Cubaster

Privacy Policy

Last updated: April 13, 2026

1. Operator

Cubaster is provided by Капуста ("we", "us"). For privacy questions, contact cubaster@proton.me.

2. Summary

The App does not use advertising SDKs, cross-app tracking, or third-party analytics SDKs that profile users for marketing.

The App connects to game servers selected by the user. Those third-party servers may process the player's IP address, username, chat, and gameplay traffic under their own policies. When you open the Recommended tab, the App also sends a standard status ping to each recommended server to show live online count and latency. This happens before you choose to connect, and the recommended server receives your IP address as part of that ping.

The App also fetches a recommended-server catalog from Cubaster servers and may send optional aggregated recommended-server telemetry. This telemetry does not include account identifiers, advertising identifiers, Android ID, device ID, chat content, gameplay content, contact lists, or device files.

If you open the report form for a recommended server, we may process the server ID, report reason, optional details, and submission time. Please do not include unnecessary personal data in the free-text field.

If the App is distributed through Google Play, Google may process technical data required to deliver the app and asset packs under Google's own policies.

3. What We Do Not Do

We do not use Firebase Analytics, AdMob, AppsFlyer, Adjust, Mixpanel, Amplitude, Sentry, Crashlytics, or similar advertising or marketing SDKs to profile users.

We do not sell user data and do not share user data with data brokers.

We do not provide our own developer-run account system inside the App. We do not collect contacts, address books, photos, precise location, or payment card data through the App.

However, the App does perform limited network operations described below. For the current version of the App, a blanket statement such as "we do not process any data at all" would be inaccurate.

4. What Data We Process and Why

4.1. Connections to third-party game servers. When you connect to a game server, the App creates a direct connection to that server. That server may process the player's IP address, username, chat, gameplay traffic, and other session data under that server operator's own policies. We do not control and are not responsible for the privacy practices of third-party game servers.

4.1a. Status pings to recommended servers. When you open the Recommended tab in Multiplayer, the App sends a standard Minecraft status ping to each recommended server. This happens before you choose to connect. The purpose is to show live online player count and connection latency. This ping is a direct network contact with the recommended server operator. The recommended server receives your IP address as part of the standard network connection. We do not receive or store data from these pings. The recommended server operator's own privacy policy governs how they handle connection data.

4.2. Recommended server catalog and icon assets. The App fetches a recommended-server catalog from https://servers.cubaster.com/catalog/v1/recommended-servers.json and, as a fallback, https://cubaster.com/catalog/v1/recommended-servers.json. If a recommended server has an approved icon, the App also fetches the icon image from https://servers.cubaster.com/catalog/v1/icons/ or the same fallback host. These requests are used to display recommended servers in Multiplayer. To deliver the response and apply rate limiting, network infrastructure technically processes the connection IP address. At the OS, VPS, and transport level, the IP address may briefly exist in network handling, but it is not forwarded into the application backend and is not stored in the application database for these endpoints.

4.3. Optional aggregated recommended-server telemetry. The App includes a recommendedTelemetry setting in Online Options. It is disabled by default. Telemetry is sent only if the user explicitly enables this setting. When enabled, the App may send aggregated recommended-server events such as impression, join, add_to_favorites, hide, and report.

This telemetry does not include user id, account name, Advertising ID, Android ID, device ID, chat content, gameplay content, contact lists, or device files. The current payload contains technical batch fields such as batchId, clientVersion, and sentAtEpochMs, plus aggregated counters by action and serverId.

4.4. Reports about recommended servers. If you open the report form, we may process server_id, the report reason, optional details, and submission time. Do not include unnecessary personal data in the free-text field. The App backend does not store IP addresses in the report record.

4.5. Google Play. If the App is distributed through Google Play, Google may process technical data needed for publishing, app download, asset pack delivery, and store infrastructure. That processing is governed by Google's own policies, not this page.

5. Legal Bases

We process data to the extent necessary to operate the App's network features, display the recommended-server catalog, prevent abuse, handle reports, and respond to support requests.

For optional recommendedTelemetry, the basis is the user's explicit choice to enable that setting. For the other operations described above, the basis is operation of the service and our legitimate interests in support, security, abuse prevention, and moderation.

6. Retention

Recommended telemetry batches: up to 30 days.

Reports about recommended servers: up to 365 days.

Email and support requests: for as long as reasonably necessary to respond, follow up, and comply with legal obligations.

When retention is no longer necessary for the stated purposes, the data is deleted or no longer kept in the active application data path.

7. Your Rights

You may request access, correction, deletion, or restriction of data that we actually control. You may also object to processing based on legitimate interests and change the recommendedTelemetry setting in the App.

To make a request, email cubaster@proton.me and describe the data and action involved. We may request minimal information needed to verify the request and prevent abuse.

If GDPR, UK GDPR, or similar rules apply to you, you may also contact the relevant supervisory authority.

8. Children

The App is a general-audience game and is not intended specifically for children under 13. We do not knowingly collect personal data from children under 13 through a developer-run account system because the App does not provide one.

If you believe a child under 13 has sent us personal data through the report form or by email, contact cubaster@proton.me, and we will review and delete it where appropriate.

9. Security

We try to minimize the amount of data processed. For the catalog, optional telemetry, and report endpoints, nginx access logs for these endpoints are disabled, and IP headers are not forwarded into the backend application. Recommended telemetry does not use account identifiers or advertising identifiers.

No technical measure can provide an absolute security guarantee. If you have a question about a specific privacy or security risk, email us at the address above.

10. Changes to This Policy

We may update this Privacy Policy when the App, backend, app store requirements, or legal requirements change. The updated version will be published on this page with a new revision date.

11. Contact

Email: cubaster@proton.me

This page is the Privacy Policy URL for app store use.

← Back to Home