Privacy Policy
Last updated: October 3, 2026
1. What we collect
Account data: if you choose to create an account (to save a watchlist), your email address and a hashed password (scrypt), or — if Google sign-in is offered and you use it — the fact that you signed in with Google. We never receive or store your Google password.
Watchlist: the Minecraft names you choose to watch, so your account page can show their current quotes and Mojang status. namenab does not send alert emails.
Usage data: the names you look up, and Minecraft UUIDs / availability checked through the official public Mojang API, used to produce valuations and market intelligence.
Audit logs: timestamps, IP addresses, and action types for security-relevant events (such as logins). Retained for 90 days.
namenab is a valuation and market-intelligence service. We do not buy, sell, broker, escrow, or transfer accounts, and we never take custody of any Minecraft or Microsoft account credentials.
2. How we use it
We use your data to operate the service: produce valuations and market intelligence, maintain your watchlist, send account-verification email when that is enabled, and keep the service secure. We do not sell your data or use it for advertising.
3. Data sharing
We share data only with the providers that run our infrastructure: Vercel (website hosting and cookieless page-view analytics), Neon (database hosting) and, when account email is enabled, Resend (transactional email). All sub-processors are bound by confidentiality obligations.
4. Google sign-in
If Google sign-in is offered and you use it, we receive a basic profile (your email address) to create your account. We do not receive your provider password, and we do not request access to your Minecraft account or its credentials.
5. Cookies
We use a session cookie (nn_session): an HMAC-signed, httpOnly cookie that authenticates your session and expires after 14 days; and, only during a Google sign-in, a short-lived nn_oauth_state cookie that protects the sign-in from forgery. We do not use tracking or advertising cookies. We use Vercel Web Analytics, which counts anonymized page views (the page, the referring site, country and device type) without cookies and without identifying you.
6. Data retention
Account and watchlist data is retained until you delete your account. Audit logs are retained for 90 days.
7. Your rights
You may request deletion of your account and associated data at any time by emailing admin@namenab.xyz. We will fulfil deletion requests within 30 days, except for data we are required to retain by law.
8. Security
Passwords are hashed with scrypt (never stored in plaintext). Sessions use HMAC-SHA256. We serve over HTTPS only. Because we never broker transactions, we hold no payment details or account credentials.
9. Contact
Privacy questions: admin@namenab.xyz