removal from the game's whitelist is done by the admin: ask in the Discord.