Privacy Policy
Last updated: June 2026
1. What we collect
Account data: if you choose to sign in (to save a watchlist or alerts), your email address, a hashed password (scrypt), and the OAuth provider if you use Google or Microsoft. We never store your Google or Microsoft password.
Watchlist & alerts: the Minecraft names you choose to watch and your alert preferences, so we can notify you when an estimate or availability status changes.
Usage data: the names you look up, and Minecraft UUIDs / availability checked through the official public Mojang API, used to produce valuations and market intelligence.
Audit logs: timestamps, IP addresses, and action types for security-relevant events (such as logins). Retained for 90 days.
namenab is a valuation and market-intelligence service. We do not buy, sell, broker, escrow, or transfer accounts, and we never take custody of any Minecraft or Microsoft account credentials.
2. How we use it
We use your data to operate the service: produce valuations and market intelligence, maintain your watchlist, send the alert and verification emails you ask for, and keep the service secure. We do not sell your data or use it for advertising.
3. Data sharing
We share data with the providers that run our infrastructure: Resend (transactional email) and Neon (database hosting). All sub-processors are bound by confidentiality obligations.
4. Microsoft & Google sign-in
If you sign in with Microsoft or Google, we receive a basic profile (such as your email address) to create your account. We do not receive your provider password, and we do not request access to your Minecraft account or its credentials.
5. Cookies
We use one session cookie (nn_session): an HMAC-signed, httpOnly cookie that authenticates your session. It expires after 14 days. We do not use tracking or advertising cookies.
6. Data retention
Account and watchlist data is retained until you delete your account. Alert subscriptions are retained until you unsubscribe. Audit logs are retained for 90 days.
7. Your rights
You may request deletion of your account and associated data at any time by emailing admin@namenab.xyz. We will fulfil deletion requests within 30 days, except for data we are required to retain by law.
8. Security
Passwords are hashed with scrypt (never stored in plaintext). Sessions use HMAC-SHA256. We serve over HTTPS only. Because we never broker transactions, we hold no payment details or account credentials.
9. Contact
Privacy questions: admin@namenab.xyz