Privacy Policy

Introduction

Guild LB (the “Site”) publishes leaderboards, guild pages and player pages for Hypixel SkyBlock. Guild LB is a community-led project. In this policy, “we”, “us” and “our” mean the operators of Guild LB, and “you” means the person using the Site.

Guild LB is not affiliated with, endorsed by, or sponsored by Hypixel Inc. or Mojang Studios / Microsoft. Game Data shown on the Site is obtained through Hypixel's public API, and that access may be changed or withdrawn at any time.

This policy explains what information we collect, why, who else receives it, and what you can ask us to do about it. It covers the Site and the API that serves it.

What Information We Collect

We collect only what the features below need. Most of what the Site displays is game data that Hypixel already publishes.

• Account Data. If you sign in with Discord, we receive and store your Discord account identifier, username, display name and avatar image address. Signing in is optional. We never receive your Discord password.
• Linked Minecraft account. If you choose to link a Minecraft account, we store its account identifier and in-game name against your Discord account, together with the date the link was verified.
• Game Data. Publicly available Hypixel guild and player statistics, guild membership and rank, in-game names and Minecraft account identifiers. This data may appear on the Site whether or not the player concerned has ever visited it.
• Guild page content. Any description, icon or banner submitted for a guild page by a verified guild master or the staff they appoint.
• Technical data. We may process IP address, browser, device and request information to operate the Site, apply rate limits, prevent abuse and keep it secure.
• Analytics. We use a lightweight, cookieless analytics tool to count page views and understand in aggregate how the Site is used. It does not record your screen, clicks or anything you type. Analytics requests are sent through the Site's own domain and passed to our analytics provider together with your IP address, browser and device details and an approximate location (country or region) derived from them. We use this only to improve the Site, not for advertising. The tool's own privacy policy applies to that processing.

How We Use Your Information

• To display leaderboards, guild pages and player pages.
• To identify you when you sign in and to keep you signed in.
• To confirm that a Minecraft account belongs to you before granting rights over a guild page.
• To operate the API and apply rate limits.
• To prevent, detect and investigate abuse of the Site.
• To measure aggregate traffic so we can see which pages are used.

We do not use your information for automated decision-making, and we do not build advertising profiles from it.

Legal Basis for Processing

Where data protection law requires a legal basis, we rely on the following.

• Consent, for signing in and for linking a Minecraft account. You may withdraw it at any time by unlinking the account or deleting your account.
• Performance of a contract, for providing the Site and the API to you under our terms of service.
• Legitimate interests, for publishing public game data, securing the Site, preventing abuse and measuring aggregate traffic.
• Legal obligation, where we are required to disclose or retain information.

Cookies and Local Storage

• Sign-in session cookie. Set only after you sign in. It is strictly necessary for signed-in features and expires after seven days. This is the only cookie we set ourselves.
• Security and CDN cookie. Cloudflare, our DNS, CDN and DDoS-protection provider, sits in front of the Site and may set its own strictly necessary cookie to route requests, tell human visitors from bots and mitigate attacks. It is not used for advertising or analytics, and we do not read it.
• Advertising cookies. Where advertising is enabled for a deployment, the advertising provider (Google AdSense) may set its own cookies to serve and measure ads. Where advertising is not enabled, no advertising script runs and no such cookie is set.
• Analytics. Our analytics tool does not set cookies.
• Local storage. The Site keeps small preferences in your browser using local storage - for example your recent searches, view-mode and layout choices, theme, election reminder settings, and a one-time flag recording that you have acknowledged our terms so the consent banner is not shown again. These stay on your device and are never sent to us.

Your Choices

Most of the Site works without an account or any input from you.

• Signing in. Browsing leaderboards, guild pages and player pages requires no account. Adding a guild or player does not require one either.
• Linking a Minecraft account. Optional, and you can unlink it at any time from your account page.
• Advertising. Where advertising is enabled, you can limit what the advertising provider stores using your browser's cookie controls and, where the provider is Google AdSense, manage or opt out of personalised advertising at Google Ads Settings. More on how Google uses this data is at Google's partner-sites policy.
• Analytics. You can block the analytics script using a browser extension that blocks scripts. Provider and network processing needed to deliver the Site still occurs.

Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we ask the advertising provider to show only non-personalised ads, and we treat the signal as a request to opt out of the sale or sharing of your personal information. There is no common standard for Do Not Track, so the Site does not change its behaviour in response to it. Our analytics is cookieless, used only to measure aggregate traffic, and never sold, shared or used for advertising, so it runs whether or not either signal is sent.

Where advertising is enabled, the advertising provider (Google AdSense) may collect information about your online activity over time and across different websites, including this one, unless you opt out as described above or in Your Choices.

How We Protect Your Information

We use encrypted connections, limit access to stored data to the people who operate the Site, and store verification credentials in hashed form. No system is perfectly secure, and we cannot guarantee that an attack will never succeed. Do not use the Site to store anything sensitive.

Data Retention

Account Data is kept while needed to provide the account and is deleted when you delete it or ask us to, subject to backups, legal obligations and information needed for security or dispute handling. Game Data is cached and refreshed from time to time for as long as a guild or player is tracked. Analytics records are kept to show traffic over time. They are not linked to your name or account.

Sharing Your Information

We do not sell your information. We disclose it only as set out below.

• Where we are required to by law, or where it is necessary to investigate abuse of the Site.
• Service providers who process data on our behalf: our hosting provider; database provider; image-storage provider; Cloudflare; the provider of any bot-protection challenge (Cloudflare Turnstile, whose privacy policy applies to that processing); our analytics provider; and the advertising provider where advertising is enabled.
• Discord, which you authenticate with when you sign in and which acts as your identity provider.
• Hypixel, whose public API we read game data from. The requests we make identify the account being looked up, not you.

These providers process information under their own terms and privacy notices. Where advertising is enabled, the advertising provider acts as an independent controller of what it collects, and its own privacy policy applies to that.

Looking for guild listings. If you post a Looking for guild listing, your pitch, tags, timezone and stats are public on the LFG page. Your Discord username and profile link are shown only to managers of tracked guilds, limited per manager per day. Listings expire after 30 days and are removed when you delete them or unlink your Minecraft account.

International Transfers

The Site runs on third-party cloud infrastructure, including hosting and database services, and your information is processed wherever those services and their subprocessors are located. In addition, Cloudflare operates a global network, so your requests to the Site may pass through, and your IP address and request metadata may be processed at, data centres in other countries. This may be a country other than your own, and the data protection law there may differ from the law where you live. By using the Site you acknowledge that your information may be processed outside your country.

Your Rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we process your data;
• receive your data in a portable form;
• object to processing based on our legitimate interests.

The Site also gives you two of these directly.

• Unlink your Minecraft account. You can revoke the link from your account page, which removes the active link and its public association. Some information may remain where needed for security, abuse prevention or dispute handling.
• Delete your account. Ask us and we will delete your account, its sessions and any API keys you created, subject to backups, legal obligations and information that must be retained for security or dispute handling.

Game Data is not ours to suppress at source. We can stop tracking a guild or player and remove our copy, but while the data remains public on Hypixel anyone may retrieve it again. Requests about Hypixel's own publication of that data must go to Hypixel.

To exercise any of these rights, or to complain about how we have handled your data, contact us at the email address below. We may ask for information reasonably necessary to verify your identity before completing a request. If your country has a data protection supervisory authority, you may also complain to it.

California Residents

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) and the California Online Privacy Protection Act may give you the rights below, to the extent they apply to the Site.

• What we collect. Identifiers (such as IP address, Discord and Minecraft account identifiers), internet activity (such as pages viewed), and approximate location derived from IP address, from you, your browser and Hypixel's public API, for the purposes set out in this policy. We do not collect sensitive personal information as defined by California law.
• Sale and sharing. We do not sell personal information for money. Where personalised ads are enabled, letting the advertising provider collect identifiers and activity for cross-context behavioural advertising may count as “sharing” under California law. You can opt out by turning on Global Privacy Control or through Google Ads Settings. We do not knowingly sell or share the personal information of anyone under 16.
• Your rights. You may ask to know, access, correct or delete the personal information we hold about you, and opt out of sale or sharing. You can make a request yourself or through an authorised agent, using the email address below. We will not treat you differently for exercising these rights.
• Direct marketing. We do not disclose personal information to third parties for their own direct marketing purposes.

Children

The Site is not directed at children and we do not knowingly collect personal data from anyone under 13, or under the minimum age of digital consent in their country where that age is higher. Signing in requires a Discord account, and Discord applies its own minimum age. If you believe a child has given us personal data, contact us and we will delete it.

Changes to This Policy

We may update this policy. The current version is at /privacy, and the date above shows when it last changed. Where a change materially affects how we handle personal data, we will announce it through the Site's usual community channels. Continuing to use the Site after a change means you accept the updated policy.

Contact Us

For privacy requests, legal notices and reports of abuse, contact us at [email protected]. We have not appointed a data protection officer. For the terms that govern your use of the Site, see the terms of service.