Privacy Policy

Last updated October 28, 2026

This explains what the DonutScam mod, donutscam.lol and support.donutscam.lol collect, why, and how you can get it deleted. The short version: only what's needed to answer you and show badges, no ads, no tracking, and we never sell anything.

1. The mod

Update checks. Every 30 seconds while the game is running, the mod asks GitHub whether there's a newer version. GitHub sees your IP address, like any website you visit. Nothing about you or your game is sent.
Report Bug and Suggestion buttons. Only when you click Send, the mod sends your message, your Minecraft username, and the DonutScam and Minecraft versions to donutscam.lol. It doesn't send your account token, UUID, world, server or anything else.
Badges. While you're in a world, about once a minute the mod sends donutscam.lol your Minecraft username and the usernames in that world's player list. We store your username and when it last checked in, so other DonutScam players see a donut badge next to your name for 15 minutes after you stop playing. The other names are only looked up, not stored. Turn off Show my badge to others in the mod's settings (the gear in the G menu) and nobody sees a badge next to your name.
DonutScam+. When you open the G menu, the mod sends your Minecraft username to donutscam.lol to check whether you have DonutScam+. If you buy it, we keep your username on the DonutScam+ list.
Settings stay on your computer in config/donutscam.properties.

2. The support site

When you sign in, we get the following from Google or Discord, and nothing more:

Google: your name, your email address and an account ID.
Discord: your display name, your username and an account ID. We don't ask for your email, servers or messages.

We also keep the tickets and replies you write, and when they were sent. We use all of this only to answer your tickets and know who we're talking to.

3. Cookies

We only use cookies needed to keep you signed in and to make sign-in secure. There are no advertising, analytics or tracking cookies.

4. IP addresses and spam limits

To stop spam, we turn your IP address into a salted one-way code and store that code with reports and failed admin sign-ins. We never store your actual IP address.

5. Who we share it with

Cloudflare hosts the websites and database.
Google and Discord handle sign-in under their own privacy policies.
GitHub hosts the downloads and answers the mod's update checks.

We don't sell, rent or trade your information, and we don't use it for ads.

6. How long we keep it

Tickets stay until you delete your account or we delete them.
Sign-in sessions end after 30 days.
Bug reports and suggestions stay until we've dealt with them and delete them.
Failed admin sign-in records are cleared after about 15 minutes.
Your username and last check-in time for badges stay until you ask us to remove them. The badge itself disappears 15 minutes after you stop playing.

7. Your choices

See your data: your account page on the support site shows what we hold about you.
Delete it: click Delete my account on your account page. That permanently deletes your account, tickets and replies.
Sign out everywhere: also on your account page.
To remove a bug report or suggestion you sent from the mod, open a ticket and tell us your Minecraft username.

8. Children

The support site isn't meant for children under 13. If you're under 13, don't sign in; ask a parent or guardian to contact us instead. If we learn we have information from a child under 13, we'll delete it.

9. Security

Everything is sent over HTTPS, sign-in sessions are stored only as one-way codes, and the admin panel needs both a Discord sign-in and a password. No system is perfectly secure, though.

10. Changes

We'll update this page if anything changes, and the date at the top will show when.

11. Contact

Questions or requests about your data? Open a ticket at support.donutscam.lol.