Legal
Privacy Policy
Nerion is made up of three surfaces, each with a different data footprint. This policy covers all of them. Jump to the section that applies to you.
Informational website only — no user accounts.
1. Landing (nerionmc.com)
The Nerion landing page is a public, informational website. No user accounts are created here. The only data processing that takes place is through analytics tools.
1.1 Google Analytics (GA4)
We use Google Analytics 4 to understand how visitors use our site. GA4 collects page views, session duration, referral sources, and general geographic region. Google processes this data under their Privacy Policy. No personally identifiable information is sent to Google Analytics. You can opt out using the Google Analytics Opt-out Add-on.
1.2 Cloudflare Web Analytics
We use Cloudflare Web Analytics for privacy-friendly traffic metrics. Cloudflare does not fingerprint individual users and does not set tracking cookies. No personal data reaches us through this tool.
Desktop application and web interface — accounts, OAuth, multiplayer, and cloud saves.
2. Nerion Platform (App & Web)
This section covers both the Nerion desktop application and the Nerion web interface (currently at nerionmc.com). Both surfaces share the same backend, the same account model, and collect the same types of data. The web interface also uses Google Analytics (GA4) in the same way described in Section 1.
2.1 OAuth Sign-In
Nerion uses OAuth 2.0 for authentication — we never handle passwords. Each provider grants us only what you authorize at sign-in:
- Google — your Google account ID, email address, display name, and profile picture URL. Used to identify and recover your account across devices.
- Discord — your Discord user ID, username, display name, and avatar. Used as an alternative sign-in method.
- Modrinth — your Modrinth user ID. Used to link your Modrinth identity for mod management.
We do not receive OAuth passwords, payment information, or contact lists.
2.2 Google Drive — Cloud Saves (Optional)
If you enable cloud save synchronization, we request the drive.appdata scope.
This grants access exclusively to a hidden, app-specific folder inside your Google Drive —
we cannot read, modify, or delete any of your other Drive files.
You can revoke this at any time from your
Google Account settings.
2.3 Profile Data
After creating an account you may optionally set a username, bio, avatar, and social links (Discord, Twitch, YouTube, Modrinth). You control whether your profile is public or friends-only.
2.4 Multiplayer & Social Data
The following data is generated by using Nerion's social features and stored on our servers:
- Friend connections and request history.
- Lobby memberships, room configurations, and session participation.
- Direct messages (DMs) between users.
- Tournament registrations and results.
- Forum posts, community announcements, and reports you submit.
- Organization membership and roles.
Note on anonymous messages: When you send a message marked as "anonymous," it appears anonymous to other users. However, your account identity is stored server-side and is visible to platform administrators.
2.5 Connection & IP Data
When connecting to game servers, relay nodes, or peer-to-peer tunnels, our infrastructure receives your IP address to route the connection. Your IP address is also recorded with your launcher installation record and retained for security, fraud prevention, and ban enforcement. You can request deletion of your installation record by contacting [email protected].
When establishing peer-to-peer sessions through Nerion's tunnel feature, connection metadata (WebRTC signaling data) — which may include local network IP addresses — passes through Nerion's signaling servers transiently to set up the direct connection between peers.
2.6 Hardware Data & Device Fingerprint
To identify your installation for security and ban enforcement, the Nerion application collects:
- A hardware fingerprint: a one-way cryptographic hash derived from your CPU model, system hostname, and network adapter identifier. Stored server-side against your installation record.
- Hardware specs (with your consent): total and available RAM, CPU model and core count, and OS name/version. Used for platform performance analytics.
Your hardware fingerprint is transmitted on requests for mod and server file downloads.
2.7 Gameplay Telemetry
A companion component bundled with Nerion instances reports the following data at the end of each play session:
- Frame rate statistics (average, minimum, maximum, and 5th-percentile FPS).
- Memory usage (average and peak, in MB).
- Average network ping and render distance setting.
- Session duration and whether the session ended in a crash.
This data is linked to your installation ID and the instance played, and is used to monitor server and client performance.
2.8 Discord Integration
If Discord is running while you use Nerion, the application connects to Discord's local desktop client to:
- Display your Nerion activity as Discord Rich Presence (instance name, player count, play time, your avatar).
- Read your Discord friend list (usernames, online status, avatar identifiers) to surface friends who are also on Nerion.
- Enable "Ask to Join" game invites between Discord friends.
Discord processes its side of this integration under Discord's Privacy Policy. This integration activates automatically whenever Discord is running alongside Nerion.
2.9 Game Preferences & Accessibility Settings
Nerion can sync a subset of your Minecraft game settings — including keybindings, FOV, language, and accessibility options (narrator, high contrast, reduced motion) — to our servers for cross-device restore. You control whether these preferences are visible to other users. Accessibility settings are not public by default.
2.10 Public Activity Leaderboard
Your display name, Minecraft username, avatar, and total play hours on Nerion may appear on the public stats page (nerionmc.com/stats), accessible without authentication. To opt out of the public leaderboard, contact [email protected].
2.12 Payment Transaction Data
When you purchase Crystals, your checkout session is handled entirely by the payment processor. Nerion receives only confirmation data — transaction ID, amount, currency, and status — sufficient to credit Crystals to your account. We never receive or store your card number, CVV, bank account details, or full billing address.
- MercadoPago — processes Crystal purchases in supported regions. Governed by MercadoPago's Privacy Policy.
- Tebex — processes Crystal purchases where MercadoPago is unavailable, and also processes transactions within creator stores on Nerion instances. Governed by Tebex's Privacy Policy. Tebex also handles creator payout processing; creator financial data flows through Tebex under their terms.
2.11 Instance Recommendations
Nerion uses an automated recommendation system to suggest game instances that may interest you. This system processes:
- Your gameplay history (instances played, session frequency, time spent).
- Your declared game preferences and synced settings (Section 2.9).
- Your Discord friend activity — which instances your friends are playing (Section 2.8).
- Aggregated session telemetry linked to each instance (Section 2.7).
This constitutes automated profiling under applicable data protection law. Recommendations are used solely to personalize your discovery experience within Nerion — they are never shared with advertisers. You can opt out of personalized recommendations by contacting [email protected].
For creators and administrators — applies to operators, not end players.
3. Creator Dashboard
The Nerion Dashboard is the administrative interface for creators and platform administrators. This section applies to dashboard users (operators). End players whose data appears in the dashboard are covered by Section 2.
3.1 Creator Account Data
Dashboard access is tied to your Nerion account (authenticated as in Section 2), plus creator-specific attributes: community name, banner, logo, description, and creator status.
3.2 Instance & Player Data
The dashboard exposes the configuration and operational data of the instances you own:
- Instance names, Minecraft versions, loader types, and mod lists.
- Access keys and instance-specific settings.
- Player lists, active sessions, and connection statuses.
3.3 Analytics & Revenue
The dashboard displays aggregated analytics about your community (player counts, session data) and Crystal revenue summaries derived from transactions within your instances.
3.4 Moderation Records
If you handle player reports within your instances, the dashboard exposes report content and the moderation actions you take. These actions are logged for platform accountability.
3.5 Admin Credentials
Admin keys (X-Admin-Key) grant elevated access to instance data.
You are responsible for keeping them secure. If a key is compromised, rotate it immediately
from your dashboard settings.
3.6 Tebex Creator Data
If you operate a monetized instance, Nerion stores your Tebex store identifier and verifies that the Nerion creator code is active in your store, as required by the Creator Agreement. The dashboard displays revenue summaries derived from Tebex transaction confirmations — amounts, dates, and Crystal sale totals. Nerion does not have access to your full Tebex payout details or your customers' payment data; those remain with Tebex under their privacy policy.
Applies to all surfaces.
4. How We Use Your Data
- To create and maintain your Nerion account and enable cross-device recovery.
- To display your profile to other players, subject to your privacy settings.
- To operate multiplayer lobbies, friend systems, tournaments, and direct messaging.
- To synchronize game saves via Google Drive when enabled.
- To provide creators with analytics and revenue data about their communities.
- To improve the platform through aggregated, anonymized analytics.
- To generate personalized instance recommendations based on your play history, preferences, and social connections (Section 2.11).
We do not sell your data. We do not use your data for advertising.
5. Data Sharing
- OAuth providers — Google, Discord, and Modrinth receive only the data flows required for authentication.
- Payment processors — Crystal purchases are processed by MercadoPago or Tebex depending on your region. Purchases within creator stores on Nerion instances are processed by Tebex. Each processor is governed by their own privacy policy. Nerion does not store payment card data. See Section 2.12 for details.
- Modloader CDNs — When installing Fabric or Forge, files are fetched from FabricMC (
meta.fabricmc.net) and Minecraft Forge (files.minecraftforge.net). Your IP address is transmitted to these third parties as part of standard HTTP requests. - Instance creators — Creators who own instances you play on can view aggregated analytics (player counts, session duration) for their community via the Creator Dashboard. Creators do not have access to your personal account data beyond what you make public on your profile.
- Cloud infrastructure — our backend and database run on third-party cloud providers bound by data processing agreements.
- Legal obligations — we may disclose data if required by law or to protect user safety.
We do not share personal data with advertisers or data brokers.
6. Data Retention
Account data is retained for as long as your account is active. Upon deletion, your personal data is removed within 30 days, except where required by law. Aggregated analytics data may be retained indefinitely. Creator financial records may be retained longer for accounting and compliance purposes.
7. Your Rights
- Access — request a copy of the data we hold about you.
- Rectification — update your profile directly in the app settings.
- Deletion — request account deletion by contacting us.
- Revoke OAuth — disconnect Google, Discord, or Modrinth from your provider's account settings at any time.
- Objection — object to processing based on legitimate interests.
- Opt out of profiling — request that we stop using your data to generate personalized recommendations (Section 2.11).
To exercise your rights, contact [email protected].
8. Children's Privacy
Nerion is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a minor has provided us with data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy periodically. The revised version will be posted here with an updated date. Continued use of Nerion after changes constitutes acceptance.
10. Contact
For privacy-related questions or data requests, email [email protected].