Last updated: May 2026
This Privacy Policy (the "Policy") explains how TierTests ("TierTests", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with our services — including our Discord bot and server, website at tiertests.com, store, and public API (collectively, the "Services").
This Policy is written to comply with applicable privacy laws worldwide, including but not limited to the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the Brazilian Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018), the UK GDPR, and other national and regional privacy laws. Regardless of where you are located, we apply consistent baseline standards to the handling of your data. Where your local law provides you with additional rights or protections beyond those described in this Policy, those rights apply to you and are not diminished by this Policy.
This Policy uses the same defined terms as our Terms of Service. By using our Services, you acknowledge that you have read and understood this Policy.
If you have questions about how we handle your data, see Section 15.
TierTests is the data controller for personal data processed through our Services. As data controller, we determine the purposes and means by which your personal data is processed.
For the purposes of the LGPD, TierTests is the "controller" (controlador) of your personal data.
Contact information for data-related enquiries is provided in Section 15.
We collect the following categories of personal data:
| Data | Source | Description |
|---|---|---|
| Discord ID | Discord OAuth | Your unique Discord user identifier, used as your primary account key |
| Discord username and avatar | Discord OAuth | Your display name and profile picture at the time of registration |
| Minecraft UUID and username | Mojang API (via your registration) | Linked to your account for identity verification and tier display |
| Account creation and update timestamps | System-generated | Records of when your account was created or last modified |
| Data | Source | Description |
|---|---|---|
| Geographic region (EU, NA, AS) | You (chosen at registration) | Used for matchmaking and queue assignment |
| Tier rankings and tier history | System-generated from test outcomes | Your skill tier per gamemode and a full audit log of changes |
| Test records | System-generated | Test ID, participants, gamemode, assigned tier, status, timestamps, and scores |
| Tester status | Assigned by staff | Whether you hold Tester or Senior Tester status for any gamemode |
| Vouch records | You and other users | Vouch sender, recipient, gamemode, tier, and timestamp |
| Queue data | System-generated | Temporary queue position and priority score during active matchmaking |
| Cooldown records | System-generated | Post-test cooldown expiry times per gamemode |
| Cooldown reset count | System-generated | Number of cooldown resets used |
| Data | Source | Description |
|---|---|---|
| Account standing | Assigned by staff or system | Your standing status (Excellent, Good, Average, Poor, Terrible, Blacklisted) |
| Blacklist records | Assigned by staff | Reason, evidence, issuer, and expiry (or permanent flag) |
| Punishment history | Assigned by staff | Records of bans, warnings, and other enforcement actions |
| Data | Source | Description |
|---|---|---|
| Social links | You (optional) | Links to your YouTube, Twitch, X/Twitter, TikTok, or Kick profiles |
| Preferred servers | You (optional) | Minecraft server IPs you associate with a gamemode |
| Accent colour | You (optional) | A display colour preference for your public profile |
| Profile view count | System-generated | Number of times your public profile has been viewed |
| Handle / display name | You (optional) | A custom display name subject to our Terms |
| Data | Source | Description |
|---|---|---|
| IP address | You (collected at registration) | When you register a Minecraft account via the /register command, we record and store your IP address for region detection and to help detect ban evasion, multi-accounting, and other abuse |
| API keys | System-generated upon request | Keys and associated permission sets for API access |
| Rate-limiting data | System-generated | Request counts used to enforce rate limits (not logged permanently) |
Payment processing is handled entirely by Polar as our Merchant of Record. We do not directly collect or store payment card details, billing addresses, or other payment credentials. However, we receive from Polar:
For full details of what Polar collects, see their Privacy Policy.
We do not intentionally collect:
We strongly advise you not to include real names, email addresses, or other personally identifying information in your Minecraft or Discord usernames, or in any content you submit to us.
Under the GDPR (Article 6) and LGPD (Article 7), we are required to have a lawful basis for processing your personal data. The following table sets out the lawful bases we rely on:
| Processing Activity | Lawful Basis (GDPR) | Lawful Basis (LGPD) |
|---|---|---|
| Providing tier testing, matchmaking, and core services | Contract — Art. 6(1)(b) | Contract — Art. 7(V) |
| Maintaining tier history and public leaderboards | Legitimate interests — Art. 6(1)(f) | Legitimate interests — Art. 7(IX) |
| Moderation, blacklisting, and platform safety | Legitimate interests — Art. 6(1)(f) | Legitimate interests — Art. 7(IX) |
| Processing purchases and managing subscriptions | Contract — Art. 6(1)(b) | Contract — Art. 7(V) |
| Retaining transaction records for financial/legal compliance | Legal obligation — Art. 6(1)(c) | Legal obligation — Art. 7(II) |
| Operating the vouch system and public profiles | Contract / Legitimate interests — Art. 6(1)(b)(f) | Contract / Legitimate interests — Art. 7(V)(IX) |
| Displaying data via the Tier Tagger mod and public API | Legitimate interests — Art. 6(1)(f) | Legitimate interests — Art. 7(IX) |
| Storing IP addresses at registration for region detection and abuse prevention | Legitimate interests — Art. 6(1)(f) | Legitimate interests — Art. 7(IX) |
Our legitimate interests include: operating a fair and transparent skill ranking platform; maintaining platform integrity and safety; preventing cheating, fraud, and abuse; and providing accurate public records of tier testing outcomes for the benefit of the community.
Where we rely on legitimate interests, you have the right to object to processing — see Section 9.
We use your personal data for the following purposes:
We do not use your personal data for:
We retain different categories of data for different periods depending on the purpose for which it is held:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Until account deletion, plus any legally required period thereafter |
| IP address collected at registration | Until account deletion, except where retained longer for the detection of ban evasion or abuse |
| Tier rankings and tier history | Indefinitely — as part of the permanent platform record, even after account deletion (see below) |
| Test records | Indefinitely — to preserve the integrity of match history for all participants |
| Queue and cooldown data | Deleted shortly after use or expiry |
| Account linking verification codes | Deleted immediately after use or expiry |
| Vouch records | Until account deletion, subject to platform integrity considerations |
| Moderation and blacklist records | Indefinitely — for platform safety and to enforce bans against future accounts |
| Transaction records | Retained for a minimum of 7 years to comply with financial and legal obligations |
| API keys | Until revoked or account deletion |
| Profile and preference data | Until account deletion |
Regarding indefinite retention of tier and test records: Test records necessarily involve multiple participants. Deleting one user's contribution to a test record would affect the records of other users and compromise the integrity of the platform. Accordingly, we retain test outcomes and tier audit history permanently, but will anonymise your identifying information from these records upon account deletion wherever technically feasible.
When your account is deleted, we will anonymise or delete your personal data as described above within 30 days, except where a longer retention period is required by law or legitimate interest.
We do not sell your personal data. We share data with third parties only as described below:
We use Discord OAuth 2.0 for authentication. Your Discord ID, username, and avatar are retrieved from Discord when you register. Ongoing use of our Discord bot involves Discord processing your messages and interactions in accordance with Discord's own terms and policies.
Our Store is powered by Polar, who acts as our Merchant of Record. Polar processes all payments on our behalf and handles payment card data, billing information, and financial compliance. When you make a purchase, you are entering into a payment relationship with Polar.
We receive from Polar: purchase confirmations, subscription status, and a Polar customer ID. We share with Polar: your Discord ID (to link your purchase to your TierTests account) and the products you have purchased.
We use Mojang's official APIs (via our servers, with caching and rate-limit handling) to resolve Minecraft usernames and UUIDs and to verify account ownership during the /register process. We also use MC-Heads and MCStats to render your Minecraft skin and avatar on your public profile.
We use Cloudflare for infrastructure, content delivery, DDoS protection, and web analytics. Cloudflare may process your IP address and basic request metadata as part of this service.
We use the YouTube Data API to retrieve metadata for videos submitted to the platform or displayed on profile pages. We do not share your personal data with Google/YouTube — only video URLs are looked up.
During the store checkout process, we use GeoJS (geojs.io) to infer your country from your IP address for the purpose of displaying the correct currency. Your IP address is sent to GeoJS for this lookup only and is not permanently stored in our systems.
Tier rankings, usernames, and leaderboard data are accessible via our public API. This includes access by the Tier Tagger mod (available on Modrinth), which displays player rankings in-game. By registering with TierTests, you acknowledge that your tier data and linked identifiers are publicly accessible.
Some of our third-party service providers process data in countries outside the one in which you reside. Where your local law restricts or regulates the international transfer of personal data (for example, transfers outside the EEA under GDPR, or transfers outside Brazil under LGPD), we rely on appropriate legal mechanisms to make those transfers lawful, which may include:
If you would like further information about the specific safeguards applied to transfers of your data, please contact us as described in Section 15.
Key transfer destinations:
If you would like further information about the specific safeguards applied to your data transfers, please contact us as described in Section 15.
Depending on your location, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days (or up to 60 days for complex requests, with notice of the extension).
You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format. Requests that are manifestly unfounded or excessive may incur a reasonable administrative fee.
If any data we hold about you is inaccurate or incomplete, you may request that we correct it. We will endeavour to resolve such requests within 30 days.
You may request deletion of your TierTests account and associated personal data. Requests are processed within 30 days, after which confirmation will be sent via Discord DM.
Please note the following limitations on erasure:
Account deletion does not remove data from Discord's own systems — please contact Discord directly for that.
You may request that we restrict the processing of your data in certain circumstances — for example, while we verify a rectification request, or while an objection is pending.
Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, or to request that we transmit it to another controller.
Where we process your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
You may particularly wish to object to the use of your data for public leaderboard display or the Tier Tagger mod. Note that, given the nature of our platform, objecting to public display of tier data may prevent us from providing the full Service.
See Section 13 for information about automated processing and your associated rights.
Where we rely on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Depending on your country of residence, you may have additional data protection rights beyond those listed above. For example:
If you believe you have a right under your local law that is not addressed in this Policy, please contact us — we will assess and respond to your request in accordance with applicable law.
To exercise any of the above rights, please create a support ticket in our Discord server. We may need to verify your identity before processing your request. You will not be charged for reasonable requests.
Our Services are not directed at individuals under the age of 13. We do not knowingly collect personal data from anyone under 13.
Many jurisdictions require parental or guardian consent for minors to use digital services or have their data processed. The applicable minimum age and consent requirements vary by country. If your local law sets a minimum age for digital consent higher than 13, or requires parental consent for users below a certain age, those requirements apply to you and must be met before using our Services.
If you believe a minor has registered without the required parental consent, please contact us immediately so we can take appropriate action.
If we become aware that we have collected personal data from an individual below the applicable minimum age without proper consent, we will delete that data promptly.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction, including:
No system is completely secure. While we take these measures seriously, we cannot guarantee absolute security and are not liable for unauthorised access caused by factors outside our reasonable control.
We are committed to transparency. In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
Breach notifications to users will be communicated via Discord DM and/or an announcement in our Discord server.
Our Services include automated systems that may affect your account, including:
These systems do not produce solely automated decisions with significant legal or similarly significant effects as defined by GDPR Article 22 — all significant enforcement decisions (such as blacklists and bans) involve human review. However, automated actions (such as queue removal or cooldown application) may affect your access to features.
Under GDPR Article 22 and LGPD Article 20, you have the right to request human review of any automated decision that significantly affects you. To do so, please contact us via a support ticket in our Discord server.
We may update this Policy at any time. Where changes are material, we will provide reasonable notice — typically by posting an announcement in our Discord server. The updated Policy will be effective as of the date shown at the top of this document.
We recommend reviewing this Policy regularly. Continued use of our Services after the updated Policy becomes effective constitutes acceptance of the changes.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us by creating a support ticket in our Discord server: tiertests.com.
We aim to respond to all data-related enquiries within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority:
You have the right to lodge a complaint with the data protection or privacy authority in your country or region. The relevant authority depends on where you are located. Some examples:
We would, however, appreciate the opportunity to address your concerns directly before you approach a regulator.
© 2026 TierTests. All rights reserved.