Privacy Policy

Last updated: July 16, 2026

This policy explains what data the Sentinel website and plugin collect, and what happens to it. The short version: as little as possible, on your own hardware where possible, and never sold to anyone.

TL;DR: The website has no analytics or trackers. Stripe handles payment and sees your card, email, and country. The plugin runs on YOUR server and logs player info to YOUR local database. Nothing about your players ever leaves your server.

What the website collects

Nothing directly. There are no analytics scripts, no cookies, and no third-party trackers on sentinel-anticheat.info. The site is a static page hosted on Vercel, which keeps standard server access logs (IP, requested URL, user agent) for its own operational purposes; those logs are governed by Vercel's privacy policy.

What Stripe collects (when you buy)

Payments are processed by Stripe. When you check out, Stripe receives:

Your payment method details (card number, expiry, CVC). These never touch this website.
Your email address (used to send your license key).
Your billing country and, depending on your card issuer, your name and postal code.

Stripe shares the following with us so we can deliver your product: your email address, the amount paid, and the tier purchased. We never see your card details.

What we do with your email

We use your email for exactly two things:

Sending your license key and download link right after checkout.
Replying if you email us with a support question.

We do not send marketing emails, we do not add you to any list, and we do not share your email with anyone.

What the plugin collects

The plugin runs entirely on your Minecraft server. It records player data locally, in a SQLite file inside your server's plugins/Sentinel/ folder. That data includes:

Player UUID, name, and IP address (masked to 1.2.3.x in the dashboard by default).
Client brand string sent by the player's Minecraft client.
Detection alerts, suspicion score, and any punishments applied.

None of this leaves your server. There is no "phone home", no telemetry to us, no license verification server that logs anything about your players. You control the retention: evidence logs are pruned after storage.keep-evidence-days (default 90 days).

The one exception, only if you enable it: setting a Discord webhook URL in the plugin's config causes punishment alerts to be posted to your Discord channel. Discord's servers then see whatever you configured to be sent (player name, check name, timestamp). Leave it disabled if you don't want that.

License activation

License keys are verified locally using cryptographic signatures (Ed25519). The plugin does not contact any server to validate a key. Activation records the world UUID your key was first used on, but only inside your own plugins/Sentinel/ folder.

Your rights

To request a copy of the personal data we hold on you (essentially your email address and purchase record), or to have it deleted, email sentinel.support.help@gmail.com. Payment records held by Stripe are subject to their own retention rules and their privacy policy.

Security

The website is static, with a strict Content-Security-Policy, HSTS, frame-deny, and no third-party scripts. Payment data is handled entirely by Stripe. License keys are signed offline with a private key that never leaves our infrastructure and is not stored on this website.

Children

Sentinel is a product for Minecraft server operators. It's not directed at children under 13, and we don't knowingly collect any personal data from them.

Changes to this policy

Material changes will be reflected in the "Last updated" date at the top of this page.

Contact

Questions about privacy: sentinel.support.help@gmail.com