Last updated 24 October 2026

Privacy Policy

In short

We collect only what a tier list needs: your Discord ID, name and avatar, your Minecraft profile, and your tests.
Your tiers and test history are public. You can hide your profile at any time.
No ads, no analytics, no tracking cookies, and we never sell your data.
You can download your data or delete your account yourself, from your account page.

1. Who is responsible

TierNation runs TierNation and is responsible for your personal data (the "controller" under data protection law such as the EU and UK GDPR). Contact us about privacy at [email protected]. This policy covers the website at https://tiernation.club, its public API, our Discord server and bot, and the TierNation client mod.

2. What we collect and where it comes from

When you log in with Discord

Your Discord user ID, username and avatar. We only ask Discord for the "identify" permission: we don't get your email, password, servers, friends or messages.

Your Minecraft profile

The Minecraft name you claim, its UUID (from Mojang for premium names, worked out from the name for cracked ones), the account type and the region you choose.
Verification. For the skin check we fetch your current skin from Mojang and keep a copy only until the check finishes or expires (30 minutes). If you verify with Microsoft, Microsoft and Xbox Live give us a one-time sign-in token that we use once to read your Minecraft UUID and name, then throw away; we never see your Microsoft password and don't store the token.
Whether your profile is hidden, any name change requests, and, if you're banned, the ban and its reason.

Your tests

Test results (gamemode, region, tier before and after, score and format, evidence links, tester notes, dates, approval or void status and reasons), your tiers and points, retest cooldowns, your place in queues, badges, and copies of the leaderboard saved at the end of each season.

On our Discord server

When you use the bot: your Discord ID, the queues you join, and the private ticket and voice channels made for your test. The bot can't read message content; what you write in tickets is held by Discord, under Discord's privacy policy. To move you into a tester's voice channel the bot sees which voice channel you're in, but doesn't store it.

If you're staff

Your role, the gamemodes and regions you test, leave dates and monthly quota, when you're online for testing, and a log of the staff actions you take (the audit log).

Technical data

Like any website, our server receives your IP address, browser details and the pages you request in order to answer them. We don't keep access logs. Error logs can include request details; they're capped in size and overwritten automatically. To protect the Service from abuse, we count requests per visitor for one minute at a time; the counter is stored under a salted hash of your IP address (never the address itself) and deleted when the minute is over. The mod and API work the same way: when the mod shows tiers, it asks our API for the players you see (by UUID or name). The mod sends no account details or usage statistics, and we don't record these requests.

3. Why we use it, and our legal bases

To run the Service you signed up for (performance of a contract): your account and login, claiming and verifying your name, queues, tickets, tests, tiers, rankings, seasons and badges.
To publish rankings (our and the community's legitimate interest in a public, verifiable tier list): showing your profile, tiers and test history on the site, the API, the mod and Discord. You can object by hiding your profile.
To keep things fair and safe (legitimate interests): stopping cheating, alt accounts and ban evasion, moderating, handling appeals, keeping an audit log of staff actions, and protecting the Service from abuse and attacks.
To meet legal obligations, such as answering lawful requests and keeping records the law requires.

We don't use your data for advertising, sell it, or make decisions about you by automated means alone: tiers are decided by human testers, and bans by human staff.

4. What is public

Unless you hide your profile: your Minecraft name, UUID, skin, account type, region, tiers, points, titles, badges, past seasons and test history, and the testers who tested you. Result posts and /profile on our Discord server can mention your linked Discord account. Anyone can see this public information, including through the API and the mod, and others may copy it; we can't control copies that others make.

6. International transfers

Our server is in Ateex Cloud. Discord and Microsoft are based in the United States and may process data there. Where data leaves the EU, UK or your country, we rely on the protections these companies provide, such as adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses.

7. How long we keep it

Your account, profile and test history: until you delete your account (or we delete it, for example an abandoned unverified claim).
Login sessions: 30 days, or until you log out. The short-lived login security cookies: 10 minutes.
Unverified premium claims: released after about an hour. Skin check copies: until the check finishes, or 30 minutes.
Season leaderboards: kept as a permanent record of each season, unless you delete your account.
Banned profiles: kept, hidden, even if the account is deleted, so a ban can't be escaped by deleting and starting again.
Audit log: kept for staff accountability. When an account is deleted, its entries no longer hold names or reasons.
Error logs: overwritten automatically as new ones are written. Rate-limit counters: one minute.
Cached API answers (public data only): up to one minute, and dropped as soon as the data changes.

When you delete your account, the bot also deletes your result posts on our Discord server. Data in any backups is removed as the backups are replaced.

8. Your rights

Depending on where you live, you have the right to:

Access and take away your data: use Download my data on your account page (a JSON file).
Correct it: change your region or request a name change on your account page, or ask us.
Delete it: use Delete my account, or ask us.
Object to or restrict how we use it: you can hide your profile at any time, or ask us.
Withdraw consent where we rely on it, without affecting what we did before.
Complain to a data protection authority, for example where you live or work in the EU or UK (the ICO), or the Data Protection Board of India. We'd appreciate the chance to help first.

California residents have the right to know, access, correct and delete their personal information and not to be discriminated against for using these rights. We do not sell or "share" personal information (for cross-context behavioural advertising) and don't use sensitive personal information.

India: under the Digital Personal Data Protection Act 2023 you can also nominate someone to use your rights if you can't, and raise grievances with us at [email protected].

To use a right that isn't self-service, contact us at [email protected]. We'll reply within one month, and may need to confirm the account is yours (for example, by asking you to message us from the linked Discord account). Staff accounts and people who have run tests can't delete themselves from the account page, because their tests are part of other players' records; ask us and we'll anonymise them.

9. Children

The Service is not meant for children under 13, and you must be old enough to use Discord where you live. We don't knowingly collect data from children under 13. If you believe a child has an account, contact us at [email protected] and we'll delete it.

10. Security

We use HTTPS, ask for the least data we can, check permissions on the server for every staff action, and store login sessions only as SHA-256 hashes, so a leaked database can't be used to log in. We don't have your passwords. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires. To report a security issue, see security.txt.